Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4041 State: PUBLISHED Published: 2023-01-31T01:39:38.458Z Last Updated: 2025-03-26T20:35:49.120Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Hitachi Products: Hitachi Storage Plug-in for VMware vCenter Problem Types: CWE-266, CWE-287 Description: Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vul
Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-103/index.html
CVE ID: CVE-2022-4042 State: PUBLISHED Published: 2022-12-26T12:27:59.379Z Last Updated: 2025-04-11T23:24:21.176Z Vendors: Unknown Products: Paytium: Mollie payment forms & donations Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8ec76242-717d-4d
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8ec76242-717d-4d2d-9c0f-3056cd7c2c90
CVE ID: CVE-2022-4043 State: PUBLISHED Published: 2023-01-09T22:13:30.414Z Last Updated: 2025-04-09T19:10:55.800Z Vendors: Unknown Products: WP Custom Admin Interface Problem Types: CWE-502 Deserialization of Untrusted Data Description: The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc
CVE ID: CVE-2022-4044 State: PUBLISHED Published: 2022-11-23T05:45:39.948Z Last Updated: 2024-12-06T23:07:25.045Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-770 Description: A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/ - https://hackerone.com/reports/1680241
CVE ID: CVE-2022-4045 State: PUBLISHED Published: 2022-11-23T06:14:19.131Z Last Updated: 2024-12-06T23:07:12.139Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-770 Description: A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2022-4046 State: PUBLISHED Published: 2023-08-03T12:39:44.002Z Last Updated: 2024-10-22T19:44:02.247Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS HMI (SL) Problem Types: CWE-119 Desc
RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS HMI (SL) Problem Types: CWE-119 Description: In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-025/
CVE ID: CVE-2022-4047 State: PUBLISHED Published: 2022-12-26T12:28:13.684Z Last Updated: 2025-04-14T13:47:55.922Z Vendors: Unknown Products: Return Refund and Exchange For WooCommerce Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94
CVE ID: CVE-2022-4048 State: PUBLISHED Published: 2023-05-15T09:23:18.977Z Last Updated: 2025-01-23T19:25:03.004Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: CODESYS Products: CODESYS Development System V3 Problem Types: CWE-326 Description: Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17350&token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a&download=
CVE ID: CVE-2022-4049 State: PUBLISHED Published: 2023-01-02T21:49:14.695Z Last Updated: 2025-04-10T19:08:08.383Z Vendors: Unknown Products: WP User Problem Types: CWE-89 SQL Injection Description: The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9b0781e2-ad62-4308-bafc-d45b9a2472be
CVE ID: CVE-2022-4050 State: PUBLISHED Published: 2022-12-19T13:41:51.720Z Last Updated: 2025-04-17T13:40:47.282Z Vendors: Unknown Products: JoomSport Problem Types: CWE-89 SQL Injection Description: The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5c96bb40-4c2d-4e91-8339-e0ddce25912f
CVE ID: CVE-2022-4051 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-15T13:13:02.757Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hostel Searching Project Problem Types: CWE-707 Description: A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213844. Additional Analyst Notes: - CVE Program Co
e public and may be used. The identifier of this vulnerability is VDB-213844. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/itzmehedi/Hostel-searching-project-using-PHP-Mysql/issues/1 - https://vuldb.com/?id.213844
CVE ID: CVE-2022-4052 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-15T13:12:48.299Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Student Attendance Management System Problem Types: CWE-707 Description: A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability. Additional Ana
en disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System/issues/2 - https://vuldb.com/?id.213845
CVE ID: CVE-2022-4053 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-15T13:12:38.909Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Student Attendance Management System Problem Types: CWE-707 Description: A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability. Ad
xploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System/issues/3 - https://vuldb.com/?id.213846
CVE ID: CVE-2022-4054 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:15:52.961Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to leak a webhook secret token by changing the webhook URL to an endpoint that allows them to capture request headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
nt that allows them to capture request headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/382260 - https://hackerone.com/reports/1758126 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4054.json
CVE ID: CVE-2022-4055 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T18:55:59.428Z Vendors: n/a Products: xdg-utils Problem Types: CWE-146 Description: When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267
CVE ID: CVE-2022-4057 State: PUBLISHED Published: 2023-01-02T21:49:37.650Z Last Updated: 2025-04-10T17:58:03.336Z Vendors: Unknown Products: Autoptimize Problem Types: CWE-425 Direct Request ('Forced Browsing') Description: The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/95ee1b9c-1971-4c35-8527-5764e9ed64af
CVE ID: CVE-2022-4058 State: PUBLISHED Published: 2022-12-19T13:41:43.962Z Last Updated: 2024-08-03T01:27:54.541Z Vendors: Unknown Products: Photo Gallery by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/89656cb3-4611-4ae7-b7f8-1b22eb75cfc
alyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/89656cb3-4611-4ae7-b7f8-1b22eb75cfc4
CVE ID: CVE-2022-4059 State: PUBLISHED Published: 2023-01-02T21:49:10.184Z Last Updated: 2025-04-10T19:14:23.094Z Vendors: Unknown Products: Cryptocurrency Widgets Pack Problem Types: CWE-89 SQL Injection Description: The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d94bb664-261a-4f3f-8cc3-a2db8230895d
CVE ID: CVE-2022-4060 State: PUBLISHED Published: 2023-01-16T15:38:05.280Z Last Updated: 2025-04-04T17:46:49.451Z Vendors: Unknown Products: User Post Gallery Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8f982ebd-6fc5-452d-8280-42e027d01b1e
CVE ID: CVE-2022-4061 State: PUBLISHED Published: 2022-12-19T13:41:42.453Z Last Updated: 2025-04-17T13:56:00.263Z Vendors: Unknown Products: JobBoardWP Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fec68e6e-f612-43c8-8301-80f7ae3be665
CVE ID: CVE-2022-4062 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-02-05T20:06:21.972Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: EcoStruxure Power Commission Problem Types: CWE-285 Description: A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneide
.25) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-347-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-347-03_EcoStruxure_Power_Commission_Security_Notification.pdf
CVE ID: CVE-2022-4063 State: PUBLISHED Published: 2022-12-19T13:41:37.739Z Last Updated: 2025-04-17T14:01:03.199Z Vendors: Unknown Products: InPost Gallery Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6bb07ec1-f1aa-4f4b-9717-c92f651a90a7
CVE ID: CVE-2022-4064 State: PUBLISHED Published: 2022-11-19T00:00:00.000Z Last Updated: 2025-04-15T13:12:29.327Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: Dalli Problem Types: CWE-74, CWE-707 Description: A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disc
otely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.3 is able to address this issue. The patch is identified as 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.214026 - https://vuldb.com/?ctiid.214026 - https://github.com/petergoldstein/dalli/issues/932 - https://github.com/petergoldstein/dalli/pull/933 - https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d - https://github
alli/pull/933 - https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d - https://github.com/petergoldstein/dalli/releases/tag/v3.2.3 - https://github.com/advisories/GHSA-3xg8-cc8f-9wv2
CVE ID: CVE-2022-4065 State: PUBLISHED Published: 2022-11-19T00:00:00 Last Updated: 2024-08-03T01:27:54.473Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: cbeust Products: testng Problem Types: CWE-22 Description: A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9
pgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.214027 - https://vuldb.com/?ctiid.214027 - https://github.com/cbeust/testng/pull/2806 - https://github.com/cbeust/testng/commit/9150736cd2c123a6a3b60e6193630859f9f0422b - https://github.com/cbeust/testng/releases/tag/7.7.1
CVE ID: CVE-2022-4066 State: PUBLISHED Published: 2022-11-19T00:00:00.000Z Last Updated: 2025-04-15T13:12:22.620Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: davidmoreno Products: onion Problem Types: CWE-404 Description: A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028. Additional Ana
It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/davidmoreno/onion/pull/308 - https://github.com/davidmoreno/onion/commit/de8ea938342b36c28024fd8393ebc27b8442a161 - https://vuldb.com/?id.214028
CVE ID: CVE-2022-4067 State: PUBLISHED Published: 2022-11-20T00:00:00.000Z Last Updated: 2025-04-28T19:56:44.425Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3ca7023e-d95c-423f-9e9a-222a67a8ee72 - https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c
CVE ID: CVE-2022-4068 State: PUBLISHED Published: 2022-11-20T00:00:00.000Z Last Updated: 2025-04-25T18:59:04.307Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: librenms Products: librenms/librenms Problem Types: CWE-915 Description: A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ontext of an admin's account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/becfecc4-22a6-4f94-bf83-d6030b625fdc - https://github.com/librenms/librenms/commit/09a2977adb8bc4b1db116c725d661160c930d3a1
CVE ID: CVE-2022-4069 State: PUBLISHED Published: 2022-11-20T00:00:00.000Z Last Updated: 2025-04-24T20:10:56.869Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a9925d98-dac4-4c3c-835a-d93aeecfb2c5 - https://github.com/librenms/librenms/commit/8383376f1355812e09ec0c2af67f6d46891b7ba7
CVE ID: CVE-2022-4070 State: PUBLISHED Published: 2022-11-20T00:00:00.000Z Last Updated: 2025-04-14T18:16:21.737Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-613 Description: Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/72d426bb-b56e-4534-88ba-0d11381b0775 - https://github.com/librenms/librenms/commit/ce8e5f3d056829bfa7a845f9dc2757e21e419ddc
CVE ID: CVE-2022-4071 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4072 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4073 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4074 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4075 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4076 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4077 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4078 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4079 State: REJECTED Published: N/A Last Updated: 2022-11-20T00:00:00 Description: No description available.