Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34503 State: PUBLISHED Published: 2022-07-22T14:17:21 Last Updated: 2024-08-03T09:15:15.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qpdf/qpdf/issues/701
CVE ID: CVE-2022-34509 State: PUBLISHED Published: 2022-07-22T14:17:44 Last Updated: 2024-08-03T09:15:15.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/wikifaces/ - https://github.com/tford9/Wiki-Faces-Downloader/issues/1
CVE ID: CVE-2022-34520 State: PUBLISHED Published: 2022-07-22T14:17:29 Last Updated: 2024-08-03T09:15:15.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/20354
CVE ID: CVE-2022-34526 State: PUBLISHED Published: 2022-07-29T00:00:00 Last Updated: 2024-08-03T09:15:15.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/libtiff/libtiff/-/issues/433 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FC6LWPAEKYJ57LSHX4SBFMLRMLOZTHIJ/ - https://security.netapp.com/advisory/ntap-20220930-00
ists.fedoraproject.org/message/FC6LWPAEKYJ57LSHX4SBFMLRMLOZTHIJ/ - https://security.netapp.com/advisory/ntap-20220930-0002/ - https://gitlab.com/libtiff/libtiff/-/issues/486 - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-34527 State: PUBLISHED Published: 2022-07-29T22:48:12 Last Updated: 2024-08-03T09:15:15.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte_4C0160. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/blob/main/D-Link/DSL-3782/CMDi_in_D-Link%20DSL-3782.md
CVE ID: CVE-2022-34528 State: PUBLISHED Published: 2022-07-29T22:48:13 Last Updated: 2024-08-03T09:15:15.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/blob/main/D-Link/DSL-3782/BOF_in_D-Link%20DSL-3782.md
CVE ID: CVE-2022-34529 State: PUBLISHED Published: 2022-07-27T13:09:25 Last Updated: 2024-08-03T09:15:15.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wasm3/wasm3/issues/337
CVE ID: CVE-2022-34530 State: PUBLISHED Published: 2022-08-01T19:24:37 Last Updated: 2024-08-03T09:15:15.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - http://backdrop.com
CVE ID: CVE-2022-34531 State: PUBLISHED Published: 2022-07-29T22:55:35 Last Updated: 2024-08-03T09:15:15.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Airrudder/vuls/blob/main/dedecms/DedeCMS-v5.7.95-RCE.md
CVE ID: CVE-2022-34534 State: PUBLISHED Published: 2022-07-19T19:03:54 Last Updated: 2024-08-03T09:15:15.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34535 State: PUBLISHED Published: 2022-07-19T19:03:54 Last Updated: 2024-08-03T09:15:15.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scripts via web files. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34536 State: PUBLISHED Published: 2022-07-19T19:03:55 Last Updated: 2024-08-03T09:15:15.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session hijacking via a crafted session token. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34537 State: PUBLISHED Published: 2022-07-19T19:03:56 Last Updated: 2024-08-03T09:15:15.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a cross-site scripting (XSS) vulnerability via the component bia_oneshot.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34538 State: PUBLISHED Published: 2022-07-19T19:03:57 Last Updated: 2024-08-03T09:15:15.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34539 State: PUBLISHED Published: 2022-07-19T19:04:06 Last Updated: 2024-08-03T09:15:15.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34540 State: PUBLISHED Published: 2022-07-19T19:03:59 Last Updated: 2024-08-03T09:15:15.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/license_tok.cgi. This vulnerability is exploitable via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab
CVE ID: CVE-2022-34549 State: PUBLISHED Published: 2022-07-27T13:12:30 Last Updated: 2024-08-03T09:15:15.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rawchen/sims/issues/6 - http://cwe.mitre.org/data/definitions/434.html
CVE ID: CVE-2022-34550 State: PUBLISHED Published: 2022-07-27T13:12:30 Last Updated: 2024-08-03T09:15:15.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rawchen/sims/issues/8 - http://cwe.mitre.org/data/definitions/79.html
CVE ID: CVE-2022-34551 State: PUBLISHED Published: 2022-07-27T13:12:31 Last Updated: 2024-08-03T09:15:15.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sims v1.0 was discovered to allow path traversal when downloading attachments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rawchen/sims/issues/7 - http://cwe.mitre.org/data/definitions/23.html
CVE ID: CVE-2022-34555 State: PUBLISHED Published: 2022-07-28T22:57:29 Last Updated: 2024-08-03T09:15:15.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skyedai910/Vuln/tree/master/TL-R473G/command_execution_0
CVE ID: CVE-2022-34556 State: PUBLISHED Published: 2022-07-28T22:50:02 Last Updated: 2024-08-03T09:15:15.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/zsaleeba/picoc/-/issues/47 - https://github.com/jpoirier/picoc/issues/34
CVE ID: CVE-2022-34557 State: PUBLISHED Published: 2022-07-28T22:30:21 Last Updated: 2024-08-03T09:15:15.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/permit/permit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AD-Appledog/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/SQLi-1.md
CVE ID: CVE-2022-34558 State: PUBLISHED Published: 2022-07-28T22:24:02 Last Updated: 2024-08-03T09:15:15.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dmwm/WMCore/issues/11188
CVE ID: CVE-2022-34560 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-10-27T14:44:50.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the History parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html - https://mohammedshine.github.io/vulnresearch.html
CVE ID: CVE-2022-34561 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-03T09:15:15.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://v4.phpfox.com/ - https://mohammedshine.github.io/vulnresearch.html
CVE ID: CVE-2022-34562 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-10-27T14:45:47.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the status box. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://v4.phpfox.com/ - https://mohammedshine.github.io/vulnresearch.html
CVE ID: CVE-2022-34567 State: PUBLISHED Published: 2022-08-01T14:01:35 Last Updated: 2024-08-03T09:15:15.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI (Mango) 4.1 allows attackers to escalate privileges via crafted plugins. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam.tips/mango-vulnerability-disclosure-report/ - https://ric.uthscsa.edu/mango/index.html - https://ric.uthscsa.edu/mango/mango.html - https://ric.uthscsa.edu/mango/develop.html
CVE ID: CVE-2022-34568 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T09:15:15.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libsdl-org/SDL-1.2/issues/863 - https://security.gentoo.org/glsa/202305-17
CVE ID: CVE-2022-34570 State: PUBLISHED Published: 2022-07-25T21:37:21 Last Updated: 2024-08-03T09:15:15.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing the messages.txt page. Additional Analyst Notes: - CVE Program Container: References: - https://www.wavlink.com/en_us/product/WL-WN579X3.html - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__messages.md
CVE ID: CVE-2022-34571 State: PUBLISHED Published: 2022-07-25T21:37:22 Last Updated: 2024-08-03T09:15:15.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_syslog.shtml.assets/WiFi-Repeater_syslog.shtml.md - https://www.wavlink.com/en_us/category/REPEATER.html
CVE ID: CVE-2022-34572 State: PUBLISHED Published: 2022-07-25T21:37:22 Last Updated: 2024-08-03T09:15:15.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page tftp.txt. Additional Analyst Notes: - CVE Program Container: References: - https://www.wavlink.com/en_us/category/REPEATER.html - https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_syslog.shtml.assets/WiFi-Repeater_tftp.md
CVE ID: CVE-2022-34573 State: PUBLISHED Published: 2022-07-25T21:37:23 Last Updated: 2024-08-03T09:15:15.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessing the page mb_wifibasic.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://www.wavlink.com/en_us/category/REPEATER.html - https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_mb_wifibasic.assets/WiFi-Repeater_mb_wifibasic.md
CVE ID: CVE-2022-34574 State: PUBLISHED Published: 2022-07-25T21:37:24 Last Updated: 2024-08-03T09:15:15.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tftpd32.ini. Additional Analyst Notes: - CVE Program Container: References: - https://www.wavlink.com/en_us/category/REPEATER.html - https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_Tftpd32.assets/WiFi-Repeater_Tftpd32.md
CVE ID: CVE-2022-34575 State: PUBLISHED Published: 2022-07-25T21:37:24 Last Updated: 2024-08-03T09:15:15.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing fctest.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://www.wavlink.com/en_us/category/REPEATER.html - https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_fctest.assets/WiFi-Repeater_fctest.md
CVE ID: CVE-2022-34576 State: PUBLISHED Published: 2022-07-25T21:37:25 Last Updated: 2024-08-03T09:15:15.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN535%20G3_Sensitive%20information%20leakage.md
CVE ID: CVE-2022-34577 State: PUBLISHED Published: 2022-07-25T21:37:26 Last Updated: 2024-08-03T09:15:15.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN535%20G3_Command%20Execution%20Vulnerability.md - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31311
CVE ID: CVE-2022-34578 State: PUBLISHED Published: 2022-07-28T19:38:47 Last Updated: 2024-08-03T09:15:15.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page. Additional Analyst Notes: - CVE Program Container: References: - https://grimthereaperteam.medium.com/open-source-point-of-sale-v3-3-7-file-upload-cross-site-scripting-4900d717b2c3
CVE ID: CVE-2022-34580 State: PUBLISHED Published: 2022-07-28T21:11:24 Last Updated: 2024-08-03T09:15:15.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the address parameter at ip/school/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wencongzhao/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/XSS-1.md
CVE ID: CVE-2022-34586 State: PUBLISHED Published: 2022-07-20T20:50:48 Last Updated: 2024-08-03T09:15:15.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/student_grade_wise.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Renrao/bug_report/blob/master/blob/main/vendors/itsourcecode.com/advanced-school-management-system/sql_injection.md
CVE ID: CVE-2022-34588 State: PUBLISHED Published: 2022-07-20T20:50:47 Last Updated: 2024-08-03T09:15:15.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetable_insert_form.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Renrao/bug_report/blob/master/blob/main/vendors/itsourcecode.com/advanced-school-management-system/sql_injection3.md
CVE ID: CVE-2022-34590 State: PUBLISHED Published: 2022-07-20T20:50:49 Last Updated: 2024-08-03T09:15:15.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Renrao/bug_report/blob/master/blob/main/vendors/itsourcecode.com/hospital-management-system/sql_injection.md
CVE ID: CVE-2022-34592 State: PUBLISHED Published: 2022-07-07T00:00:00 Last Updated: 2024-08-03T09:15:15.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/winmt/CVE/blob/main/WAVLINK%20WL-WN575A3/README.md - https://github.com/winmt/my-vuls/tree/main/WAVLINK%20WL-WN575A3
CVE ID: CVE-2022-34593 State: PUBLISHED Published: 2022-07-28T19:47:41 Last Updated: 2024-08-03T09:15:15.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Liyou-ZY/POC/issues/1
CVE ID: CVE-2022-34594 State: PUBLISHED Published: 2022-07-27T01:41:17 Last Updated: 2024-08-03T09:15:15.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component ip/school/moudel/update_subject.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Subject text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gitgeniuss/bug_report/blob/master/vendors/itsourcecode.com/advanced-school-management-system/XSS-1.md
CVE ID: CVE-2022-34595 State: PUBLISHED Published: 2022-07-06T17:00:36 Last Updated: 2024-08-03T09:15:15.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhefox/IOT_Vul/blob/main/Tenda/tendaAX1803/readme_en.md
CVE ID: CVE-2022-34596 State: PUBLISHED Published: 2022-07-06T17:00:37 Last Updated: 2024-08-03T09:15:15.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhefox/IOT_Vul/blob/main/Tenda/tendaAX1803/2/readme_en.md
CVE ID: CVE-2022-34597 State: PUBLISHED Published: 2022-07-06T17:00:38 Last Updated: 2024-08-03T09:15:15.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhefox/IOT_Vul/blob/main/Tenda/TendaAX1806/readme_en.md
CVE ID: CVE-2022-34598 State: PUBLISHED Published: 2022-07-06T17:00:39 Last Updated: 2024-08-03T09:15:15.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhefox/IOT_Vul/tree/main/H3C/H3CR100/1