Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44755 State: PUBLISHED Published: 2022-12-17T01:57:45.446Z Last Updated: 2025-04-17T14:31:34.058Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: Notes Problem Types: n/a Description: HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44751. This vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2022-44756 State: PUBLISHED Published: 2022-12-19T21:17:57.664Z Last Updated: 2025-04-16T18:13:11.398Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Insights for Vulnerability Remediation Problem Types: n/a Description: Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information disclosure. This requires privileged access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102168
CVE ID: CVE-2022-44757 State: PUBLISHED Published: 2023-10-11T06:13:27.405Z Last Updated: 2024-09-18T18:09:57.783Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Insights for Vulnerability Remediation Description: BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108005
CVE ID: CVE-2022-44758 State: PUBLISHED Published: 2023-10-11T06:00:38.185Z Last Updated: 2024-09-18T20:51:19.166Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Insights for Vulnerability Remediation Description: BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108005
CVE ID: CVE-2022-44759 State: PUBLISHED Published: 2025-04-24T20:38:36.710Z Last Updated: 2025-04-25T19:33:20.019Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-79 Description: Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2022-44760 State: PUBLISHED Published: 2025-04-24T20:37:58.961Z Last Updated: 2025-04-25T19:36:09.092Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-434 Description: Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2022-44784 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:54:25.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of services provided by the Axis 1.4 instance, embedded directly into the applications, as hinted by the WEB-INF/web.xml file leaked through Local File Inclusion. Among the exposed services, there is the Axis AdminService, which, through the default configuration, should normally be accessible only by the localhost. Nevertheless, by trying to access the mentioned service, both in LFS and DL229, the service can ac
nly by the localhost. Nevertheless, by trying to access the mentioned service, both in LFS and DL229, the service can actually be reached even by remote users, allowing creation of arbitrary services on the server side. When an attacker can reach the AdminService, they can use it to instantiate arbitrary services on the server. The exploit procedure is well known and described in Generic AXIS-SSRF exploitation. Basically, the attack consists of writing a JSP page inside the root directory of the web application, through the org.apache.axis.handlers.LogHandler class. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE ID: CVE-2022-44785 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:51:22.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE ID: CVE-2022-44786 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:47:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do POST and GET requests to each application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE ID: CVE-2022-44787 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:45:58.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appalti & Contratti 9.12.2. The web applications are vulnerable to a Reflected Cross-Site Scripting issue. The idPagina parameter is reflected inside the server response without any HTML encoding, resulting in XSS when the victim moves the mouse pointer inside the page. As an example, the onmouseenter attribute is not sanitized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilitie
r: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE ID: CVE-2022-44788 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:44:24.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first visit, the cookie value is not updated after a successful login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE ID: CVE-2022-44789 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T19:51:11.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ccxvii/mujs/commit/edb50ad66f7601ca9a3544a0e9045e8a8c60561f - https://github.com/alalng/CVE-2022-44789/blob/main/PublicReferenceURL.txt - https://github.com/ccxvii/mujs/releases/tag/1.3.2 - https
b.com/alalng/CVE-2022-44789/blob/main/PublicReferenceURL.txt - https://github.com/ccxvii/mujs/releases/tag/1.3.2 - https://www.debian.org/security/2022/dsa-5291 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MC6PLHTXHZ7GW7QQGTLBHLXL47UHTHXO/
CVE ID: CVE-2022-44790 State: PUBLISHED Published: 2022-12-09T00:00:00.000Z Last Updated: 2025-04-23T14:15:14.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.interspire.com/security-bulletin-2022-44790/
CVE ID: CVE-2022-44792 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T16:12:17.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/net-snmp/net-snmp/issues/474 - https://gist.github.com/menglong2234/b7bc13ae1a144f47cc3c95a7ea062428 - https://lists.debian.org/debian-lts-announc
74 - https://gist.github.com/menglong2234/b7bc13ae1a144f47cc3c95a7ea062428 - https://lists.debian.org/debian-lts-announce/2023/01/msg00010.html - https://security.netapp.com/advisory/ntap-20230223-0011/
CVE ID: CVE-2022-44793 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T16:12:07.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/net-snmp/net-snmp/issues/475 - https://gist.github.com/menglong2234/d07a65b5028145c9f4e1d1db8c4c202f - https://lists.debian.org/debian-lts-announce/2023/01/msg0001
.github.com/menglong2234/d07a65b5028145c9f4e1d1db8c4c202f - https://lists.debian.org/debian-lts-announce/2023/01/msg00010.html - https://security.netapp.com/advisory/ntap-20230223-0011/
CVE ID: CVE-2022-44794 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T17:42:55.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname doesn't validate input parameters. As a result, arbitrary data goes directly to the Bash interpreter. An attacker would need credentials to exploit this vulnerability. This is fixed in Object First Ootbi BETA build 1.0.13.1611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
ect First Ootbi BETA build 1.0.13.1611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://objectfirst.com/security/of-20221024-0001/
CVE ID: CVE-2022-44795 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T17:41:38.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could lead to local information disclosure. The command that creates the URL for the support bundle uses an insecure RNG. That can lead to prediction of the generated URL. As a result, an attacker can get access to system logs. An attacker would need credentials to exploit this vulnerability. This is fixed in Object First Ootbi BETA build 1.0.13.1611. Important note - This vulnerability is related to the Object
his is fixed in Object First Ootbi BETA build 1.0.13.1611. Important note - This vulnerability is related to the Object First Ootbi BETA version, which is not released for production and therefore has no impact on the production environment. The production-ready Object First Ootbi version will have this vulnerability fixed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://objectfirst.com/security/of-20221024-0003/
CVE ID: CVE-2022-44796 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T17:39:44.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn't produce cryptographically strong sequences. An attacker can predict these sequences and generate a JWT token. As a result, an attacker can get access to the Web UI. This is fixed in Object First Ootbi BETA build 1.0.13.1611. Additional Analyst Notes: - CVE
an get access to the Web UI. This is fixed in Object First Ootbi BETA build 1.0.13.1611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://objectfirst.com/security/of-20221024-0002/
CVE ID: CVE-2022-44797 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T17:38:04.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lightningnetwork/lnd/issues/7002 - https://github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta - https://github.com/btcsuite/btcd/pull/1896 - https://github.com/btcsuite/btcd/releases/tag/v0.23.2
CVE ID: CVE-2022-44801 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T19:39:46.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-878/3
CVE ID: CVE-2022-44804 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T19:38:40.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/2
CVE ID: CVE-2022-44806 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T19:37:01.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/4
CVE ID: CVE-2022-44807 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T19:36:01.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/5
CVE ID: CVE-2022-44808 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-25T21:07:37.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function executes an untrusted command that triggers the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/RobinWang825/IoT_v
CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-823G/2 - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1
CVE ID: CVE-2022-44820 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T19:01:42.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huchengrong/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/SQLi-4.md
CVE ID: CVE-2022-44830 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:42:37.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RashidKhanPathan/CVE-2022-44830
CVE ID: CVE-2022-44832 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:53:22.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/flamingo1616/iot_vuln/blob/main/D-Link/DIR-3040/6.md
CVE ID: CVE-2022-44838 State: PUBLISHED Published: 2022-12-09T00:00:00.000Z Last Updated: 2025-04-23T14:13:43.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/view_service.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GkaMei/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/SQLi-1.md
CVE ID: CVE-2022-44840 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:15:33.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29732
CVE ID: CVE-2022-44843 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-29T14:34:40.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/1
CVE ID: CVE-2022-44844 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-29T14:32:45.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/2
CVE ID: CVE-2022-44849 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T13:53:31.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/MetInfo_1/MetInfo/issues/I5YM81?from=project-issue
CVE ID: CVE-2022-44858 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-29T14:30:16.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thir3een/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/SQLi-1.md
CVE ID: CVE-2022-44859 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-29T14:28:39.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thir3een/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/SQLi-2.md
CVE ID: CVE-2022-44860 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-29T14:27:33.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thir3een/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/SQLi-3.md
CVE ID: CVE-2022-44870 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:38:15.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/magicblack/maccms10/issues/986 - https://github.com/Cedric1314/CVE-2022-44870/blob/main/README.md
CVE ID: CVE-2022-44874 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:20:52.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at /m3_exec.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wasm3/wasm3/issues/380