Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s : GDPR Compliant Spam Protection, Ultimate Widgets Light, Insert or Embed Articulate Content into WordPress, APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps, Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud), Caxton – Create Pro page layouts in Gutenberg, Nitek Carousel Slider Cool Transitions, Extend Filter Products By Price Widget, BlockMeister – Block Pattern Builder, Yatri Tools, Restrict – membership, site, content and user access restrictions for WordPress, Change Prices with Time for WooCommerce, Flat Rate Shipping Plugin For WooCommerce, Responsive Social S
s for WordPress, Change Prices with Time for WooCommerce, Flat Rate Shipping Plugin For WooCommerce, Responsive Social Slider Widget, Menu Item Scheduler, Blog Sidebar Widget, Multipurpose Gutenberg Block, Full Page Blog Designer, WooCommerce Variation Swatches for Products, WP Activity Log, Simple Feature Requests Free – User Feedback Board, Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor, License Manager for WooCommerce, Sky Login Redirect, Google Analytics plugin for WordPress by GA4WP, Divi Collage, WordPress Persistent Login, Deals of the Day WooCommerce, Add Linkedin insight tags for Linkedin ads, Easy Settings for LearnDash, Share This Image, Easy Social Feed –
Commerce, Add Linkedin insight tags for Linkedin ads, Easy Settings for LearnDash, Share This Image, Easy Social Feed – Social Photos Gallery – Post Feed – Like Box, NEXUS, Meridia, Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition, Delete old Posts automatically, Brand, WPBakery Page Builder Addons by Livemesh, WP Table Builder – WordPress Table Plugin, Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress, Divi Content Restrictor, Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid, Premmerce Variation Swatches for WooCommerce, Portfolio for Elementor & Image Gallery | PowerFolio, SSL Atlas
ogo Grid, Premmerce Variation Swatches for WooCommerce, Portfolio for Elementor & Image Gallery | PowerFolio, SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress, Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery, Easy Tiktok Feed, PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text, Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO), Number Chat, Rating-Widget: Star Review System, Spotlight Social Feeds – Block, Shortcode, and Widget, Expire tags, Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters, Design for Cont
social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters, Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler, Dashy – Google Analytics advanced dashboard, Premmerce User Roles, Radio Station by netmix® – Manage and play your Show Schedule in WordPress!, myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification, WordPress SEO Audit Plugin – WP Site Auditor, WordPress Reviews by ReviewPress, WP Travel Engine – Tour Booking Plugin – Tour Operator Software, WP Mobile Menu – The Mobile-Friendly Responsive Menu, WP Smart
l Engine – Tour Booking Plugin – Tour Operator Software, WP Mobile Menu – The Mobile-Friendly Responsive Menu, WP Smart Export (Free), Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking, WP Conference Schedule, Strumenti Partita IVA per Woocommerce, Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung, Premmerce Brands for WooCommerce, Ethereum Wallet, Limb Gallery | Create Beautiful Image & Video Galleries, Code Manager, Payment Gateway for PayFabric, CP Simple Newsletter, LittleBot ACH for Stripe + Plaid, Aquarella Lite, Coinbase Commerce – Crypto Gateway for WooCommerce, Villar, Kikote – Location Picker at Checkout & Google Address AutoFill
inbase Commerce – Crypto Gateway for WooCommerce, Villar, Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce, Age Verification Screen for WooCommerce, Enhanced Ecommerce Google Analytics for WooCommerce, Joli FAQ SEO – WordPress FAQ Plugin, Mass Pages/Posts Creator, WP Relevant Ads, GloriousThemes Starter Sites, WP Group Promoter, Airpress, Schema Plugin For Divi, Gutenberg & Shortcodes, Giveaways for woocommerce, Custom Login Page Customizer, LearnMore, DeMomentSomTres Media Tools Auto, Ocean Extra, kk Star Ratings – Rate Post & Collect User Feedbacks, Drop Shadow Boxes, FAQ Manager For Divi, Gutenberg Block & Shortcode, Ads.txt & App-ads.txt Manager for W
ser Feedbacks, Drop Shadow Boxes, FAQ Manager For Divi, Gutenberg Block & Shortcode, Ads.txt & App-ads.txt Manager for WordPress, Quick Contact Form, WP Frontend Profile, SVG Flags – Beautiful Scalable Flags For All Countries!, Drip Feed Content Extended for Learndash, Posts List Designer by Category – List Category Posts Or Recent Posts, Conversion de moneda Woocommerce, VidSEO | WordPress Video SEO embedder with transcripts (Youtube & Vimeo), Before and After Product Images for WooCommerce, Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer, LawPress – Law Firm Website Management, Shipping Method Display Style for WooCommerce, Royal Elementor
n Tone Analyzer, LawPress – Law Firm Website Management, Shipping Method Display Style for WooCommerce, Royal Elementor Addons and Templates, SQL Reporting Services – SSRS Plugin for WordPress, Bulk Edit Posts and Products in Spreadsheet, Delete Duplicate Posts, WS Bootstrap, Clean Social Icons, Media Library File Download, WP Link Bio, Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic), Geo Mashup, Builder for WooCommerce product reviews shortcodes – ReviewShort, Contact List – Premium Staff Listing, Business Directory Plugin & Address Book, Post Snippets – Custom WordPress Code Snippets Customizer, SocialMark – Easy Watermark/Logo on Social Media Post Link Sh
Post Snippets – Custom WordPress Code Snippets Customizer, SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview, Print My Blog – Print, PDF, & eBook Converter WordPress Plugin, WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes), TreePress – Easy Family Trees & Ancestor Profiles, Postcode Redirect, Product Author for WooCommerce, WP Coupons and Deals – WordPress Coupon Plugin, Feedpress Generator – External RSS Frontend Customizer, Form Vibes – Database Manager for Forms, WP AutoMedic, Banner Management For WooCommerce, Duplicate Variations for Woocommerce, Send Prebuilt Emails, FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin, Liveme
Variations for Woocommerce, Send Prebuilt Emails, FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin, Livemesh SiteOrigin Widgets, Livemesh Addons for Beaver Builder, Tabs with Recommended Posts (Widget), Spanish Market Enhancements for WooCommerce, RevivePress – Keep your Old Content Evergreen, WP fail2ban – Advanced Security Plugin, Ultra Elementor Addons, RecurWP – WordPress Recurly Payment Gateway, Smart Floating / Sticky Buttons – Call, Sharing, Chat Widgets & More – Buttonizer, Quick Event Manager, Image Photo Gallery Final Tiles Grid, Lightbox & Modal Popup WordPress Plugin – FooBox, WP Dev Powers – Display Screen Dimensions to Admin Plugin, Ultimate Bulk SEO Noindex Nofol
up WordPress Plugin – FooBox, WP Dev Powers – Display Screen Dimensions to Admin Plugin, Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster, WP Data Access – WordPress App, Table and Form Builder plugin, StoreCustomizer – A plugin to Customize all WooCommerce Pages, WordPress News Plugin – TopNewsWp, User Menus – Nav Menu Visibility, Contact Form 7 Multi-Step Forms, Easy Age Verify, Blocked in China | Check if your site is available in the Chinese mainland, WooCommerce Disable Payment Methods based on cart conditions, Awesome SSL, Iks Menu – WordPress Category Accordion Menu & FAQs, Purus, Hooked Editable Content, Run Contests, Raffles, and Giveaways with Con
WordPress Category Accordion Menu & FAQs, Purus, Hooked Editable Content, Run Contests, Raffles, and Giveaways with ContestsWP, Post Carousel Divi, MailChimp Manager, Premmerce Permalink Manager for WooCommerce, Secure IP Logins, Videopack, Premmerce WooCommerce Customers Manager, AnyWhere Elementor, Divi Torque Lite – Divi Theme and Extra Theme, Events Calendar Registration, Rocket Maintenance Mode & Coming Soon Page, WordPress WooCommerce Sync for Google Sheet, Easy Smooth Scroll Links – Smooth Scrolling Anchor, Page Builder Gutenberg Blocks – Kioken Blocks, Cryptocurrency Portfolio Tracker, Go Fetch Jobs (for WP Job Manager), Quick Affiliate Store, WP Tools Divi Blog Carousel, Post to Go
cy Portfolio Tracker, Go Fetch Jobs (for WP Job Manager), Quick Affiliate Store, WP Tools Divi Blog Carousel, Post to Google My Business (Google Business Profile), NicheBase, WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information, Premmerce, CartPops – High Converting Add To Cart Popup For WooCommerce, Scrollsequence – Cinematic Scroll Image Animation Plugin, Elation, Cuisine Palace, Product Attachment for WooCommerce, Master Blocks – Gutenberg Site Builder, Product Options and Price Calculation Formulas for WooCommerce – Uni CPO, WordPress Coupon Plugin for Bloggers and Marketers – WP Offers, WordPress form builder plugin for contact forms, surveys and quizzes
upon Plugin for Bloggers and Marketers – WP Offers, WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto, Widgets on Pages and Posts, Better Messages – WCFM Integration, SheetPress – Manage WordPress Meta data with Google Sheets, Advanced Custom Fields options import/export, Quick Paypal Payments, Tarot Card Oracle, Better Sharing, Restrict User Access – Ultimate Membership & Content Protection, WUPO Group Attributes for WooCommerce, Nugget by Ingot: Easy, automated and native A/B testing for everyone, FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback., Arendelle, Easy Zillow Reviews, Battle Suit for Divi, Store Toolkit – Woo
ioritise, manage and track customer feedback., Arendelle, Easy Zillow Reviews, Battle Suit for Divi, Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools, WCC SEO Keyword Research, Elements for LifterLMS, Custom Registration and Custom Login Forms with New Recaptcha, Quote for WooCommerce Lite – Add to Quote Plugin Lets Customers Request Custom Quotes for Products using the Request a Quote Plugin for WooCommerce, Wadi Survey, Performance Kit, Page Builder for Gutenberg – StarterBlocks, Impexium Single Sign On, XT Quick View for WooCommerce, Live Drag and Drop Builder for Contact Form 7, Primary Addon for Elementor, JDs Portfolio, TwentyFourth WP Scraper, Blocksy Companion
Drop Builder for Contact Form 7, Primary Addon for Elementor, JDs Portfolio, TwentyFourth WP Scraper, Blocksy Companion, WordPress Google Translate, Hasium, Station Pro, Event Tickets and Registration, Gateway for PayLate on WooCommerce, Auto SEO META keywords (META tags keywords) optimization + WooCommerce, ClimateClick: Climate Action for all, Premmerce SEO for WooCommerce, Wholesale for WooCommerce — This Wholesale Plugin Helps B2B and B2C Businesses Streamline Wholesale Products, Pricing, and User Roles, Automating their WooCommerce Wholesale Stores, Frontend group restriction for LearnDash, Really Simple Featured Video – Featured video support for Posts, Pages & WooCommerce Products, D
triction for LearnDash, Really Simple Featured Video – Featured video support for Posts, Pages & WooCommerce Products, Display Eventbrite Events, XT Floating Cart for WooCommerce, Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy), WP SPID Italia, Tiered Pricing Table for WooCommerce, Migrate WordPress Website & Backups – Prime Mover, Replyable – Subscribe to Comments and Reply by Email, Court Reservation – Manage Your Court Bookings Online, VO Store Locator – WP Store Locator Plugin, Get Directions Map, Premmerce Redirect Manager, SnazzyAdmin WP Admin Theme, Amela, Woocommerce Customers Order History, EthPress – Web3 Login, Ant Ad
Redirect Manager, SnazzyAdmin WP Admin Theme, Amela, Woocommerce Customers Order History, EthPress – Web3 Login, Ant Admin Notices for Team, WooCommerce Bulk Edit Coupons – WP Sheet Editor, Pay For Post with WooCommerce, bbResolutions, WooCommerce Google Analytics Integration By Advanced WC Analytics, TK SmugMug Slideshow Shortcode, Lightbox – EverlightBox Gallery, Unakit, WP Affiliate Disclosure, Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more, RaCar Clear Cart for WooCommerce, WP Disable Sitemap, Internal Link Juicer: SEO Auto Linker for WordPress, Block Slider – Responsive Image Slider, Video Slider & Post Slider, Pinblocks — Gutenberg blo
Auto Linker for WordPress, Block Slider – Responsive Image Slider, Video Slider & Post Slider, Pinblocks — Gutenberg blocks with Pinterest widgets, Contact Widgets For Elementor all the contact links you need in one place, Tickera – WordPress Event Ticketing, StreamCast – Radio Player for WordPress, Sticky add to cart for Woo, BlockyPage – Gutenberg Based Page Builder, Pro Broken Links Maintainer, WP School Calendar, ListPlus – Unlimited Listing Directory, Walker Core, Agy – Age verification for WooCommerce, Modern Designs for Gravity Forms, RankBear, STAX Header Builder, Fast Checkout for WooCommerce, WooCommerce PayPlug, Easy Code Snippets, W3SCloud Contact Form 7 to Zoho CRM, Widget Detec
ast Checkout for WooCommerce, WooCommerce PayPlug, Easy Code Snippets, W3SCloud Contact Form 7 to Zoho CRM, Widget Detector for Elementor, Add Tiktok Pixel for Tiktok ads (+Woocommerce), WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, Security+, Better Messages – Integration for WC Vendors Marketplace, Alley Business Toolkit, Premmerce Product Filter for WooCommerce, WP Search Filter, Easy Post Views Count, Power Ups for Elementor, Social Kit, Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider, HM Multiple Roles, Team Collaboration Plugin for WordPress Editorial teams- Multicollab, Alt Manager, Premmerce Product
HM Multiple Roles, Team Collaboration Plugin for WordPress Editorial teams- Multicollab, Alt Manager, Premmerce Product Search for WooCommerce, WP Security Safe, WooCommerce Bulk Edit Products – WP Sheet Editor, Da Reactions, Food Store – Online Food Delivery & Pickup, Abeta Link PunchOut, jav&#039;s – WooCommerce and Trello integration WooTrello, Page Builder Sandwich – Front End WordPress Page Builder Plugin, WP Sessions Time Monitoring Full Automatic, WoowGallery – image gallery / content gallery / ecommerce gallery / social gallery / video gallery / album photo gallery, WordPress Auto SEO Plugin – Upfiv SEO Wizard, Greenshift – animation and page builder blocks, Restaurant & Cafe Addon f
WordPress Auto SEO Plugin – Upfiv SEO Wizard, Greenshift – animation and page builder blocks, Restaurant & Cafe Addon for Elementor Problem Types: CWE-862 Description: The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=cve - https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a - https://freemius.com/blog/managing-security-issues-open-source-freemius-sdk-security-disclosure/ - https://wpdirectory.net/search/01FWPVWA7BC5DYGZHNSZQ9QMN5 - https://wpdirectory.net/search/01G02RSGMFS1TPT63FS16RWEYR - https://web.archive.org/web/20220225174410/https%3A//www.pluginvulnerabilities.com/2022/02/25/our-security-review-of-wordpress-plugin-found-freemius-library-still-contained-vulnerabilities-3-years-after-major-security-incident/
CVE ID: CVE-2022-4975 State: PUBLISHED Published: 2025-01-27T13:47:55.595Z Last Updated: 2025-01-28T20:32:53.766Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: Red Hat Products: Red Hat Advanced Cluster Security 3 Problem Types: CWE-79 Description: A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end generates a DOM table-element (id="pdf-table"). This information is then populated with unsanitized data using innerHTML. An attacker with some control over the data rendered can trigger a cross-site scripting (XSS) vulnera
a using innerHTML. An attacker with some control over the data rendered can trigger a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-4975 - https://bugzilla.redhat.com/show_bug.cgi?id=2071527
CVE ID: CVE-2022-4976 State: PUBLISHED Published: 2025-06-12T00:33:13.976Z Last Updated: 2025-06-13T16:03:31.477Z Vendors: ETJ Products: Archive::Unzip::Burst Problem Types: CWE-1395 Description: Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities. The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and CVE-2014-8141. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://rt.cpan.org/Public/Bug/Display.html?id=143547
CVE ID: CVE-2022-4978 State: PUBLISHED Published: 2025-07-23T13:49:30.076Z Last Updated: 2025-07-23T14:41:50.042Z Vendors: Steppschuh Products: Remote Control Collection Server Problem Types: CWE-306, CWE-78 Description: Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise. Additional Analyst
mmands to launch a system shell and execute arbitrary commands, resulting in full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/remote_control_collection_rce.rb - https://remote-control-collection.com/ - https://www.vulncheck.com/advisories/steppschuh-remote-control-server-unauth-rce
CVE ID: CVE-2022-4979 State: PUBLISHED Published: 2025-07-25T15:55:36.039Z Last Updated: 2025-11-21T16:05:35.685Z Vendors: Sitecore Products: Experience Platform, Content Mangement System (CMS), Managed Cloud Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who run the affected Sitecore Experience Platform / CMS versions are also affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.sitecore.com/kb?id=kb_article_view&sys
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1001489 - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1001539 - https://www.vulncheck.com/advisories/sitecore-xp-cms-managed-cloud-xss
CVE ID: CVE-2022-4980 State: PUBLISHED Published: 2025-09-19T18:55:02.928Z Last Updated: 2025-11-21T16:07:20.732Z Vendors: General Bytes Products: Crypto Application Server (CAS) Problem Types: CWE-306 Description: General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 (backport) and 20220725.22 (mainline) contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation / first-admin creation page and create a new administrative account remotely. By gaining admin privileges, the attacker can change the ATM configuration resulting in redirected funds. Publi
emotely. By gaining admin privileges, the attacker can change the ATM configuration resulting in redirected funds. Public vendor advisories and multiple independent writeups describe the vulnerability as a call to the page used for initial/default installation / first administration user creation; General Bytes has not publicly published the exact endpoint/parameter name. The issue was actively exploited in the wild against cloud-hosted and standalone CAS deployments (scanning exposed CAS instances on ports 7777/443), and publicly acknowledged by the General Bytes in September 2022. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://generalbytes.atlassian.net/wiki/space
ber 2022. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/2785509377/Security%2BIncident%2B - https://www.halborn.com/blog/post/explained-the-general-bytes-bitcoin-atm-hack-august-2022 - https://news.sophos.com/en-us/2022/08/23/bitcoin-atms-leeched-by-attackers-who-created-fake-admin-accounts/ - https://www.incibe.es/en/incibe-cert/publications/cybersecurity-highlights/0day-vulnerability-exploited-general-bytes - https://thehackernews.com/2022/08/hackers-stole-crypto-from-bitcoin-atms.html - https://www.vulncheck.com/advisories/general-bytes-cas-unauth-creation-of-admin-account-via-default-installation-first-admin-page
CVE ID: CVE-2022-4981 State: PUBLISHED Published: 2025-10-21T15:02:13.727Z Last Updated: 2025-10-21T15:22:40.779Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: DCMTK Problem Types: CWE-476, CWE-404 Description: A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading
be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading the affected component is advised. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329029 - https://vuldb.com/?ctiid.329029 - https://vuldb.com/?submit.673134 - https://support.dcmtk.org/redmine/issues/1026 - https://shimo.im/docs/e1Azd4dDQXUgOGqW/
CVE ID: CVE-2022-4982 State: PUBLISHED Published: 2025-11-12T22:10:11.204Z Last Updated: 2025-11-13T14:35:36.484Z Vendors: DBL Technology (DBLTek) Products: GoIP-1 Problem Types: CWE-98, CWE-22 Description: DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers (`frame.html` and `frame.A100.html`) that accept a path parameter (`content` or `sidebar`) which is not properly validated or canonicalized. An attacker can supply directory-traversal sequences to cause the server to read and return arbitrary filesystem files that the webserver user can access. Other GoIP models and firmware versions ar