Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0564 State: PUBLISHED Published: 2022-02-21T00:00:00 Last Updated: 2025-04-25T15:46:06.267Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Qlik Sense Products: Qlik Sense Enterprise on Windows Problem Types: CWE-204 Description: A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the attacker to compare the response time that are returned by the affected system to determine which accounts are valid user accounts. Affected systems are only vul
t are returned by the affected system to determine which accounts are valid user accounts. Affected systems are only vulnerable if they have LDAP configured. The affected URI is /internal_forms_authentication/ the response time of the form is longer if the supplied user does not exists and shorter if the user exists. Additional Analyst Notes: - CVE Program Container: References: - https://csirt.divd.nl/DIVD-2021-00021/ - https://csirt.divd.nl/CVE-2022-0564/ - https://community.qlik.com/t5/Release-Notes/Qlik-Sense-Enterprise-on-Windows-November-2021-Initial-Release/ta-p/1856531
CVE ID: CVE-2022-0565 State: PUBLISHED Published: 2022-02-12T12:30:10 Last Updated: 2024-11-19T19:16:33.301Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/b0b29656-4bbe-41cf-92f6-8579df0b6de5 - https://github.com/pimcore/pimcore/commit/7697f709a501860144352696e583a2533a6e1245
CVE ID: CVE-2022-0566 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:37:00.847Z Vendors: Mozilla Products: Thunderbird Problem Types: Crafted email could trigger an out-of-bounds write Description: It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1753094
CVE ID: CVE-2022-0567 State: PUBLISHED Published: 2022-04-20T15:30:35 Last Updated: 2024-08-02T23:32:46.135Z Vendors: n/a Products: ovn-kubernetes Problem Types: CWE-20 Description: A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2053326
CVE ID: CVE-2022-0569 State: PUBLISHED Published: 2022-02-12T23:55:09 Last Updated: 2024-08-02T23:32:46.184Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-203 Description: Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b41d5e63-bcd8-4864-8a2e-8ec74eec520b - https://github.com/snipe/snipe-it/commit/05c0819776b07425b2831cd31a8a0f4e7ac30c09
CVE ID: CVE-2022-0570 State: PUBLISHED Published: 2022-02-13T04:50:10 Last Updated: 2024-08-02T23:32:46.035Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mruby Products: mruby/mruby Problem Types: CWE-122 Description: Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/65a7632e-f95b-4836-b1a7-9cb95e5124f1 - https://github.com/mruby/mruby/commit/38b164ace7d6ae1c367883a3d67d7f559783faad
CVE ID: CVE-2022-0571 State: PUBLISHED Published: 2022-02-13T11:00:11 Last Updated: 2024-08-02T23:32:46.350Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: phoronix-test-suite Products: phoronix-test-suite/phoronix-test-suite Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a5039485-6e48-4313-98ad-915506c19ae8 - https://github.com/phoronix-test-suite/phoronix-test-suite/commit/1eac9260c8313f0cfc77837ec676f4e6d68bd833 - https://lists.fedoraproject.org/archives/list/p
te/phoronix-test-suite/commit/1eac9260c8313f0cfc77837ec676f4e6d68bd833 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSQH5OWXAMWSM7H6VSBRDGTOE7UIOZHZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQ2PBBODEOE3BUCYHL5CV47M72ST4I7S/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QO32MBF3FS65K5YIC6CHXAJTLLPAXJED/
CVE ID: CVE-2022-0572 State: PUBLISHED Published: 2022-02-13T00:00:00.000Z Last Updated: 2025-11-03T20:34:31.596Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bf3e0643-03e9-4436-a1c8-74e7111c32bf - https://github.com/vim/vim/commit/6e28703a8e41f775f64e442c5d11ce1ff599aa3f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/ - https://lists.fedoraproject.org/archi
age-announce%40lists.fedoraproject.org/message/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2022-0573 State: PUBLISHED Published: 2022-05-16T14:32:04 Last Updated: 2024-08-02T23:32:46.384Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: JFrog Products: JFrog Artifactory Problem Types: CWE-502 Description: JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog
t. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories - https://www.jfrog.com/confluence/display/JFROG/CVE-2022-0573%3A+Artifactory+Vulnerable+to+Deserialization+of+Untrusted+Data
CVE ID: CVE-2022-0574 State: PUBLISHED Published: 2022-05-16T14:31:39 Last Updated: 2024-08-02T23:32:46.265Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: publify Products: publify/publify Problem Types: CWE-284 Description: Improper Access Control in GitHub repository publify/publify prior to 9.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3f - https://github.com/publify/publify/commit/0e6c66ac2002136517662399bca9d838c80d9739
CVE ID: CVE-2022-0575 State: PUBLISHED Published: 2022-02-13T23:40:15 Last Updated: 2024-08-02T23:32:46.181Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/13951f51-deed-4a3d-8275-52306cc5a87d - https://github.com/librenms/librenms/commit/4f86915866703e2fcd1e34b3fc1181ec2ad78e54 - https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html
CVE ID: CVE-2022-0576 State: PUBLISHED Published: 2022-02-13T23:40:09 Last Updated: 2024-08-02T23:32:46.223Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/114ba055-a2f0-4db9-aafb-95df944ba177 - https://github.com/librenms/librenms/commit/135717a9a05c5bf8921f1389cbb469dcbf300bfd - https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html
CVE ID: CVE-2022-0577 State: PUBLISHED Published: 2022-03-02T04:05:10 Last Updated: 2024-08-02T23:32:46.259Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: scrapy Products: scrapy/scrapy Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3da527b1-2348-4f69-9e88-2e11a96ac585 - https://github.com/scrapy/scrapy/commit/8ce01b3b76d4634f55067d6cfdf632ec70ba304a - https://lists.debian.org/debian-lts-announce/2022/03/msg00021.html
CVE ID: CVE-2022-0578 State: PUBLISHED Published: 2022-05-16T14:31:45 Last Updated: 2024-08-02T23:32:46.212Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: publify Products: publify/publify Problem Types: CWE-94 Description: Code Injection in GitHub repository publify/publify prior to 9.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbcc - https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7
CVE ID: CVE-2022-0579 State: PUBLISHED Published: 2022-02-14T19:00:10 Last Updated: 2024-08-02T23:32:46.168Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-862 Description: Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849 - https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1
CVE ID: CVE-2022-0580 State: PUBLISHED Published: 2022-02-14T22:55:09 Last Updated: 2024-08-02T23:32:46.439Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-863 Description: Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2494106c-7703-4558-bb1f-1eae59d264e3 - https://github.com/librenms/librenms/commit/95970af78e4c899744a715766d744deef8c505f7 - https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html
CVE ID: CVE-2022-0581 State: PUBLISHED Published: 2022-02-14T00:00:00.000Z Last Updated: 2025-11-03T21:45:37.934Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Missing release of memory after effective lifetime in Wireshark Description: Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2022-05.html - https://gitlab.com/wireshark/wireshark/-/issues/17935 - https://gitlab.com/gitlab-org/cves/-/
ty/wnpa-sec-2022-05.html - https://gitlab.com/wireshark/wireshark/-/issues/17935 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0581.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2022-0582 State: PUBLISHED Published: 2022-02-14T00:00:00.000Z Last Updated: 2025-11-03T21:45:39.721Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Improper input validation in Wireshark Description: Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2022-04.html - https://gitlab.com/wireshark/wireshark/-/issues/17882 - https://gitlab.com/gitlab-org/cves/-/blob/master/
2022-04.html - https://gitlab.com/wireshark/wireshark/-/issues/17882 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0582.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2022-0583 State: PUBLISHED Published: 2022-02-14T00:00:00.000Z Last Updated: 2025-11-03T21:45:41.191Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2022-03.html - https://gitlab.com/wireshark/wireshark/-/issues/17840 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0583.js
//gitlab.com/wireshark/wireshark/-/issues/17840 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0583.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2022-0585 State: PUBLISHED Published: 2022-02-18T00:00:00.000Z Last Updated: 2025-11-03T21:45:42.677Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Excessive iteration in Wireshark Description: Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2022-02.html - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0585.json - https://lists.fedoraproject.org/archives/l
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0585.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2022-0586 State: PUBLISHED Published: 2022-02-14T00:00:00.000Z Last Updated: 2025-11-03T21:45:44.184Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Loop with unreachable exit condition ('infinite loop') in Wireshark Description: Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2022-01.html - https://gitlab.com/wireshark/wireshark/-/issues/17813 - https://gitlab.com/gitlab-o
org/security/wnpa-sec-2022-01.html - https://gitlab.com/wireshark/wireshark/-/issues/17813 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0586.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2022-0587 State: PUBLISHED Published: 2022-02-15T07:45:09 Last Updated: 2024-08-02T23:32:46.211Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-285 Description: Improper Authorization in Packagist librenms/librenms prior to 22.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/commit/95970af78e4c899744a715766d744deef8c505f7 - https://huntr.dev/bounties/0c7c9ecd-33ac-4865-b05b-447ced735469 - https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html
CVE ID: CVE-2022-0588 State: PUBLISHED Published: 2022-02-15T08:05:21 Last Updated: 2024-08-02T23:32:46.206Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: librenms Products: librenms/librenms Problem Types: CWE-862 Description: Missing Authorization in Packagist librenms/librenms prior to 22.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/commit/95970af78e4c899744a715766d744deef8c505f7 - https://huntr.dev/bounties/caab3310-0d70-4c8a-8768-956f8dd3326d - https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html
CVE ID: CVE-2022-0589 State: PUBLISHED Published: 2022-02-15T08:10:10 Last Updated: 2024-08-02T23:32:46.193Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d943d95c-076f-441a-ab21-cbf6b15f6768 - https://github.com/librenms/librenms/commit/4c9d4eefd8064a0285f9718ef38f5617d7f9d6fa - https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html
CVE ID: CVE-2022-0590 State: PUBLISHED Published: 2022-03-21T18:55:47 Last Updated: 2024-08-02T23:32:46.222Z Vendors: Unknown Products: BulletProof Security Problem Types: CWE-79 Description: The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/08b66b69-3c69-4a1e-9c0a-5697e31bc04e
CVE ID: CVE-2022-0591 State: PUBLISHED Published: 2022-03-21T18:55:48 Last Updated: 2024-08-02T23:32:46.200Z Vendors: Unknown Products: FormCraft Problem Types: CWE-918 Description: The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b5303e63-d640-4178-9237-d0f524b13d47
CVE ID: CVE-2022-0592 State: PUBLISHED Published: 2022-05-09T16:50:29 Last Updated: 2024-08-02T23:32:46.306Z Vendors: Unknown Products: MapSVG Problem Types: CWE-89 Description: The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5d8d53ad-dc88-4b50-a292-fc447484c27b
CVE ID: CVE-2022-0593 State: PUBLISHED Published: 2022-03-14T14:41:36 Last Updated: 2024-08-02T23:32:46.276Z Vendors: Unknown Products: Login with phone number Problem Types: CWE-73 Description: The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/76a50157-04b5-43e8-afbc-a6ddf6d1cba3 - https://wordpress.org/plugins/login-with-phone-number
CVE ID: CVE-2022-0594 State: PUBLISHED Published: 2022-07-25T12:45:37 Last Updated: 2024-08-02T23:32:46.451Z Vendors: Unknown Products: Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic Problem Types: CWE-863 Description: The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/v
us version like PHP, cURL, WP etc. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4de9451e-2c8d-4d99-a255-b027466d29b1
CVE ID: CVE-2022-0595 State: PUBLISHED Published: 2022-03-28T17:22:57 Last Updated: 2024-08-02T23:32:46.452Z Vendors: Unknown Products: Drag and Drop Multiple File Upload – Contact Form 7 Problem Types: CWE-79 Description: The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action, which could lead to Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1b849957-eaca-47ea-8f84-23a3a98cc8de - https://plugins.trac.wordpress.org/changeset/2686614
CVE ID: CVE-2022-0596 State: PUBLISHED Published: 2022-02-15T00:00:00 Last Updated: 2024-08-02T23:32:46.308Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f68b994e-2b8b-49f5-af2a-8cd99e8048a5 - https://github.com/microweber/microweber/commit/91a9d899741557c75050614ff7adb8c0e3feb005