Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4322 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-15T13:08:21.522Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: maku-boot Problem Types: CWE-707 Description: A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file AbstractScheduleJob.java of the component Scheduled Task Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 446eb7294332efca2bfd791bc37281cedac0d0ff. It is recommended to
to the public and may be used. The name of the patch is 446eb7294332efca2bfd791bc37281cedac0d0ff. It is recommended to apply a patch to fix this issue. The identifier VDB-215013 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/makunet/maku-boot/issues/I5ZUYI - https://gitee.com/makunet/maku-boot/commit/446eb7294332efca2bfd791bc37281cedac0d0ff - https://vuldb.com/?id.215013
CVE ID: CVE-2022-4323 State: PUBLISHED Published: 2023-01-23T14:31:47.900Z Last Updated: 2025-04-02T14:57:42.921Z Vendors: Unknown Products: Analyticator Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ce8027b8-9473-463e-ba80-49b3d6d16228
CVE ID: CVE-2022-4324 State: PUBLISHED Published: 2023-01-02T21:49:28.503Z Last Updated: 2025-04-10T18:50:11.141Z Vendors: Unknown Products: Custom Field Template Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/70c39236-f7ae-49bf-a2f0-7cb9aa983e45
CVE ID: CVE-2022-4325 State: PUBLISHED Published: 2023-01-09T22:13:46.493Z Last Updated: 2025-04-09T17:40:45.895Z Vendors: Unknown Products: Post Status Notifier Lite Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5b983c48-6b05-47cf-85cb-28bbeec17395
CVE ID: CVE-2022-4326 State: PUBLISHED Published: 2022-12-16T15:48:07.711Z Last Updated: 2025-04-14T18:02:09.656Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H) Vendors: Trellix Products: xAgent Problem Types: CWE-281 Description: Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.trellix.com/bundle/xagent_35-31-22_rn/pag
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.html
CVE ID: CVE-2022-4327 State: REJECTED Published: 2023-01-16T15:37:47.213Z Last Updated: 2023-01-30T15:00:41.522Z Description: No description available.
CVE ID: CVE-2022-4328 State: PUBLISHED Published: 2023-03-06T13:34:04.469Z Last Updated: 2025-03-04T19:24:32.711Z Vendors: Unknown Products: WooCommerce Checkout Field Manager Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4dc72cd2-81d7-4a66-86bd-c9cfaf690eed
CVE ID: CVE-2022-4329 State: PUBLISHED Published: 2023-01-02T21:49:38.479Z Last Updated: 2025-04-10T17:56:43.192Z Vendors: Unknown Products: Product list Widget for Woocommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7f2c1c1-75b7-4aec-8574-f38d506
ogram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7f2c1c1-75b7-4aec-8574-f38d506d064a
CVE ID: CVE-2022-4330 State: PUBLISHED Published: 2023-01-16T15:37:41.827Z Last Updated: 2024-08-03T01:34:50.170Z Vendors: Unknown Products: WP Attachments Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d3c39e17-1dc3-4275-97d8-543ca7226772
CVE ID: CVE-2022-4331 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:25:16.373Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible previously removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token
usly removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token to perform actions on the group. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/385050 - https://hackerone.com/reports/1791518 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4331.json
CVE ID: CVE-2022-4332 State: PUBLISHED Published: 2023-06-01T05:36:28.688Z Last Updated: 2025-01-10T18:43:17.650Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sprecher Automation Products: SPRECON-E-C/P/T3 CPU PU244x Problem Types: CWE-20 Description: In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full access of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
ull access of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf
CVE ID: CVE-2022-4333 State: PUBLISHED Published: 2023-06-01T05:36:22.128Z Last Updated: 2025-01-10T18:44:30.817Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sprecher Automation Products: SPRECON-E CPU PU243x, SPRECON-E CPU PU244x, SPRECON-E CPU MC33/34, SPRECON-E CPU SPRECON-EDIR Problem Types: CWE-798 Description: Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sprecher-automation.com/fi
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf
CVE ID: CVE-2022-4334 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-4335 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T14:39:12.458Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Server-side request forgery (ssrf) in GitLab Description: A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/353018 - https://hackerone.com/reports/1462437 - https://gitlab.com/gitlab-org/cves
itlab.com/gitlab-org/gitlab/-/issues/353018 - https://hackerone.com/reports/1462437 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4335.json
CVE ID: CVE-2022-4336 State: PUBLISHED Published: 2022-12-09T00:00:00.000Z Last Updated: 2025-04-14T18:11:30.047Z Vendors: n/a Products: Baota Problem Types: CWE-79 Description: In BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain sensitive information via the log analysis feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mlux.cc/index.php/archives/100/
CVE ID: CVE-2022-4337 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2024-08-03T01:34:50.070Z Vendors: n/a Products: openvswitch Problem Types: CWE-125 Description: An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/12/21/4 - https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html - https://github.com/openvswitch/ovs/pull/405 - https://www.debian.org/security/2023/dsa-5319 - https://security.gentoo.org/glsa/202311-16
CVE ID: CVE-2022-4338 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2024-08-03T01:34:50.066Z Vendors: n/a Products: openvswitch Problem Types: CWE-125 Description: An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/12/21/4 - https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html - https://github.com/openvswitch/ovs/pull/405 - https://www.debian.org/security/2023/dsa-5319 - https://security.gentoo.org/glsa/202311-16
CVE ID: CVE-2022-4339 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-4340 State: PUBLISHED Published: 2023-01-02T21:49:16.234Z Last Updated: 2025-04-10T19:06:17.234Z Vendors: Unknown Products: BookingPress Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointment_id query parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8a7bd9f6-2789-474b-a237-01c64
Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8a7bd9f6-2789-474b-a237-01c643fdfba7
CVE ID: CVE-2022-4341 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-15T13:08:13.215Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: csliuwy Products: coder-chain_gdut Problem Types: CWE-707 Description: A vulnerability has been found in csliuwy coder-chain_gdut and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /back/index.php/user/User/?1. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215095. Additional Analyst Notes: - CVE Pro
blic and may be used. The associated identifier of this vulnerability is VDB-215095. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/csliuwy/coder-chain_gdut/issues/I53DPF - https://vuldb.com/?id.215095
CVE ID: CVE-2022-4342 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T16:44:33.383Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak masked webhook secrets by changing target URL of the webhook. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/is
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/385118 - https://hackerone.com/reports/1791331 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4342.json
CVE ID: CVE-2022-4343 State: PUBLISHED Published: 2023-09-01T10:01:56.677Z Last Updated: 2025-11-20T04:05:53.441Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-200 Description: An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which a project member can leak credentials stored in site profile. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/385124 - https://hackerone.com/reports/1767797
CVE ID: CVE-2022-4344 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-11-03T21:46:38.099Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Uncontrolled memory allocation in Wireshark Description: Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2022-10.html - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json -
reshark.org/security/wnpa-sec-2022-10.html - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/
CVE ID: CVE-2022-4345 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-11-03T21:46:39.577Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Loop with unreachable exit condition ('infinite loop') in Wireshark Description: Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2022-09.html - https://gitlab.com/gitlab-org/cve
Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2022-09.html - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/
CVE ID: CVE-2022-4346 State: PUBLISHED Published: 2023-01-23T14:31:28.361Z Last Updated: 2025-04-02T15:52:32.288Z Vendors: Unknown Products: All-In-One Security (AIOS) Problem Types: CWE-552 Files or Directories Accessible to External Parties Description: The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe
CVE ID: CVE-2022-4347 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-15T13:07:44.389Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: xiandafu Products: beetl-bbs Problem Types: CWE-707 Description: A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215107. Additional Analyst Notes: - CVE Program
and may be used. The associated identifier of this vulnerability is VDB-215107. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/xiandafu/beetl-bbs/issues/I5XD5O - https://vuldb.com/?id.215107
CVE ID: CVE-2022-4348 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-15T13:07:36.508Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: y_project Products: RuoYi-Cloud Problem Types: CWE-707 Description: A vulnerability was found in y_project RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215108. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
e identifier of this vulnerability is VDB-215108. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/y_project/RuoYi-Cloud/issues/I5IRC8 - https://vuldb.com/?id.215108
CVE ID: CVE-2022-4349 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-15T13:07:28.399Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CTF-hacker Products: pwn Problem Types: CWE-863 Description: A vulnerability classified as problematic has been found in CTF-hacker pwn. This affects an unknown part of the file delete.html. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215109 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/CTF-hacker/pwn/issues/I5WAAB - https://vuldb.com/?id.215109
CVE ID: CVE-2022-4350 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-15T13:07:20.123Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Mingsoft Products: MCMS Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
. The identifier of this vulnerability is VDB-215112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/mingSoft/MCMS/issues/I5MT8Y - https://vuldb.com/?id.215112
CVE ID: CVE-2022-4351 State: PUBLISHED Published: 2023-01-02T21:49:07.611Z Last Updated: 2025-04-11T13:40:38.734Z Vendors: Unknown Products: Qe SEO Handyman Problem Types: CWE-89 SQL Injection Description: The Qe SEO Handyman WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2138f736-8a50-4390-a239-fcd1d736670a - https://bulletin.iese.de/post/qe-seo-handyman_1-0_1
CVE ID: CVE-2022-4352 State: PUBLISHED Published: 2023-01-02T21:49:35.146Z Last Updated: 2025-04-10T18:41:43.663Z Vendors: Unknown Products: Qe SEO Handyman Problem Types: CWE-89 SQL Injection Description: The Qe SEO Handyman WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/325874f4-2482-4ae5-b5cf-cb9ff0843067 - https://bulletin.iese.de/post/qe-seo-handyman_1-0_2
CVE ID: CVE-2022-4353 State: PUBLISHED Published: 2022-12-08T00:00:00 Last Updated: 2024-08-03T01:34:50.177Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: LinZhaoguan Products: pb-cms Problem Types: CWE-707 Description: A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215113 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/Li
as assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/LinZhaoguan/pb-cms/issues/I52422 - https://vuldb.com/?id.215113