Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32050 State: PUBLISHED Published: 2022-07-01T17:27:41 Last Updated: 2024-08-03T07:32:55.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v2/9.setWanCfg
CVE ID: CVE-2022-32051 State: PUBLISHED Published: 2022-07-01T17:27:41 Last Updated: 2024-08-03T07:32:55.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v2/2.setParentalRules
CVE ID: CVE-2022-32052 State: PUBLISHED Published: 2022-07-01T17:27:40 Last Updated: 2024-08-03T07:32:55.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v2/3.setWiFiAclRules
CVE ID: CVE-2022-32053 State: PUBLISHED Published: 2022-07-01T17:27:39 Last Updated: 2024-08-03T07:32:55.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v2/6.setWizardCfg
CVE ID: CVE-2022-32054 State: PUBLISHED Published: 2022-07-07T17:08:33 Last Updated: 2024-08-03T07:32:55.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/winmt/CVE/blob/main/Tenda%20AC10/README.md
CVE ID: CVE-2022-32055 State: PUBLISHED Published: 2022-07-07T17:15:05 Last Updated: 2024-08-03T07:32:55.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests parameter at /index.php?page=search/rentals. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigb0x/CVEs/blob/main/Inout-Homestay-2-2-sqli.md
CVE ID: CVE-2022-32056 State: PUBLISHED Published: 2022-07-07T17:25:33 Last Updated: 2024-08-03T07:32:55.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via the USERNAME parameter at process.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JackyG0/Online-Accreditation-Management-System-v1.0-SQLi
CVE ID: CVE-2022-32058 State: PUBLISHED Published: 2022-07-07T17:47:26 Last Updated: 2024-08-03T07:32:55.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TP-Link%20TL-WR741NTL-WR742N%20.md
CVE ID: CVE-2022-32060 State: PUBLISHED Published: 2022-07-07T00:00:00 Last Updated: 2024-08-03T07:32:55.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea - https://github.com/bypazs/CVE-2022-32060
CVE ID: CVE-2022-32061 State: PUBLISHED Published: 2022-07-07T22:12:33 Last Updated: 2024-08-03T07:32:55.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-c02e46fa72ab
CVE ID: CVE-2022-32065 State: PUBLISHED Published: 2022-07-13T14:51:51 Last Updated: 2024-08-03T07:32:55.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yangzongzhuan/RuoYi/issues/118 - https://gitee.com/y_project/RuoYi/issues/I57IME - https://github.com/yangzongzhuan/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6 - https://gitee.com/y_project/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6
CVE ID: CVE-2022-32073 State: PUBLISHED Published: 2022-07-13T15:29:10 Last Updated: 2024-08-03T07:32:55.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssh/pull/360
CVE ID: CVE-2022-32074 State: PUBLISHED Published: 2022-07-13T15:35:28 Last Updated: 2024-08-03T07:32:55.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/www-community/attacks/xss/ - https://github.com/osTicket/osTicket-plugins - https://github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a7789768795ae
CVE ID: CVE-2022-32081 State: PUBLISHED Published: 2022-07-01T00:00:00 Last Updated: 2024-08-03T07:32:55.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26420 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
e/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/
CVE ID: CVE-2022-32082 State: PUBLISHED Published: 2022-07-01T00:00:00 Last Updated: 2024-08-03T07:32:55.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26433 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZH
OL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/
CVE ID: CVE-2022-32083 State: PUBLISHED Published: 2022-07-01T19:10:31 Last Updated: 2024-08-03T07:32:55.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26047 - https://security.netapp.com/advisory/ntap-20220826-0006/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
CVE ID: CVE-2022-32084 State: PUBLISHED Published: 2022-07-01T00:00:00 Last Updated: 2024-08-03T07:32:55.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26427 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announ
doraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/
CVE ID: CVE-2022-32085 State: PUBLISHED Published: 2022-07-01T19:10:32 Last Updated: 2024-08-03T07:32:56.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26407 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
CVE ID: CVE-2022-32086 State: PUBLISHED Published: 2022-07-01T19:10:33 Last Updated: 2024-08-03T07:32:55.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26412 - https://security.netapp.com/advisory/ntap-20220826-0007/
CVE ID: CVE-2022-32087 State: PUBLISHED Published: 2022-07-01T19:10:34 Last Updated: 2024-08-03T07:32:56.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26437 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
CVE ID: CVE-2022-32088 State: PUBLISHED Published: 2022-07-01T19:10:45 Last Updated: 2024-08-03T07:32:55.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26419 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
CVE ID: CVE-2022-32089 State: PUBLISHED Published: 2022-07-01T00:00:00 Last Updated: 2024-08-03T07:32:55.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26410 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMI
BM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/
CVE ID: CVE-2022-32091 State: PUBLISHED Published: 2022-07-01T00:00:00 Last Updated: 2024-08-03T07:32:56.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26431 - https://security.netapp.com/advisory/ntap-20220818-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - http
oraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/
CVE ID: CVE-2022-32092 State: PUBLISHED Published: 2022-06-27T21:37:27 Last Updated: 2024-08-03T07:32:56.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/fxc233/iot-vul/tree/main/D-Link/DIR-645
CVE ID: CVE-2022-32093 State: PUBLISHED Published: 2022-07-01T20:57:44 Last Updated: 2024-08-03T07:32:56.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Danie1233/Hospital-Management-System-v1.0-SQLi-2/
CVE ID: CVE-2022-32094 State: PUBLISHED Published: 2022-07-01T20:57:47 Last Updated: 2024-08-03T07:32:55.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Danie1233/Hospital-Management-System-v1.0-SQLi-3/
CVE ID: CVE-2022-32095 State: PUBLISHED Published: 2022-07-01T20:57:49 Last Updated: 2024-08-03T07:32:55.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Danie1233/Hospital-Management-System-v1.0-SQLi-4/
CVE ID: CVE-2022-32096 State: PUBLISHED Published: 2022-07-13T15:42:14 Last Updated: 2024-08-03T07:32:56.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/babelouest/rhonabwy/ - https://github.com/babelouest/rhonabwy/commit/b4c2923a1ba4fabf9b55a89244127e153a3e549b
CVE ID: CVE-2022-32101 State: PUBLISHED Published: 2022-06-15T16:21:05 Last Updated: 2024-08-03T07:32:55.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/e6e66d95-9d58-4dc0-a0ce-f337a16b482f
CVE ID: CVE-2022-32114 State: PUBLISHED Published: 2022-07-13T00:00:00.000Z Last Updated: 2025-02-13T16:32:42.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create (upload)" permission is supposed to be able to upload PDF files containing JavaScript, and that all files in a public assets folder are accessible to the outside world (unless the filename begins with a dot character). The administrator can choose to allow only image, video, and audio fi
(unless the filename begins with a dot character). The administrator can choose to allow only image, video, and audio files (i.e., not PDF) if desired. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bypazs/strapi - https://grimthereaperteam.medium.com/strapi-v4-1-12-unrestricted-file-upload-b993bfd07e4e - https://docs.strapi.io/dev-docs/configurations/public-assets - https://docs.strapi.io/user-docs/users-roles-permissions/configuring-administrator-roles - https://github.com/strapi/strapi/blob/d9277d616b4478a3839e79e47330a4aaf167a2f1/packages/core/upload/admin/src/components/MediaLibraryInput/index.js#L33 - https://github.com/strapi/strapi/blob/d9277d616b
kages/core/upload/admin/src/components/MediaLibraryInput/index.js#L33 - https://github.com/strapi/strapi/blob/d9277d616b4478a3839e79e47330a4aaf167a2f1/packages/core/content-type-builder/admin/src/components/AllowedTypesSelect/index.js#L14
CVE ID: CVE-2022-32115 State: PUBLISHED Published: 2022-07-08T11:10:39 Last Updated: 2024-08-03T07:32:55.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idno/known - https://withknown.com/ - https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
CVE ID: CVE-2022-32117 State: PUBLISHED Published: 2022-07-13T20:49:21 Last Updated: 2024-08-03T07:32:56.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception in /util/print.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/5008
CVE ID: CVE-2022-32118 State: PUBLISHED Published: 2022-07-15T11:13:25 Last Updated: 2024-08-03T07:32:55.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.arox.in - https://github.com/JC175/CVE-2022-32118
CVE ID: CVE-2022-32119 State: PUBLISHED Published: 2022-07-15T11:13:17 Last Updated: 2024-08-03T07:32:56.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://school.com - http://arox.com - https://github.com/JC175/CVE-2022-32119
CVE ID: CVE-2022-32124 State: PUBLISHED Published: 2022-06-22T18:42:01 Last Updated: 2024-08-03T07:32:55.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /index/jobfairol/show/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32125 State: PUBLISHED Published: 2022-06-22T18:42:02 Last Updated: 2024-08-03T07:32:55.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /job. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32126 State: PUBLISHED Published: 2022-06-22T18:42:03 Last Updated: 2024-08-03T07:32:55.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32127 State: PUBLISHED Published: 2022-06-22T18:42:03 Last Updated: 2024-08-03T07:32:55.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/view_be_browsed/total. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32128 State: PUBLISHED Published: 2022-06-22T18:42:05 Last Updated: 2024-08-03T07:32:56.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/service/increment/add/im. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32129 State: PUBLISHED Published: 2022-06-22T18:42:06 Last Updated: 2024-08-03T07:32:55.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/account/safety/trade. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32130 State: PUBLISHED Published: 2022-06-22T18:42:07 Last Updated: 2024-08-03T07:32:56.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/down_resume/total/nature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3
CVE ID: CVE-2022-32131 State: PUBLISHED Published: 2022-06-22T18:42:08 Last Updated: 2024-08-03T07:32:56.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /index/notice/show. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/3