Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42973 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-02-05T20:06:29.119Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: APC Easy UPS Online Monitoring Software, Schneider Electric Easy UPS Online Monitoring Software Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 1
0, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_SEVD-2022-347-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-347-01_Easy_UPS_Online
ric.com/files?p_Doc_SEVD-2022-347-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-347-01_Easy_UPS_Online_Monitoring_Software_Security_Notification.pdf
CVE ID: CVE-2022-42974 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-08-03T13:19:05.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting (XSS) attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system update, thus allowing one to inject HTML and/or JavaScript on the page that will then be processed and stored by the application. Any subsequent requests to pages that retrieve the malicious content will automatically exploit the v
y the application. Any subsequent requests to pages that retrieve the malicious content will automatically exploit the vulnerability on the victim's browser. This also happens because the tag is loaded in the function innerHTML in the page HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40daviddepaulasantos/how-we-got-a-cve-for-a-dom-based-stored-xss-on-a-solar-panel-917b9d7b2545
CVE ID: CVE-2022-42975 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-10T03:06:11.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/phoenixframework/phoenix/commit/6e7185b33a59e0b1d1c0b4223adf340a73e963ae
CVE ID: CVE-2022-42977 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T18:18:11.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system (e.g., an SSH private key) to be downloaded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/CveCt0r/34251664a511f1045ce6a5492e94eec1
CVE ID: CVE-2022-42978 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T18:03:41.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated attacker could access files on the remote system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/CveCt0r/34251664a511f1045ce6a5492e94eec1
CVE ID: CVE-2022-42979 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:43:46.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a deep link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40jalee0606/how-i-found-my-first-one-click-account-takeover-via-deeplink-in-ryde-5406010c36d8
CVE ID: CVE-2022-42980 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-10T03:01:36.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/go-admin-team/go-admin/issues/716
CVE ID: CVE-2022-42982 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T13:55:22.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks. Normally, only authenticated streaming data will be provided over UDP and not the sourcetable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.mahi.be/bkg_ntrip_udp/ - https://ig
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.mahi.be/bkg_ntrip_udp/ - https://igs.bkg.bund.de/ntrip/bkgcaster
CVE ID: CVE-2022-42983 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-10T02:59:28.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anji-plus/report/issues/7 - https://gitee.com/anji-plus/report/issues/I5VVZ0
CVE ID: CVE-2022-42984 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:03:23.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nhiephon/Research - https://www.wowonder.com/
CVE ID: CVE-2022-42985 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-25T20:42:03.569Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/InternationalScratchWiki/mediawiki-scratch-login/pull/22 - https://github.com/InternationalScratchWiki/mediawiki-scratch-login/blob/4d2c1229b558b9cd68596127
cratch-login/pull/22 - https://github.com/InternationalScratchWiki/mediawiki-scratch-login/blob/4d2c1229b558b9cd685961274f20b621d114f4db/ScratchLogin.common.php#L104
CVE ID: CVE-2022-42986 State: REJECTED Published: N/A Last Updated: 2023-08-03T00:00:00 Description: No description available.
CVE ID: CVE-2022-42989 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:20:20.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa de Entrada. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://erp.com - http://sankhya.com - https://github.com/0xLUC4S/CVEs/blob/main/SankhyaERP_XSS_Account_Takeover.txt
CVE ID: CVE-2022-42990 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T17:52:09.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YorkLee2022/bug_report/blob/main/vendors/onetnom23/Food%20Ordering%20Management%20System/SQLi-1.md
CVE ID: CVE-2022-42991 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T13:27:03.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://simple.com - http://oretnom23.com - https://github.com/draco1725/POC/blob/main/Exploit/Simple%20Online%20Public%20Access%20Catalog/XSS
CVE ID: CVE-2022-42992 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T13:25:33.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://train.com - http://oretnom23.com - https://github.com/draco1725/POC/blob/main/Exploit/Train%20Scheduler%20App/XSS
CVE ID: CVE-2022-42993 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-12T19:54:37.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Setup page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://password.com - http://oretnom23.com - https://github.com/draco1725/POC/blob/main/Exploit/Password%20Storage%20Application/XSS
CVE ID: CVE-2022-42998 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-05-07T13:51:11.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/form2IPQoSTcAdd
CVE ID: CVE-2022-42999 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-05-07T13:48:59.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/setSysAdm
CVE ID: CVE-2022-43000 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-05-07T13:47:29.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/form2WizardStep4
CVE ID: CVE-2022-43001 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-05-07T13:46:10.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/setSecurity
CVE ID: CVE-2022-43002 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-05-07T13:43:46.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/form2WizardStep54
CVE ID: CVE-2022-43003 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-05-07T13:42:22.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/setRepeaterSecurity
CVE ID: CVE-2022-43014 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T18:46:13.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_joborderID.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43014
CVE ID: CVE-2022-43015 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T18:51:58.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_entriesPerPage.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43015
CVE ID: CVE-2022-43016 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T18:56:25.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_callback.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43016
CVE ID: CVE-2022-43017 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T18:59:39.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_indexFile.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43017
CVE ID: CVE-2022-43018 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T19:04:28.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter in the Check Email function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_checkEmail.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43018
CVE ID: CVE-2022-43019 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T19:10:16.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/RCE_via_deserialisation.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43019
CVE ID: CVE-2022-43020 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-15T19:13:35.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/SQLI_in_Tag_Updates.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43020
CVE ID: CVE-2022-43021 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-17T13:27:54.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/SQLI_JobOrders.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43021
CVE ID: CVE-2022-43022 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-17T13:44:41.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/SQLI_tag_deletion.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43022
CVE ID: CVE-2022-43023 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-09-17T13:34:38.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hansmach1ne/opencats_zero-days/blob/main/SQLI_imports_errors.md - https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43023
CVE ID: CVE-2022-43024 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:04:46.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-6.md
CVE ID: CVE-2022-43025 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:59:14.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-1.md
CVE ID: CVE-2022-43026 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:54:31.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-2.md
CVE ID: CVE-2022-43027 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:38:02.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the firewallEn parameter at /goform/SetFirewallCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-5.md
CVE ID: CVE-2022-43028 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:37:27.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-3.md
CVE ID: CVE-2022-43029 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:36:52.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-4.md
CVE ID: CVE-2022-43030 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-05-01T13:31:14.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management system based on ThinkPaP5 AdminLTE. SIYUCMS has a background command execution vulnerability, which can be used by attackers to gain server privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cai-niao98/siyu - https://github.com/cai-niao98/siyu/blob/main/README.md
CVE ID: CVE-2022-43031 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:07:14.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cai-niao98/Dedecmsv6 - https://gist.github.com/cai-niao98/77a7aa934492c2d651b37b75243eda0b
CVE ID: CVE-2022-43032 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:32:43.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42aac. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/763