Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-40044 State: PUBLISHED Published: 2022-09-26T15:38:18.000Z Last Updated: 2025-05-21T15:15:21.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://www.hakaioffensivesecurity.com/centreon-sqli-and-xss-vulnerability/
CVE ID: CVE-2022-40047 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:14:39.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://flatpress.com - https://github.com/flatpressblog/flatpress/issues/153
CVE ID: CVE-2022-40048 State: PUBLISHED Published: 2022-09-29T00:55:27.000Z Last Updated: 2025-05-20T19:58:39.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://flatpress.com - https://github.com/flatpressblog/flatpress/issues/152
CVE ID: CVE-2022-40049 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-10T13:38:45.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manage_user.php page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Manba6/Bug_report/blob/main/vendors/oretnom23/theme-park-ticketing-system/SQLi-1.md
CVE ID: CVE-2022-40050 State: PUBLISHED Published: 2022-09-26T19:11:36.000Z Last Updated: 2025-05-21T18:34:41.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/achiove/repdosenotexist/blob/main/request4cve.pdf
CVE ID: CVE-2022-40055 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:24:25.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://gpon.com - http://gx.com - https://blog.alphathreat.in/index.php?post/2022/10/01/Achieving-CVE-2022-40055
CVE ID: CVE-2022-40067 State: PUBLISHED Published: 2022-09-19T14:40:21 Last Updated: 2024-08-03T12:14:39.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/9
CVE ID: CVE-2022-40068 State: PUBLISHED Published: 2022-09-19T14:39:22 Last Updated: 2024-08-03T12:14:39.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/10
CVE ID: CVE-2022-40069 State: PUBLISHED Published: 2022-09-19T14:38:03 Last Updated: 2024-08-03T12:14:39.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/6
CVE ID: CVE-2022-40070 State: PUBLISHED Published: 2022-09-19T14:36:51 Last Updated: 2024-08-03T12:14:39.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/8
CVE ID: CVE-2022-40071 State: PUBLISHED Published: 2022-09-19T14:35:35 Last Updated: 2024-08-03T12:14:39.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/2
CVE ID: CVE-2022-40072 State: PUBLISHED Published: 2022-09-19T14:34:37 Last Updated: 2024-08-03T12:14:39.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/7
CVE ID: CVE-2022-40073 State: PUBLISHED Published: 2022-09-19T14:33:23 Last Updated: 2024-08-03T12:14:39.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/5
CVE ID: CVE-2022-40074 State: PUBLISHED Published: 2022-09-19T14:31:29 Last Updated: 2024-08-03T12:14:39.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/3
CVE ID: CVE-2022-40075 State: PUBLISHED Published: 2022-09-19T14:30:29 Last Updated: 2024-08-03T12:14:39.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/1
CVE ID: CVE-2022-40076 State: PUBLISHED Published: 2022-09-19T14:29:42 Last Updated: 2024-08-03T12:14:39.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/4
CVE ID: CVE-2022-40080 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T14:49:41.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acer.com/ - https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-40080/CVE-2022-40080.md
CVE ID: CVE-2022-40082 State: PUBLISHED Published: 2022-09-28T13:34:02.000Z Last Updated: 2025-05-21T14:45:54.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudwego/hertz/issues/228 - https://github.com/cloudwego/hertz/pull/229
CVE ID: CVE-2022-40083 State: PUBLISHED Published: 2022-09-28T13:34:03.000Z Last Updated: 2025-05-21T14:40:33.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/labstack/echo/issues/2259
CVE ID: CVE-2022-40084 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:49:42.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/204.html#:~:text=User%20enumeration%20via%20discrepancies%20in%20error%20messages.%2C-CVE-2004-0294&text=Bulletin%20Board%20displays%20different%20error%2Cbrute%20fo
iscrepancies%20in%20error%20messages.%2C-CVE-2004-0294&text=Bulletin%20Board%20displays%20different%20error%2Cbrute%20force%20password%20guessing%20attack. - https://github.com/ciph0x01/OpenCRX-CVE/blob/main/CVE-2022-40084.md
CVE ID: CVE-2022-40087 State: PUBLISHED Published: 2022-09-22T21:29:40.000Z Last Updated: 2025-05-27T15:02:06.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_contents(). This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip - https://gowthamara
- https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip - https://gowthamaraj-rajendran.medium.com/simple-college-website-1-0-unauthenticated-arbitrary-file-upload-rce-44341831bec8
CVE ID: CVE-2022-40088 State: PUBLISHED Published: 2022-09-22T21:29:41.000Z Last Updated: 2025-05-27T15:01:33.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /college_website/index.php?page=. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html - https://www.sourcecodester.com/sites/defa
er.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip - https://gowthamaraj-rajendran.medium.com/simple-college-website-1-0-xss-1f13228233a
CVE ID: CVE-2022-40089 State: PUBLISHED Published: 2022-09-22T21:29:42.000Z Last Updated: 2025-05-27T15:00:01.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip - https:/
e-code.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip - https://gowthamaraj-rajendran.medium.com/simple-college-website-1-0-rfi-cff8d827572e
CVE ID: CVE-2022-40090 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:40:47.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/455 - https://gitlab.com/libtiff/libtiff/-/merge_requests/386
CVE ID: CVE-2022-40091 State: PUBLISHED Published: 2022-09-23T13:46:03.000Z Last Updated: 2025-05-22T20:26:45.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/autumnmap/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-1.md
CVE ID: CVE-2022-40092 State: PUBLISHED Published: 2022-09-23T13:46:04.000Z Last Updated: 2025-05-22T20:20:41.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/autumnmap/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-2.md
CVE ID: CVE-2022-40093 State: PUBLISHED Published: 2022-09-23T13:46:05.000Z Last Updated: 2025-05-22T20:14:09.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/autumnmap/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-3.md
CVE ID: CVE-2022-40097 State: PUBLISHED Published: 2022-09-26T20:25:10.000Z Last Updated: 2025-05-21T18:32:44.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WYB-signal/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-1.md
CVE ID: CVE-2022-40098 State: PUBLISHED Published: 2022-09-26T20:25:11.000Z Last Updated: 2025-05-21T18:31:40.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WYB-signal/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-2.md
CVE ID: CVE-2022-40099 State: PUBLISHED Published: 2022-09-26T20:25:12.000Z Last Updated: 2025-05-21T18:30:44.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WYB-signal/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-3.md
CVE ID: CVE-2022-40100 State: PUBLISHED Published: 2022-09-23T18:54:28.000Z Last Updated: 2025-05-22T17:40:53.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/Command_Injection_formexeCommand.md
CVE ID: CVE-2022-40101 State: PUBLISHED Published: 2022-09-23T18:54:29.000Z Last Updated: 2025-05-22T17:39:43.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterSet.md
CVE ID: CVE-2022-40102 State: PUBLISHED Published: 2022-09-23T18:54:30.000Z Last Updated: 2025-05-22T17:38:59.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDset.md
CVE ID: CVE-2022-40103 State: PUBLISHED Published: 2022-09-23T18:54:30.000Z Last Updated: 2025-05-22T17:36:32.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formSetAutoPing.md
CVE ID: CVE-2022-40104 State: PUBLISHED Published: 2022-09-23T18:54:31.000Z Last Updated: 2025-05-22T18:10:58.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDget.md
CVE ID: CVE-2022-40105 State: PUBLISHED Published: 2022-09-23T18:54:32.000Z Last Updated: 2025-05-22T18:10:02.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterGet.md
CVE ID: CVE-2022-40106 State: PUBLISHED Published: 2022-09-23T18:54:33.000Z Last Updated: 2025-05-22T16:03:41.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_set_local_time.md
CVE ID: CVE-2022-40107 State: PUBLISHED Published: 2022-09-23T18:54:33.000Z Last Updated: 2025-05-22T15:07:29.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formexeCommand.md
CVE ID: CVE-2022-40109 State: PUBLISHED Published: 2022-09-06T16:46:53 Last Updated: 2024-08-03T12:14:39.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A3002R/1.md
CVE ID: CVE-2022-40110 State: PUBLISHED Published: 2022-09-06T16:51:39 Last Updated: 2024-08-03T12:14:39.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A3002R/2.md
CVE ID: CVE-2022-40111 State: PUBLISHED Published: 2022-09-06T16:53:00 Last Updated: 2024-08-03T12:14:40.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A3002R/4.md
CVE ID: CVE-2022-40112 State: PUBLISHED Published: 2022-09-06T16:54:58 Last Updated: 2024-08-03T12:14:39.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A3002R/3.md
CVE ID: CVE-2022-40113 State: PUBLISHED Published: 2022-09-23T21:16:05.000Z Last Updated: 2025-05-22T14:46:00.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zakee94/online-banking-system/issues/18 - https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection3.md
CVE ID: CVE-2022-40114 State: PUBLISHED Published: 2022-09-23T21:16:06.000Z Last Updated: 2025-05-21T18:03:32.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zakee94/online-banking-system/issues/16 - https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection5.md
CVE ID: CVE-2022-40115 State: PUBLISHED Published: 2022-09-23T21:16:07.000Z Last Updated: 2025-05-21T18:02:57.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zakee94/online-banking-system/issues/10 - https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection1.md