Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46740 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-11T15:49:59.657Z Vendors: Huawei Products: WS7100-20 Problem Types: Denial of Service Description: There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful exploit could cause a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-dosvihswr-8f632df1-en
CVE ID: CVE-2022-46741 State: PUBLISHED Published: 2022-12-07T07:41:04.470Z Last Updated: 2025-04-22T20:59:04.875Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-125 Description: Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-001.md
CVE ID: CVE-2022-46742 State: PUBLISHED Published: 2022-12-07T08:16:09.365Z Last Updated: 2025-04-22T21:00:54.778Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-94 Description: Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-002.md
CVE ID: CVE-2022-46743 State: REJECTED Published: N/A Last Updated: 2023-03-14T00:00:00 Description: No description available.
CVE ID: CVE-2022-46744 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46745 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46746 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46747 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46748 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46749 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46750 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-46751 State: PUBLISHED Published: 2023-08-21T06:55:00.181Z Last Updated: 2025-02-13T16:33:53.044Z Vendors: Apache Software Foundation Products: Apache Ivy Problem Types: CWE-611, CWE-91 Description: Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used. This can be used to exfiltrate data
ument type definitions and expand any entity references contained therein when used. This can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways. Starting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed. Users of Ivy prior to version 2.5.2 can use Java system properties to re
ewly introduced system properties where needed. Users of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about "JAXP Properties for External Access restrictions" inside Oracle's "Java API for XML Processing (JAXP) Security Guide". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.oracle.com/en/java/javase/13/security/java-api-xml-processing-jaxp-security-guide.html#GUID-94ABC0EE-9DC8-44F0-84AD-47ADD5340477 - https://gitbox.apache.org/repos/asf?p=ant-ivy.git;a=commit;h=2be17bc18b0e1d4123007d579e43ba1a4b6fab3d - https://lists.apache.org/thread/9gcz4xrsn8c7o9gb377xfzvkb8jltffr
t;a=commit;h=2be17bc18b0e1d4123007d579e43ba1a4b6fab3d - https://lists.apache.org/thread/9gcz4xrsn8c7o9gb377xfzvkb8jltffr - https://lists.apache.org/thread/1dj60hg5nr36kjr4p1100dwjrqookps8 - http://www.openwall.com/lists/oss-security/2023/09/06/9
CVE ID: CVE-2022-46752 State: PUBLISHED Published: 2023-03-08T16:51:55.033Z Last Updated: 2025-02-28T18:32:37.203Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-285 Description: Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000207928/dsa-2023-011-dell-client-platform-security-update-for-a-bios-vulnerability
CVE ID: CVE-2022-46753 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46754 State: PUBLISHED Published: 2023-02-10T21:25:19.476Z Last Updated: 2025-03-21T19:49:50.393Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license features for which this admin is not authorized in order to configure user controlled external entities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-managem
- CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-46755 State: PUBLISHED Published: 2023-02-10T21:22:15.642Z Last Updated: 2025-03-24T17:54:39.621Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-46756 State: PUBLISHED Published: 2023-02-01T05:37:17.789Z Last Updated: 2025-03-27T13:25:56.177Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: VxRail HCI Problem Types: CWE-668 Description: Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000206943
CVE ID: CVE-2022-46761 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:27:03.669Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration Defects Description: The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2022-46762 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:26:02.001Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Logic bypass vulnerability Description: The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2022-46763 State: PUBLISHED Published: 2022-12-27T00:00:00.000Z Last Updated: 2025-04-11T18:51:14.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://solidlab.ru/our-news/145-trueconf.html - https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt - https://vuldb.com/?diff.216851
CVE ID: CVE-2022-46764 State: PUBLISHED Published: 2022-12-27T00:00:00.000Z Last Updated: 2025-04-11T16:51:08.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://solidlab.ru/our-news/145-trueconf.html - https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46764.txt - https://vuldb.com/?diff.216845
CVE ID: CVE-2022-46768 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-16T13:50:46.579Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Zabbix Products: Web Service Report Generation, Zabbix agent 2 (MSI packages) Problem Types: CWE-20 Description: Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-22087
CVE ID: CVE-2022-46769 State: PUBLISHED Published: 2023-01-09T10:14:56.823Z Last Updated: 2025-04-09T19:26:54.690Z Vendors: Apache Software Foundation Products: Apache Sling App CMS Problem Types: CWE-79 Description: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature. Upgrade to Apache Sling App CMS >= 1.1.4 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sling.apache.org/news.html
CVE ID: CVE-2022-46770 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:31:23.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mirage/qubes-mirage-firewall/issues/166 - http://packetstormsecurity.com/files/171610/Qubes-Mirage-Firewall-0.8.3-Denial-Of-Service.html
CVE ID: CVE-2022-46771 State: PUBLISHED Published: 2022-12-20T19:40:41.039Z Last Updated: 2025-04-16T14:49:50.868Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: UrbanCode Deploy (UCD) Problem Types: CWE-79 Description: IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 242273. Additional Analyst Notes: - CVE Pr
y leading to credentials disclosure within a trusted session. IBM X-Force ID: 242273. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6848897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/242273
CVE ID: CVE-2022-46773 State: PUBLISHED Published: 2023-03-15T19:57:22.981Z Last Updated: 2025-02-26T16:11:32.849Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Robotic Process Automation Problem Types: CWE-287 Description: IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6962155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/242951
CVE ID: CVE-2022-46774 State: PUBLISHED Published: 2023-03-15T18:21:54.746Z Last Updated: 2025-02-26T20:18:14.355Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Manage Application Problem Types: CWE-287 Description: IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6962455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/242953
CVE ID: CVE-2022-46781 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T15:57:01.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2022-46782 State: PUBLISHED Published: 2023-08-05T00:00:00 Last Updated: 2024-10-17T14:50:33.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Stormshield SSL VPN Client before 3.2.0. A logged-in user, able to only launch the VPNSSL Client, can use the OpenVPN instance to execute malicious code as administrator on the local machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.stormshield.eu/2022-028/
CVE ID: CVE-2022-46783 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T17:36:58.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.stormshield.eu/ - https://advisories.stormshield.eu/2022-029/
CVE ID: CVE-2022-46784 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:48:27.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://scomsupport.squaredup.com/hc/en-us/articles/9476404091677-CVE-2022-46784-Client-side-open-redirection
CVE ID: CVE-2022-46785 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:47:10.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://scomsupport.squaredup.com/hc/en-us/articles/9476404119197-CVE-2022-46785-Prototype-pollution-leading-to-XSS
CVE ID: CVE-2022-46786 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:46:17.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.squaredup.com - https://scomsupport.squaredup.com/hc/en-us/articles/9476419759005-CVE-2022-46786-Stored-Cross-Site-Scripting
CVE ID: CVE-2022-46787 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46788 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46789 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46790 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46791 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46792 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:25:42.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends. The fixed versions are 2.10.2, 2.11.3, 2.12.1, 2.13.2, 2.14.1, and 2.15.2. (Versions before 2.10.0 are unaffected.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/hasura-security-announce/c/kzK-uPAKGUU - https://hasura.io/blog/critical-vulnerability-in-hasuras-graphql-engine-v2-10-0/ - https://github.com/hasura/graphql-engine/security/a
.io/blog/critical-vulnerability-in-hasuras-graphql-engine-v2-10-0/ - https://github.com/hasura/graphql-engine/security/advisories/GHSA-g7mj-g7f4-hgrg
CVE ID: CVE-2022-46793 State: PUBLISHED Published: 2023-04-06T12:44:09.171Z Last Updated: 2025-01-10T19:06:41.176Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AdTribes.io Products: Product Feed PRO for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AdTribes.Io Product Feed PRO for WooCommerce plugin <= 12.4.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-product-feed-pro/wordpress-product-feed-pro-for-woocommerce-plugin-12-3-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-46794 State: PUBLISHED Published: 2023-05-24T16:00:07.151Z Last Updated: 2025-01-08T22:03:24.337Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: weightbasedshipping.com Products: WooCommerce Weight Based Shipping Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in weightbasedshipping.Com WooCommerce Weight Based Shipping plugin <= 5.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/weight-based-shipping-for-woocommerce/wordpress-woocommerce-weight-based-shipping-plugin-5-4-1-cross-site-request-forgery-csrf-v
ased-shipping-for-woocommerce/wordpress-woocommerce-weight-based-shipping-plugin-5-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-46795 State: PUBLISHED Published: 2024-12-13T14:22:06.079Z Last Updated: 2024-12-13T20:38:01.252Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Tyche Softwares Products: Print Invoice & Delivery Notes for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-del
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-delivery-notes/vulnerability/wordpress-print-invoice-delivery-notes-for-woocommerce-plugin-4-7-2-csrf-plugin-settings-reset-vulnerability?_s_id=cve
CVE ID: CVE-2022-46796 State: PUBLISHED Published: 2024-12-13T14:22:06.680Z Last Updated: 2024-12-23T18:03:34.400Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: VillaTheme Products: CURCY Problem Types: CWE-862 Description: Missing Authorization vulnerability in VillaTheme CURCY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.1.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-multi-currency/vulnerability/wordpress-curcy-plugin-2-1-25-unauthenticated-plugin-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2022-46797 State: PUBLISHED Published: 2023-03-01T13:43:22.717Z Last Updated: 2025-01-13T15:54:38.365Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Conversios Products: All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce plugin <= 5.2.3 leads to plugin settings change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/enhanced-e-commerce-for-woocommerce-store/wor
Vulnrichment: References: - https://patchstack.com/database/vulnerability/enhanced-e-commerce-for-woocommerce-store/wordpress-actionable-google-analytics-and-google-shopping-plugin-for-woocommerce-plugin-5-2-3-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46798 State: PUBLISHED Published: 2023-03-01T14:00:13.903Z Last Updated: 2025-01-13T15:54:30.344Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: HasThemes Products: ShopLentor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woolentor-addons/wordpress-woolentor-plugin-2-5-1-csrf-leading-to-plugin-settings-change-vulnerability?_s_id=cve