Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0669 State: PUBLISHED Published: 2022-08-29T14:03:04 Last Updated: 2024-08-02T23:32:46.442Z Vendors: n/a Products: DPDK Problem Types: CWE-400 Description: A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2055793 - https://bugs.dpdk.
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2055793 - https://bugs.dpdk.org/show_bug.cgi?id=922 - https://github.com/DPDK/dpdk/commit/af74f7db384ed149fe42b21dbd7975f8a54ef227 - https://access.redhat.com/security/cve/CVE-2022-0669 - https://security-tracker.debian.org/tracker/CVE-2022-0669
CVE ID: CVE-2022-0670 State: PUBLISHED Published: 2022-07-25T13:58:09 Last Updated: 2024-08-02T23:32:46.554Z Vendors: n/a Products: Ceph Problem Types: CWE-863 Description: A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/ - https://lists.fedoraproject.org/archives/list/package
es: - https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5O3XMDFZWA2FWU6GAYOVSFJPOUTXN42N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRTTRG5O4YP2TNGDCDOHIHP2DM3DFBT/
CVE ID: CVE-2022-0671 State: PUBLISHED Published: 2022-02-18T17:50:39 Last Updated: 2024-08-02T23:32:46.683Z Vendors: n/a Products: vscode-xml Problem Types: CWE-918 Description: A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022 - https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
CVE ID: CVE-2022-0672 State: PUBLISHED Published: 2022-02-18T17:50:40 Last Updated: 2024-08-02T23:40:03.133Z Vendors: n/a Products: LemMinX Problem Types: CWE-200 Description: A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
CVE ID: CVE-2022-0673 State: PUBLISHED Published: 2022-02-18T17:50:41 Last Updated: 2024-08-02T23:40:03.361Z Vendors: n/a Products: LemMinX Problem Types: CWE-22 Description: A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
CVE ID: CVE-2022-0674 State: PUBLISHED Published: 2022-03-14T14:41:44 Last Updated: 2024-08-02T23:40:03.130Z Vendors: Unknown Products: Kunze Law Problem Types: CWE-79 Description: The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error "From" Address' settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/332e1e1e-7420-4605-99bc-4074e212ff9b
CVE ID: CVE-2022-0675 State: PUBLISHED Published: 2022-03-02T21:00:59 Last Updated: 2024-08-02T23:40:03.173Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Puppet Products: Firewall Module Problem Types: CWE-1289 Description: In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2022-0675
CVE ID: CVE-2022-0676 State: PUBLISHED Published: 2022-02-22T00:05:10 Last Updated: 2024-08-02T23:40:03.230Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/5ad814a1-5dd3-43f4-869b-33b8dab78485 - https://github.com/radareorg/radare2/commit/c84b7232626badd075caf3ae29661b609164bac6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - http
oraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0677 State: PUBLISHED Published: 2022-04-07T18:21:34.788102Z Last Updated: 2024-09-16T22:02:25.418Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bitdefender Products: Update Server, GravityZone, Endpoint Security Tools for Linux, Endpoint Security Tools for Windows Problem Types: CWE-130 Description: Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions
of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/improper-handling-of-length-parameter-inconsistency-vulnerability-in-bitdefender-update-server-va-10144
CVE ID: CVE-2022-0678 State: PUBLISHED Published: 2022-02-19T10:50:09 Last Updated: 2024-08-02T23:40:03.171Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d707137a-aace-44c5-b15c-1807035716c0 - https://github.com/microweber/microweber/commit/2b8fa5aac31e51e2aca83c7ef5d1281ba2e755f8
CVE ID: CVE-2022-0679 State: PUBLISHED Published: 2022-03-28T17:23:14 Last Updated: 2024-08-02T23:40:03.164Z Vendors: Unknown Products: Narnoo Distributor Problem Types: CWE-22 Description: The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to both unauthenticated and authenticated users) which results in the disclosure of arbitrary files as the content of the file is then displayed in the response as JSON data. This could also lead to RCE with various tricks but depends on the underlying system and it's configuration. Additional
This could also lead to RCE with various tricks but depends on the underlying system and it's configuration. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8
CVE ID: CVE-2022-0680 State: PUBLISHED Published: 2022-03-28T17:23:16 Last Updated: 2024-08-02T23:40:03.141Z Vendors: Unknown Products: Plezi Problem Types: CWE-79 Description: The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configuration_tracker_enable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7cede02e-9af7-4f50-95a8-84ef4c7f7ded
CVE ID: CVE-2022-0681 State: PUBLISHED Published: 2022-03-21T18:55:56 Last Updated: 2024-08-02T23:40:03.160Z Vendors: Unknown Products: Simple Membership Problem Types: CWE-352 Description: The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c5765816-4439-4c14-a847-044248ada0ef
CVE ID: CVE-2022-0683 State: PUBLISHED Published: 2022-02-24T18:27:08.000Z Last Updated: 2025-01-31T19:01:53.758Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Essential Addons for Elementor Lite Products: Essential Addons for Elementor Lite Problem Types: CWE-79 Description: The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the ~/includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up
s onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 5.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0683 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2680585%40essential-addons-for-elementor-lite&new=2680585%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2022-0684 State: PUBLISHED Published: 2022-03-14T14:41:45 Last Updated: 2024-08-02T23:40:03.222Z Vendors: Unknown Products: WP Home Page Menu Problem Types: CWE-79 Description: The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/69b178f3-5951-4879-9bbe-183951d002ec - https://plugins.trac.wordpress.org/changeset/2681478
CVE ID: CVE-2022-0685 State: PUBLISHED Published: 2022-02-20T00:00:00 Last Updated: 2024-08-02T23:40:03.355Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-823 Description: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/27230da3-9b1a-4d5d-8cdf-4b1e62fcd782 - https://github.com/vim/vim/commit/5921aeb5741fc6e84c870d68c7c35b93ad0c9f87 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/ - https://lists.debian.org/debi
ist/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2022-0686 State: PUBLISHED Published: 2022-02-20T00:00:00 Last Updated: 2024-08-02T23:40:03.149Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: unshiftio Products: unshiftio/url-parse Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c - https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5 - https://security.netapp.com/advisory/ntap-20220325-0006/ - https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE ID: CVE-2022-0687 State: PUBLISHED Published: 2022-03-21T18:55:57 Last Updated: 2024-08-02T23:40:03.132Z Vendors: Unknown Products: Amelia – Events & Appointments Booking Calendar Problem Types: CWE-434 Description: The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3cf05815-9b74-4491-a935-d69a0834146c
CVE ID: CVE-2022-0688 State: PUBLISHED Published: 2022-02-20T14:45:11 Last Updated: 2024-08-02T23:40:03.225Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-840 Description: Business Logic Errors in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/051ec6d4-0b0a-41bf-9ded-27813037c9c9 - https://github.com/microweber/microweber/commit/a41f0fddaf08ff12b2b82506b1ca9490c93ab605
CVE ID: CVE-2022-0689 State: PUBLISHED Published: 2022-02-19T15:45:10 Last Updated: 2024-08-02T23:40:03.387Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-840 Description: Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fa5dbbd3-97fe-41a9-8797-2e54d9a9c649 - https://github.com/microweber/microweber/commit/c3c25ae6c421bb4a65df9e0035edcc2f75594a04
CVE ID: CVE-2022-0690 State: PUBLISHED Published: 2022-02-19T16:00:11 Last Updated: 2024-08-02T23:40:03.315Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4999a0f4-6efb-4681-b4ba-b36babc366f9 - https://github.com/microweber/microweber/commit/f7f5d41ba1a08ceed37c00d5f70a3f48b272e9f2
CVE ID: CVE-2022-0691 State: PUBLISHED Published: 2022-02-21T00:00:00 Last Updated: 2024-08-02T23:40:03.252Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: unshiftio Products: unshiftio/url-parse Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/57124ed5-4b68-4934-8325-2c546257f2e4 - https://github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63 - https://security.netapp.com/advisory/ntap-20220325-0006/ - https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE ID: CVE-2022-0692 State: PUBLISHED Published: 2022-02-21T12:30:12 Last Updated: 2024-08-02T23:40:03.547Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: rudloff Products: rudloff/alltube Problem Types: CWE-601 Description: Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4fb39400-e08b-47af-8c1f-5093c9a51203 - https://github.com/rudloff/alltube/commit/bc14b6e45c766c05757fb607ef8d444cbbfba71a
CVE ID: CVE-2022-0693 State: PUBLISHED Published: 2022-04-25T15:51:06 Last Updated: 2024-08-02T23:40:03.436Z Vendors: Unknown Products: Master Elements Problem Types: CWE-89 Description: The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL Injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a72bf075-fd4b-4aa5-b4a4-5f62a0620643
CVE ID: CVE-2022-0694 State: PUBLISHED Published: 2022-03-21T18:55:59 Last Updated: 2024-08-02T23:40:03.509Z Vendors: Unknown Products: Advanced Booking Calendar Problem Types: CWE-89 Description: The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL statement via the abc_booking_getSingleCalendar AJAX action (available to both unauthenticated and authenticated users), leading to an unauthenticated SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/990d1b0a-dbd1-42d0-9a40-c345407c6fe0 - https://plugins.trac.wordpress.org/changeset/2682086
CVE ID: CVE-2022-0695 State: PUBLISHED Published: 2022-02-24T12:25:10 Last Updated: 2024-08-02T23:40:03.320Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-400 Description: Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bdbddc0e-fb06-4211-a90b-7cbedcee2bea - https://github.com/radareorg/radare2/commit/634b886e84a5c568d243e744becc6b3223e089cf - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lis
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0696 State: PUBLISHED Published: 2022-02-21T00:00:00 Last Updated: 2024-08-02T23:40:03.225Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/7416c2cb-1809-4834-8989-e84ff033f15f - https://github.com/vim/vim/commit/0f6e28f686dbb59ab3b562408ab9b2234797b9b1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/ - https://support.apple.com/kb/HT213488
age-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/ - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html
CVE ID: CVE-2022-0697 State: PUBLISHED Published: 2022-03-06T22:50:08 Last Updated: 2024-08-02T23:40:03.293Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: archivy Products: archivy/archivy Problem Types: CWE-601 Description: Open Redirect in GitHub repository archivy/archivy prior to 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2d0301a2-10ff-48f4-a346-5a0e8707835b - https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574
CVE ID: CVE-2022-0698 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T17:35:01.496Z Vendors: n/a Products: Microweber Problem Types: DOM-Based cross-site scripting (XSS) Description: Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/garrix/ - https://github.com/microweber/microweber/
CVE ID: CVE-2022-0699 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T20:30:49.913Z Vendors: n/a Products: shapelib Problem Types: CWE-416 Description: A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OSGeo/shapelib/issues/39 - https://github.com/OSGeo/shapelib/commit/c75b9281a5b9452d92e1682bdfe6019a13ed819f
CVE ID: CVE-2022-0700 State: PUBLISHED Published: 2022-03-14T14:41:47 Last Updated: 2024-08-02T23:40:03.252Z Vendors: Unknown Products: Simple Tracking Problem Types: CWE-79 Description: The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1bf1f255-1571-425c-92b1-02833f6a44a7
CVE ID: CVE-2022-0701 State: PUBLISHED Published: 2022-03-14T14:41:49 Last Updated: 2024-08-02T23:40:03.476Z Vendors: Unknown Products: Seo 301 Meta Problem Types: CWE-79 Description: The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/68882f81-12d3-4e98-82ff-6754ac4ccfa1
CVE ID: CVE-2022-0702 State: PUBLISHED Published: 2022-03-14T14:41:50 Last Updated: 2024-08-02T23:40:03.428Z Vendors: Unknown Products: Petfinder Listings Problem Types: CWE-79 Description: The Petfinder Listings WordPress plugin through 1.0.18 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bf6f897b-af65-4122-802c-ae6d4f2346f9
CVE ID: CVE-2022-0703 State: PUBLISHED Published: 2022-03-14T14:41:52 Last Updated: 2024-08-02T23:40:03.344Z Vendors: Unknown Products: GDMylist Problem Types: CWE-79 Description: The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fa34beff-c8ab-4297-9c59-b3b0c52f0536