Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32386 State: PUBLISHED Published: 2022-07-06T11:32:23 Last Updated: 2024-08-03T07:39:51.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - http://ac23.com - https://drive.google.com/file/d/1XPTEt10yJt9WcLrIt6YpDV5OlP-U6dBR/view?usp=sharing - https://github.com/LuGakki/Vuln/blob/main/Tenda%20AC23.pdf
CVE ID: CVE-2022-32387 State: PUBLISHED Published: 2022-07-18T16:03:25 Last Updated: 2024-08-03T07:39:51.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler. Additional Analyst Notes: - CVE Program Container: References: - https://devnet.kentico.com/download/hotfixes
CVE ID: CVE-2022-32389 State: PUBLISHED Published: 2022-07-14T20:28:52 Last Updated: 2024-08-03T07:39:51.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This allows attackers to access sensitive information such as user credentials and certificates. Additional Analyst Notes: - CVE Program Container: References: - https://gtn.com.np/wp-content/uploads/2022/06/SWIFT-CVE-REQUEST.pdf - https://www.isode.com/products/swift.html - https://swift.im/downloads.html
CVE ID: CVE-2022-32391 State: PUBLISHED Published: 2022-06-24T01:01:46 Last Updated: 2024-08-03T07:39:51.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/view_action.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32391.md
CVE ID: CVE-2022-32392 State: PUBLISHED Published: 2022-06-24T01:02:58 Last Updated: 2024-08-03T07:39:51.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/manage_action.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32392.md
CVE ID: CVE-2022-32393 State: PUBLISHED Published: 2022-06-24T01:04:10 Last Updated: 2024-08-03T07:39:51.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/view_cell.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32393.md
CVE ID: CVE-2022-32394 State: PUBLISHED Published: 2022-06-24T01:04:59 Last Updated: 2024-08-03T07:39:51.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/view_inmate.php:3 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32394.md
CVE ID: CVE-2022-32395 State: PUBLISHED Published: 2022-06-24T01:05:46 Last Updated: 2024-08-03T07:39:51.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/manage_crime.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32395.md
CVE ID: CVE-2022-32396 State: PUBLISHED Published: 2022-06-24T01:06:34 Last Updated: 2024-08-03T07:39:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/manage_visit.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32396.md
CVE ID: CVE-2022-32397 State: PUBLISHED Published: 2022-06-24T01:07:46 Last Updated: 2024-08-03T07:39:51.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/view_visit.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32397.md
CVE ID: CVE-2022-32398 State: PUBLISHED Published: 2022-06-24T01:08:34 Last Updated: 2024-08-03T07:39:51.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/manage_cell.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32398.md
CVE ID: CVE-2022-32399 State: PUBLISHED Published: 2022-06-24T01:09:21 Last Updated: 2024-08-03T07:39:51.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/view_crime.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32399.md
CVE ID: CVE-2022-32400 State: PUBLISHED Published: 2022-06-24T01:10:24 Last Updated: 2024-08-03T07:39:51.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manage_user.php:4. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32400.md
CVE ID: CVE-2022-32401 State: PUBLISHED Published: 2022-06-24T01:11:04 Last Updated: 2024-08-03T07:39:51.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_privilege.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32401.md
CVE ID: CVE-2022-32402 State: PUBLISHED Published: 2022-06-24T01:12:58 Last Updated: 2024-08-03T07:39:51.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manage_prison.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32402.md
CVE ID: CVE-2022-32403 State: PUBLISHED Published: 2022-06-24T01:13:47 Last Updated: 2024-08-03T07:39:51.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_record.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32403.md
CVE ID: CVE-2022-32404 State: PUBLISHED Published: 2022-06-24T01:14:43 Last Updated: 2024-08-03T07:39:51.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_inmate.php:3 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32404.md
CVE ID: CVE-2022-32405 State: PUBLISHED Published: 2022-06-24T01:15:27 Last Updated: 2024-08-03T07:39:51.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/view_prison.php:4 Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html - https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32405.md
CVE ID: CVE-2022-32406 State: PUBLISHED Published: 2022-07-14T20:37:15 Last Updated: 2024-08-03T07:39:51.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service (DoS) via a crafted MAP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TTimo/GtkRadiant/issues/676
CVE ID: CVE-2022-32407 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T18:24:57.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Softr v2.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via the First Name parameter under the Create A New Account module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://studio.softr.io/auth/signup - https://riteshgohil-25.medium.com/softr-version-2-0-33463a6bf766
CVE ID: CVE-2022-32409 State: PUBLISHED Published: 2022-07-14T21:24:22 Last Updated: 2024-08-03T07:39:51.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/07-Input_Validation_Testing/11.1-Testing_for_Local_File_Inclusion - https://github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txt
CVE ID: CVE-2022-32411 State: PUBLISHED Published: 2022-07-01T21:32:31 Last Updated: 2024-08-03T07:39:51.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the languages config file of HongCMS v3.0 allows attackers to getshell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Neeke/HongCMS/issues/18
CVE ID: CVE-2022-32412 State: PUBLISHED Published: 2022-07-01T21:32:32 Last Updated: 2024-08-03T07:39:51.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Neeke/HongCMS/issues/19
CVE ID: CVE-2022-32413 State: PUBLISHED Published: 2022-07-05T19:50:35 Last Updated: 2024-08-03T07:39:51.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bihell/Dice/issues/157
CVE ID: CVE-2022-32414 State: PUBLISHED Published: 2022-06-21T12:57:32 Last Updated: 2024-08-03T07:39:51.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vmcode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/483 - https://github.com/nginx/njs/commit/31ed93a5623f24ca94e6d47e895ba735d9d97d46
CVE ID: CVE-2022-32415 State: PUBLISHED Published: 2022-07-14T21:30:53 Last Updated: 2024-08-03T07:39:51.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/guydream/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-1.md
CVE ID: CVE-2022-32416 State: PUBLISHED Published: 2022-07-14T21:35:15 Last Updated: 2024-08-03T07:39:51.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Estbonxby/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-1.md
CVE ID: CVE-2022-32417 State: PUBLISHED Published: 2022-07-14T21:40:13 Last Updated: 2024-08-03T07:39:51.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Snakinya/Vuln/issues/1
CVE ID: CVE-2022-32420 State: PUBLISHED Published: 2022-07-01T20:45:15 Last Updated: 2024-08-03T07:39:51.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rainb0w-q/bug_report/blob/main/vendors/itsourcecode.com/college-management-system/RCE-1.md
CVE ID: CVE-2022-32425 State: PUBLISHED Published: 2022-07-14T21:47:09 Last Updated: 2024-08-03T07:39:51.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hay-kot/mealie/issues/1336
CVE ID: CVE-2022-32427 State: PUBLISHED Published: 2022-08-25T01:26:03 Last Updated: 2024-08-03T07:39:51.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content. This issue has been resolved in PrinterLogic Windows Client 25.0.0688 and all affected are advised to upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://www.printerlogic.com/security-bulletin/ - https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Rele
https://www.printerlogic.com/security-bulletin/ - https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9
CVE ID: CVE-2022-32429 State: PUBLISHED Published: 2022-08-09T00:00:00 Last Updated: 2024-08-03T07:39:51.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://elifulkerson.com/CVE-2022-32429/ - http://packetstormsecurity.com/files/169819/MSNSwitch-Firmware-MNT.2408-Remote-Code-Execution.html
CVE ID: CVE-2022-32430 State: PUBLISHED Published: 2022-07-21T15:52:38 Last Updated: 2024-08-03T07:39:51.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.mesec.cn/archives/278 - https://www.mesec.cn/archives/277
CVE ID: CVE-2022-32433 State: PUBLISHED Published: 2022-06-15T18:35:41 Last Updated: 2024-08-03T07:39:51.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/all_teacher.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tamchikit/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/RCE-1.md
CVE ID: CVE-2022-32434 State: PUBLISHED Published: 2022-07-15T20:04:08 Last Updated: 2024-08-03T07:39:51.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WaterDemo/ProtocolBugs/tree/main/bug - https://github.com/EIPStackGroup/OpENer/issues/374
CVE ID: CVE-2022-32441 State: PUBLISHED Published: 2022-07-07T13:52:01 Last Updated: 2024-08-03T07:39:51.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file. Related to Data from Faulting Address controls subsequent Write Address starting at msvcrt!memcpy+0x0000000000000056. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2022/06/night-fuzzing-session-idapro-66-part-2.html
CVE ID: CVE-2022-32442 State: PUBLISHED Published: 2022-06-17T15:22:58 Last Updated: 2024-08-03T07:39:51.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl (96502)%27bad=", it can cause html injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u5cms/u5cms/issues/49
CVE ID: CVE-2022-32444 State: PUBLISHED Published: 2022-06-17T15:15:43 Last Updated: 2024-08-03T07:39:51.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u5cms/u5cms/issues/50
CVE ID: CVE-2022-32449 State: PUBLISHED Published: 2022-07-07T00:00:00 Last Updated: 2024-08-03T07:39:51.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/winmt/CVE/blob/main/TOTOLINK%20EX300_V2/README.md - https://github.com/winmt/my-vuls/tree/main/TOTOLINK%20EX300_V2
CVE ID: CVE-2022-32450 State: PUBLISHED Published: 2022-07-18T12:17:12 Last Updated: 2024-08-03T07:39:51.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room data there. Additional Analyst Notes: - CVE Program Container: References: - http://anydesk.com - http://packetstormsecurity.com/files/167608/AnyDesk-7.0.9-Arbitrary-File-Write-Denial-Of-Service.html - https://seclists.org/fulldisclosure/2022/Jun/44 - http://seclists.org/fulldisclosure/2022/Jul/9
CVE ID: CVE-2022-32453 State: PUBLISHED Published: 2022-08-18T07:13:13 Last Updated: 2024-08-03T07:39:51.192Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: HTTP header injection Description: HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007584.html - https://jvn.jp/en/jp/JVN20573662/index.html
CVE ID: CVE-2022-32454 State: PUBLISHED Published: 2022-10-25T16:33:40.187Z Last Updated: 2025-04-15T18:47:52.232Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to remote code execution. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.co
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1560
CVE ID: CVE-2022-32455 State: PUBLISHED Published: 2022-08-04T17:46:06.907750Z Last Updated: 2024-09-16T23:20:29.620Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-119 Description: In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with session tickets enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additio
TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K16852653
CVE ID: CVE-2022-32456 State: PUBLISHED Published: 2022-07-20T02:00:37.816551Z Last Updated: 2024-09-16T16:18:57.887Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Data Systems Consulting Co., Ltd. Products: BPM Problem Types: CWE-89 Description: Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6286-3030a-1.html - https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb