Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43118 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:34:06.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flatCore/flatCore-CMS/issues/86
CVE ID: CVE-2022-43119 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-04-30T18:10:22.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sinemsahn/POC/blob/main/Create%20Clansphere%202011.4%20%22username%22%20xss.md
CVE ID: CVE-2022-43120 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:12:05.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/intelliants/subrion/issues/894
CVE ID: CVE-2022-43121 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:33:10.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/intelliants/subrion/issues/895
CVE ID: CVE-2022-43124 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T15:58:26.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vickysuper/Cve_report/blob/master/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-2.md
CVE ID: CVE-2022-43125 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T15:54:10.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vickysuper/Cve_report/blob/master/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-3.md
CVE ID: CVE-2022-43126 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T15:52:39.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vickysuper/Cve_report/blob/master/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43127 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T14:28:28.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vickysuper/Cve_report/blob/master/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-4.md
CVE ID: CVE-2022-43128 State: REJECTED Published: 2023-04-16T01:50:19.147Z Last Updated: 2025-02-13T15:46:34.228Z Description: No description available.
CVE ID: CVE-2022-43135 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:48:56.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/junHVV/bug_report/blob/main/vendors/mayuri_k/Online%20Diagnostic%20Lab%20Management%20System/SQLi-1.md
CVE ID: CVE-2022-43138 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:07:54.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/50248
CVE ID: CVE-2022-43140 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:07:01.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kekingcn/kkFileView/issues/392
CVE ID: CVE-2022-43142 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:15:16.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TongJinBo/BugReport/blob/main/XssBug.md
CVE ID: CVE-2022-43143 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T19:53:02.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/beekeeper-studio/beekeeper-studio/issues/1393
CVE ID: CVE-2022-43144 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:21:38.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html - https://www.sourcecodester.com/download-code?nid=15688&title=Canteen+Management+System+Project+Source+Code+in+PHP+Free+Download - https://github.com/mudassiruddin/CVE-2022-43144-St
=Canteen+Management+System+Project+Source+Code+in+PHP+Free+Download - https://github.com/mudassiruddin/CVE-2022-43144-Stored-XSS
CVE ID: CVE-2022-43146 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-05-01T13:29:38.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html - https://medium.com/%40syedmudassiruddinalvi/cve-2022-43146-rce-via-arbitrary-file-upload-28dfa77c5de7
CVE ID: CVE-2022-43148 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T18:32:20.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lvu/rtf2html/issues/11
CVE ID: CVE-2022-43151 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T18:36:18.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hzeller/timg/issues/92
CVE ID: CVE-2022-43152 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T18:38:54.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/justdan96/tsMuxer/issues/641
CVE ID: CVE-2022-43162 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:13:31.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/view_test.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zys20201225/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43163 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:11:26.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Zer0vAv/bug_report/blob/main/vendors/oretnom23./online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43164 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T20:05:31.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module=global_lists/lists) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/4
CVE ID: CVE-2022-43165 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:52:14.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global_vars/vars) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Value parameter after clicking "Create". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/5
CVE ID: CVE-2022-43166 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:50:36.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php?module=entities/entities) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/2
CVE ID: CVE-2022-43167 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:48:24.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users_alerts/users_alerts) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/7
CVE ID: CVE-2022-43168 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:42:39.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/1
CVE ID: CVE-2022-43169 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:39:05.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php?module=users_groups/users_groups) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Group". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/3
CVE ID: CVE-2022-43170 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:34:55.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index.php?module=dashboard_configure/index) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter after clicking "Add info block". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anhdq201/rukovoditel/issues/6
CVE ID: CVE-2022-43171 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:10:06.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lief-project/LIEF/issues/782
CVE ID: CVE-2022-43179 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T19:49:19.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-1.md
CVE ID: CVE-2022-43183 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:07:31.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-job/issues/3002
CVE ID: CVE-2022-43184 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:27:10.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/HuangPayoung/CVE-request/tree/main/DLink/vuln2
CVE ID: CVE-2022-43185 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:26:09.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kubozz/rukovoditel-3.2.1/issues/1
CVE ID: CVE-2022-43192 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:05:47.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/linchuzhu/Dedecms-v5.7.101-RCE
CVE ID: CVE-2022-43196 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T17:48:55.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/f6c8a9ac39afae45c3f2aa32a7f1b205
CVE ID: CVE-2022-43212 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:18:31.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html - https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43212%28sql%20in%20fetchOrderData.php%29.md
CVE ID: CVE-2022-43213 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T17:42:21.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html - https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43213%28sql%20in%20editorder.php%29.md
CVE ID: CVE-2022-43214 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:17:33.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html - https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43214%28sql%20in%20printOrder.php%29.md
CVE ID: CVE-2022-43215 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:16:08.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html - https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43215%28sql%20in%20getOrderReport.php%29.md
CVE ID: CVE-2022-43216 State: PUBLISHED Published: 2024-04-08T00:00:00 Last Updated: 2024-10-28T19:59:15.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: AbrhilSoft Employee's Portal before v5.6.2 was discovered to contain a SQL injection vulnerability in the login page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://abrhil.com/ - https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216
CVE ID: CVE-2022-43221 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:15:08.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PFCP packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ToughRunner/Open5gs_bugreport3
CVE ID: CVE-2022-43222 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:13:34.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PFCP packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ToughRunner/Open5gs_bugreport4
CVE ID: CVE-2022-43223 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:12:00.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted UE attachment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ToughRunner/Open5gs_bugreport2
CVE ID: CVE-2022-43226 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:49:54.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/view_appointment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Happyd99/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43227 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T15:57:50.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/view_appointment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Happyd99/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-2.md