Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2273 State: PUBLISHED Published: 2022-08-01T12:51:22 Last Updated: 2024-08-03T00:32:09.608Z Vendors: Unknown Products: Simple Membership Problem Types: CWE-269 Description: The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/724729d9-1c4a-485c-9c90-a27664c47c84
CVE ID: CVE-2022-2274 State: PUBLISHED Published: 2022-07-01T07:30:17.282376Z Last Updated: 2024-09-17T00:20:40.199Z Vendors: OpenSSL Products: OpenSSL Problem Types: Memory Corruption Description: The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running
ion on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openssl/openssl/issues/18625 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345 - https://www.openssl.org/news/secadv/20220705.txt - https://security.netapp.com/advisory/ntap-20220715-0010/
CVE ID: CVE-2022-2275 State: PUBLISHED Published: 2022-08-22T15:00:37 Last Updated: 2024-08-03T00:32:09.357Z Vendors: Unknown Products: WP Edit Menu Problem Types: CWE-352 Description: The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/07757d1e-39ad-4199-bc7a-ecb821dfc996
CVE ID: CVE-2022-2276 State: PUBLISHED Published: 2022-08-22T15:00:57 Last Updated: 2024-08-03T00:32:09.597Z Vendors: Unknown Products: WP Edit Menu Problem Types: CWE-862, CWE-352 Description: The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/92de9c1b-48dd-4a5f-bbb3-455f8f172b09 - https://plugins.trac.wordpress.org/changeset?new=2749780%40wp-edit-menu%2Ftrunk&old=2220186%40wp-edit-menu%2Ftrunk
CVE ID: CVE-2022-2277 State: PUBLISHED Published: 2022-09-14T17:02:01.251Z Last Updated: 2025-06-04T15:06:49.732Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: MicroSCADA X SYS600 Problem Types: CWE-1284 Description: Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too distant in the future to any remote ICCP system. By default, ICCP is not configured and not enabled. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10.
. By default, ICCP is not configured and not enabled. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10.2 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-2278 State: PUBLISHED Published: 2022-08-01T12:51:35 Last Updated: 2024-08-03T00:32:09.669Z Vendors: Unknown Products: Featured Image from URL (FIFU) Problem Types: CWE-79 Description: The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not validate, sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4481731d-4dbf-4bfa-b4cc-64f10bb7e7bf
CVE ID: CVE-2022-2279 State: PUBLISHED Published: 2022-07-01T08:15:21 Last Updated: 2024-08-03T00:32:09.597Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: bfabiszewski Products: bfabiszewski/libmobi Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de - https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c
CVE ID: CVE-2022-2280 State: PUBLISHED Published: 2022-07-01T08:15:14 Last Updated: 2024-08-03T00:32:09.569Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/22561bfd-a28f-474e-9bfd-7263c1b71133 - https://github.com/microweber/microweber/commit/9ebbb4dd35da74025ab6965f722829a7f8f86566
CVE ID: CVE-2022-2281 State: PUBLISHED Published: 2022-07-01T15:48:46 Last Updated: 2024-08-03T00:32:09.342Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows disclosure of release titles if group milestones are associated with any project releases. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/271172 - https://hackerone.com/reports/1012659 - https://gitlab.com/
es: - https://gitlab.com/gitlab-org/gitlab/-/issues/271172 - https://hackerone.com/reports/1012659 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2281.json
CVE ID: CVE-2022-2282 State: REJECTED Published: 2022-07-01T12:30:17 Last Updated: 2022-07-03T09:30:21 Description: No description available.
CVE ID: CVE-2022-2283 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:15.534Z Description: No description available.
CVE ID: CVE-2022-2284 State: PUBLISHED Published: 2022-07-02T00:00:00 Last Updated: 2024-08-03T00:32:09.615Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/571d25ce-8d53-4fa0-b620-27f2a8a14874 - https://github.com/vim/vim/commit/3d51ce18ab1be4f9f6061568a4e7fabf00b21794 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/l
CVE ID: CVE-2022-2285 State: PUBLISHED Published: 2022-07-02T00:00:00 Last Updated: 2024-08-03T00:32:09.379Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-190 Description: Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/64574b28-1779-458d-a221-06c434042736 - https://github.com/vim/vim/commit/27efc62f5d86afcb2ecb7565587fe8dea4b036fe - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archiv
ge-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/ - https://security.gentoo.org/glsa/202208-32 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2286 State: PUBLISHED Published: 2022-07-02T00:00:00 Last Updated: 2024-08-03T00:32:09.551Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fe7681fb-2318-436b-8e65-daf66cd597d8 - https://github.com/vim/vim/commit/f12129f1714f7d2301935bb21d896609bdac221c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/pack
CVE ID: CVE-2022-2287 State: PUBLISHED Published: 2022-07-02T00:00:00 Last Updated: 2024-08-03T00:32:09.365Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/654aa069-3a9d-45d3-9a52-c1cf3490c284 - https://github.com/vim/vim/commit/5e59ea54c0c37c2f84770f068d95280069828774 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2288 State: PUBLISHED Published: 2022-07-03T00:00:00 Last Updated: 2024-08-03T00:32:09.377Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-787 Description: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a71bdcb7-4e9b-4650-ab6a-fe8e3e9852ad - https://github.com/vim/vim/commit/c6fdb15d423df22e1776844811d082322475e48a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/pac
%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2289 State: PUBLISHED Published: 2022-07-03T00:00:00 Last Updated: 2024-08-03T00:32:09.390Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/7447d2ea-db5b-4883-adf4-1eaf7deace64 - https://github.com/vim/vim/commit/c5274dd12224421f2430b30c53b881b9403d649e - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/package-
sts.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2290 State: PUBLISHED Published: 2022-07-03T06:05:13 Last Updated: 2024-08-03T00:32:09.599Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: zadam Products: zadam/trilium Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/367c5c8d-ad6f-46be-8503-06648ecf09cf - https://github.com/zadam/trilium/commit/3faae63b849a1fabc31b823bb7af3a84d32256a7
CVE ID: CVE-2022-2291 State: PUBLISHED Published: 2022-07-12T14:12:43.000Z Last Updated: 2025-04-15T14:07:49.053Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Hotel Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /ci_hms/search of the component Search. The manipulation of the argument search with the input "><script>alert("XSS")</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
oss site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/a203e5c7b3ac88a5a0bc7200324f2b24716e8fc2/CVE/Hotel%20Management%20system/Cross%20Site%20Scripting%28Refelected%29/POC.md - https://vuldb.com/?id.203165
CVE ID: CVE-2022-2292 State: PUBLISHED Published: 2022-07-12T14:12:45.000Z Last Updated: 2025-04-15T14:07:38.256Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Hotel Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input "><script>alert("XSS")</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the
ipt> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/a203e5c7b3ac88a5a0bc7200324f2b24716e8fc2/CVE/Hotel%20Management%20system/Cross%20Site%20Scripting%28Stored%29/POC.md - https://vuldb.com/?id.203166
CVE ID: CVE-2022-2293 State: PUBLISHED Published: 2022-07-12T14:12:48.000Z Last Updated: 2025-04-15T14:07:24.077Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Sales Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ci_ssms/index.php/orders/create. The manipulation of the argument customer_name with the input <script>alert("XSS")</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public
cript> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/a203e5c7b3ac88a5a0bc7200324f2b24716e8fc2/CVE/Simple%20Sales%20Management%20System/Cross%20Site%20Scripting%28Stored%29/POC.md - https://vuldb.com/?id.203167
CVE ID: CVE-2022-2294 State: PUBLISHED Published: 2022-07-28T00:00:00.000Z Last Updated: 2025-10-21T23:15:37.301Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1341043 - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - http
oraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - http://www.openwall.com/lists/oss-security/2022/07/28/2 - https://security.gentoo.org/glsa/202208-35 - https://security.gentoo.org/glsa/202208-39 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2022-2295 State: PUBLISHED Published: 2022-07-28T01:00:50 Last Updated: 2024-08-03T00:32:09.605Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html - https://crbug.com/1336869 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/pack
40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-35
CVE ID: CVE-2022-2296 State: PUBLISHED Published: 2022-07-28T01:01:01 Last Updated: 2024-08-03T00:32:09.607Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via direct UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html - https://crbug.com/1327087 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
ttps://crbug.com/1327087 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-35
CVE ID: CVE-2022-2297 State: PUBLISHED Published: 2022-07-12T16:22:14.000Z Last Updated: 2025-04-15T14:07:16.654Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input <?php phpinfo();?> leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be
estricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/8c6b66919be1bd66a54c16cc27cbdd9793221d3e/CVE/Clinic%27s%20Patient%20Management%20System/Unrestricted%20file%20upload%20%28RCE%29/POC.md - https://vuldb.com/?id.203178
CVE ID: CVE-2022-2298 State: PUBLISHED Published: 2022-07-12T16:22:27.000Z Last Updated: 2025-04-14T16:00:57.631Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pms/index.php of the component Login Page. The manipulation of the argument user_name with the input admin' or '1'='1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public a
n' or '1'='1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/63e283e7d7dad3783237f15cdae2bb649bc1e198/CVE/Clinic%27s%20Patient%20Management%20System/SQLi/POC.md - https://vuldb.com/?id.203179
CVE ID: CVE-2022-2299 State: PUBLISHED Published: 2022-07-25T12:48:09 Last Updated: 2024-08-03T00:32:09.608Z Vendors: Unknown Products: Allow svg files Problem Types: CWE-79 Description: The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/29015c35-0470-41b8-b197-c71b800ae2a9
CVE ID: CVE-2022-2300 State: PUBLISHED Published: 2022-07-04T10:35:10 Last Updated: 2024-08-03T00:32:09.400Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/882d6cf9-64f5-4614-a873-a3030473c817 - https://github.com/microweber/microweber/commit/70b46e231e7b2c113666745a0ab6de9a8b7ef08e
CVE ID: CVE-2022-2301 State: PUBLISHED Published: 2022-07-04T10:30:22 Last Updated: 2024-08-03T00:32:09.618Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: hpjansson Products: hpjansson/chafa Problem Types: CWE-126 Description: Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f6b9114b-671d-4948-b946-ffe5c9aeb816 - https://github.com/hpjansson/chafa/commit/56fabfa18a6880b4cb66047fa6557920078048d9
CVE ID: CVE-2022-2302 State: PUBLISHED Published: 2022-07-11T10:40:33.696766Z Last Updated: 2024-09-16T22:57:01.217Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: LENZE Products: cabinet c520, cabinet c550, cabinet c750 Problem Types: CWE-304 Description: Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-030/