Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30451 State: PUBLISHED Published: 2022-05-11T18:09:51 Last Updated: 2024-08-03T06:48:36.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version 9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/6a504753-caa2-4b5e-95a7-a3e5f9485e44
CVE ID: CVE-2022-30452 State: PUBLISHED Published: 2022-05-11T17:53:54 Last Updated: 2024-08-03T06:48:36.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/a4391512-502b-48aa-a31b-a9297daa4f7d
CVE ID: CVE-2022-30453 State: PUBLISHED Published: 2022-05-11T17:55:12 Last Updated: 2024-08-03T06:48:36.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShopWind <= 3.4.2 has a RCE vulnerability in Database.php Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/9a561b8c-734b-4ab5-b980-e794a457a2e5
CVE ID: CVE-2022-30454 State: PUBLISHED Published: 2022-05-24T12:53:41 Last Updated: 2024-08-03T06:48:36.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQL-1.md
CVE ID: CVE-2022-30455 State: PUBLISHED Published: 2022-05-24T12:59:09 Last Updated: 2024-08-03T06:48:36.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/badminton-center-management-system/blob/main/badminton-center-management-system.md
CVE ID: CVE-2022-30456 State: PUBLISHED Published: 2022-05-24T12:56:42 Last Updated: 2024-08-03T06:48:36.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/badminton-center-management-system/blob/main/badminton-center-management-system-xss.md
CVE ID: CVE-2022-30457 State: REJECTED Published: 2022-05-24T14:16:19 Last Updated: 2022-05-24T14:18:25 Description: No description available.
CVE ID: CVE-2022-30458 State: PUBLISHED Published: 2022-05-24T13:22:44 Last Updated: 2024-08-03T06:48:36.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/automotive/blob/main/automotive-shop-management-system/xss.md
CVE ID: CVE-2022-30459 State: PUBLISHED Published: 2022-05-24T13:34:39 Last Updated: 2024-08-03T06:48:36.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simple_chat_bot/classes/Master.php?f=delete_response, id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/chatbot/blob/main/chatbot-app-suggestion-phpoop/sql.md
CVE ID: CVE-2022-30460 State: PUBLISHED Published: 2022-05-24T13:15:23 Last Updated: 2024-08-03T06:48:36.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes/Users.php?f=save, firstname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/sns_bug_report/blob/main/simple-social-networking-site-instagram/xss.md
CVE ID: CVE-2022-30461 State: PUBLISHED Published: 2022-05-24T13:49:36 Last Updated: 2024-08-03T06:48:36.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete_client, id Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/wbms_bug_report/blob/main/water-billing-management-system/sql.md
CVE ID: CVE-2022-30462 State: PUBLISHED Published: 2022-05-24T13:48:37 Last Updated: 2024-08-03T06:48:36.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/wbms_bug_report/blob/main/water-billing-management-system/xss.md
CVE ID: CVE-2022-30463 State: PUBLISHED Published: 2022-05-24T13:24:52 Last Updated: 2024-08-03T06:48:36.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/automotive/blob/main/automotive-shop-management-system/sql.md
CVE ID: CVE-2022-30464 State: PUBLISHED Published: 2022-05-24T13:33:31 Last Updated: 2024-08-03T06:48:36.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting (XSS) via /simple_chat_bot/classes/Master.php?f=save_response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/chatbot/blob/main/chatbot-app-suggestion-phpoop/xss.md
CVE ID: CVE-2022-30466 State: PUBLISHED Published: 2022-06-07T20:15:08 Last Updated: 2024-08-03T06:48:36.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture-replay. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsbogam/ebike
CVE ID: CVE-2022-30467 State: PUBLISHED Published: 2022-06-29T19:12:55 Last Updated: 2024-08-03T06:48:36.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote attackers to jam the key fob request via RF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsbogam/ebike-jammer/blob/main/README.md - https://github.com/nsbogam/ebike-jammer
CVE ID: CVE-2022-30469 State: PUBLISHED Published: 2022-06-06T20:06:42 Last Updated: 2024-08-03T06:48:36.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman&section=get&page=grid` leads to SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://filerun.com/changelog - https://github.com/blockomat2100/PoCs/blob/main/filerun/CVE-2022-30469.md
CVE ID: CVE-2022-30470 State: PUBLISHED Published: 2022-06-01T14:31:51 Last Updated: 2024-08-03T06:48:36.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file results in remote code execution in the context of the webserver user. Additional Analyst Notes: - CVE Program Container: References: - https://filerun.com/changelog
CVE ID: CVE-2022-30472 State: PUBLISHED Published: 2022-05-26T15:21:13 Last Updated: 2024-08-03T06:48:36.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/1
CVE ID: CVE-2022-30473 State: PUBLISHED Published: 2022-05-26T15:19:49 Last Updated: 2024-08-03T06:48:36.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/2
CVE ID: CVE-2022-30474 State: PUBLISHED Published: 2022-05-26T15:23:08 Last Updated: 2024-08-03T06:48:36.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/5
CVE ID: CVE-2022-30475 State: PUBLISHED Published: 2022-05-26T15:24:38 Last Updated: 2024-08-03T06:48:36.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/3
CVE ID: CVE-2022-30476 State: PUBLISHED Published: 2022-05-26T15:25:45 Last Updated: 2024-08-03T06:48:36.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/6
CVE ID: CVE-2022-30477 State: PUBLISHED Published: 2022-05-26T15:26:42 Last Updated: 2024-08-03T06:48:36.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/4
CVE ID: CVE-2022-30478 State: PUBLISHED Published: 2022-05-31T20:51:49 Last Updated: 2024-08-03T06:48:36.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \search_product.php via the keyword parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/APTX-4879/CVE - https://github.com/creativesaiful/Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- - https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30478.pdf
CVE ID: CVE-2022-30481 State: PUBLISHED Published: 2022-05-31T20:40:41 Last Updated: 2024-08-03T06:48:36.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/APTX-4879/CVE - https://github.com/eliudm/Food-order-and-table-reservation-system- - https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30481.pdf
CVE ID: CVE-2022-30482 State: PUBLISHED Published: 2022-05-31T20:44:04 Last Updated: 2024-08-03T06:48:36.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting (XSS) in \admin\add_cata.php via the ctg_name parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/APTX-4879/CVE - https://github.com/creativesaiful/Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- - https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30482.pdf
CVE ID: CVE-2022-30489 State: PUBLISHED Published: 2022-05-13T12:49:41 Last Updated: 2024-08-03T06:48:36.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/badboycxcc/XSS
CVE ID: CVE-2022-30490 State: PUBLISHED Published: 2022-06-01T00:38:55 Last Updated: 2024-08-03T06:48:36.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php. Additional Analyst Notes: - CVE Program Container: References: - http://badminton.com - https://github.com/yasinyildiz26/Badminton-Center-Management-System
CVE ID: CVE-2022-30493 State: PUBLISHED Published: 2022-05-26T16:31:02 Last Updated: 2024-08-03T06:48:36.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsparker1337/OpenSource/blob/main/exploit_sql_asms.md
CVE ID: CVE-2022-30494 State: PUBLISHED Published: 2022-05-26T16:29:28 Last Updated: 2024-08-03T06:48:36.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss_asms.md
CVE ID: CVE-2022-30495 State: PUBLISHED Published: 2022-05-26T16:32:46 Last Updated: 2024-08-03T06:48:36.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsparker1337/OpenSource/blob/main/exploit_idor_asms.md
CVE ID: CVE-2022-30496 State: PUBLISHED Published: 2022-05-27T18:26:19 Last Updated: 2024-08-03T06:48:36.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ifmacedo/mconnect/blob/main/IDCE-SQLi - https://www.linkedin.com/pulse/sql-injection-idce-mv-iran-macedo/
CVE ID: CVE-2022-30500 State: PUBLISHED Published: 2022-05-26T15:56:46 Last Updated: 2024-08-03T06:48:36.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jfinal cms 5.1.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/35
CVE ID: CVE-2022-30503 State: PUBLISHED Published: 2022-05-27T13:13:50 Last Updated: 2024-08-03T06:48:36.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/478 - https://github.com/nginx/njs/commit/5c6130a2a0b4c41ab415f6b8992aa323636338b9
CVE ID: CVE-2022-30506 State: PUBLISHED Published: 2022-05-27T13:27:33 Last Updated: 2024-08-03T06:48:36.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mingSoft/MCMS/issues/I56AID
CVE ID: CVE-2022-30508 State: PUBLISHED Published: 2022-05-26T17:30:18 Last Updated: 2024-08-03T06:48:36.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1security/Vulnerability/blob/master/web/dedecms/1.md
CVE ID: CVE-2022-30510 State: PUBLISHED Published: 2022-05-27T11:43:48 Last Updated: 2024-08-03T06:48:36.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-30510
CVE ID: CVE-2022-30511 State: PUBLISHED Published: 2022-05-27T15:09:59 Last Updated: 2024-08-03T06:48:36.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-30511
CVE ID: CVE-2022-30512 State: PUBLISHED Published: 2022-05-27T14:00:30 Last Updated: 2024-08-03T06:48:36.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-30512
CVE ID: CVE-2022-30513 State: PUBLISHED Published: 2022-05-27T16:34:36 Last Updated: 2024-08-03T06:48:36.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-30513
CVE ID: CVE-2022-30514 State: PUBLISHED Published: 2022-05-27T15:04:52 Last Updated: 2024-08-03T06:48:36.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-30514
CVE ID: CVE-2022-30515 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:48:00.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zkteco.me/software-5 - https://codingkoala.eu/posts/CVE202230515/
CVE ID: CVE-2022-30516 State: PUBLISHED Published: 2022-05-26T16:17:46 Last Updated: 2024-08-03T06:48:36.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Danie1233/Hospital-Management-System-V1.0-SQLi/
CVE ID: CVE-2022-30517 State: PUBLISHED Published: 2022-07-12T22:55:43 Last Updated: 2024-08-03T06:48:36.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moxi624/mogu_blog_v2/issues/65
CVE ID: CVE-2022-30518 State: PUBLISHED Published: 2022-05-20T12:53:19 Last Updated: 2024-08-03T06:48:36.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChatBot Application with a Suggestion Feature 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /simple_chat_bot/admin/responses/view_response.php. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2022050020 - https://packetstormsecurity.com/files/166984/ChatBot-Application-With-A-Suggestion-Feature-1.0-SQL-Injection.html
CVE ID: CVE-2022-30519 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-11T22:48:21.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519 - http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-Site-Scripting.html
CVE ID: CVE-2022-30521 State: PUBLISHED Published: 2022-05-27T00:00:00 Last Updated: 2024-08-03T06:48:36.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152. Additional Analyst Notes: - CVE P
out arbitrary code by means of sending a specially constructed payload to port 49152. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/winmt/CVE/blob/main/DIR-890L/README.md - https://github.com/winmt/my-vuls/tree/main/DIR-890L
CVE ID: CVE-2022-30522 State: PUBLISHED Published: 2022-06-08T10:00:54 Last Updated: 2024-08-03T06:48:36.355Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-789 Description: If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/6 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/arc
s-security/2022/06/08/6 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-30523 State: PUBLISHED Published: 2022-05-16T14:45:13 Last Updated: 2024-08-03T06:48:36.384Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: Link Following Privilege Escalation Description: Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the affected machine. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-09071 - https://www.zerodayiniti