Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36391 State: PUBLISHED Published: 2023-05-10T13:16:57.982Z Last Updated: 2025-01-27T18:05:26.562Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.html
CVE ID: CVE-2022-36392 State: PUBLISHED Published: 2023-08-11T02:36:55.653Z Last Updated: 2025-02-13T16:32:48.992Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) AMT and Intel(R) Standard Manageability in Intel (R) CSME Problem Types: denial of service, CWE-20 Description: Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
ble denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html - https://security.netapp.com/advisory/ntap-20230824-0002/
CVE ID: CVE-2022-36393 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:33.385Z Description: No description available.
CVE ID: CVE-2022-36394 State: PUBLISHED Published: 2022-08-23T15:47:28.406Z Last Updated: 2025-02-20T20:11:09.613Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: Contest Gallery Products: Contest Gallery (WordPress plugin) Problem Types: CWE-89 Description: Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-17-0-4-authenticated-sql-injection-sqli-vulnerability - https://wordpress.org/plugins/contest-gallery/#developers
CVE ID: CVE-2022-36395 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:34.737Z Description: No description available.
CVE ID: CVE-2022-36396 State: PUBLISHED Published: 2023-11-14T19:04:41.979Z Last Updated: 2024-08-03T10:00:04.336Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2022-36397 State: PUBLISHED Published: 2023-02-16T20:00:25.512Z Last Updated: 2025-01-27T18:14:03.479Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT drivers for Linux Problem Types: escalation of privilege Description: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html
CVE ID: CVE-2022-36398 State: PUBLISHED Published: 2023-02-16T20:00:07.260Z Last Updated: 2025-01-27T18:19:54.485Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Battery Life Diagnostic Tool software Problem Types: escalation of privilege Description: Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00726.html
CVE ID: CVE-2022-36399 State: PUBLISHED Published: 2023-12-28T21:49:16.710Z Last Updated: 2024-08-03T10:00:04.531Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: BoxyStudio Products: Booked - Appointment Booking for WordPress | Calendars Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for WordPress | Calendars.This issue affects Booked - Appointment Booking for WordPress | Calendars: from n/a before 2.4.4. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unaut
Program Container: References: - https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2022-36400 State: PUBLISHED Published: 2022-11-11T15:49:11.323Z Last Updated: 2025-02-04T17:17:22.989Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 Problem Types: escalation of privilege Description: Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/i
ram Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00747.html
CVE ID: CVE-2022-36401 State: PUBLISHED Published: 2023-02-02T15:45:37.182Z Last Updated: 2025-01-13T15:58:47.267Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: StandaloneTech Products: TeraWallet – For WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in TeraWallet – For WooCommerce plugin <= 1.3.24 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-wallet/wordpress-terawallet-for-woocommerce-plugin-1-3-24-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-36402 State: PUBLISHED Published: 2022-09-16T16:08:01.414003Z Last Updated: 2024-09-17T03:38:12.736Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H) Vendors: Linux Products: kernel Problem Types: CWE-118 Description: An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=2072
CVE ID: CVE-2022-36403 State: PUBLISHED Published: 2022-09-08T07:10:44 Last Updated: 2024-08-03T10:00:04.394Z Vendors: RICOH COMPANY, LTD. Products: Installer of Device Software Manager Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.com/software/dev_soft_manager - https://jvn.jp/en/jp/JVN44721267/index.html
CVE ID: CVE-2022-36404 State: PUBLISHED Published: 2022-11-03T19:27:39.403Z Last Updated: 2025-02-20T19:56:56.592Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: David Cole Products: Simple SEO (WordPress plugin) Problem Types: CWE-862, CWE-352 Description: Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO (WordPress plugin) plugin <= 1.8.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cds-simple-seo/wordpress-simple-seo-plugin-1-8-12-authenticated-sitemap-deletion-creation-vulnerability?_s_id=cve
CVE ID: CVE-2022-36405 State: PUBLISHED Published: 2022-08-23T15:48:38.499Z Last Updated: 2025-02-20T20:10:24.949Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: amCharts Products: amCharts: Charts and Maps (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in amCharts: Charts and Maps plugin <= 1.4 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/amcharts-charts-and-maps/wordpress-amcharts-charts-and-maps-plugin-1-4-authenticated-stored-cross-site-scripting-xss-vulnerability - h
s-and-maps/wordpress-amcharts-charts-and-maps-plugin-1-4-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/amcharts-charts-and-maps/#developers
CVE ID: CVE-2022-36406 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:15.803Z Description: No description available.
CVE ID: CVE-2022-36407 State: PUBLISHED Published: 2024-03-25T05:55:36.386Z Last Updated: 2024-08-03T10:07:33.120Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Hitachi Products: Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi Virtual Storage Platform 5200, 5600, 5200H, 5600H, Hitachi Unified Storage VM, Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, Hitachi Virtual Storage Platform F400, F600, F800, Hitachi Virtual Storage Platform G130, G150, G350, G370, G700
, G800, Hitachi Virtual Storage Platform F400, F600, F800, Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, Hitachi Virtual Storage Platform F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi Virtual Storage Platform 5200, 5600, 5200H, 5600H, Hitachi Unified Storage VM, Hitachi Virtu
5500, 5100H, 5500H, Hitachi Virtual Storage Platform 5200, 5600, 5200H, 5600H, Hitachi Unified Storage VM, Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, Hitachi Virtual Storage Platform F400, F600, F800, Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, Hitachi Virtual Storage Platform F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H allows local users to gain sensitive information.This issue affects Hitachi Virtual Storage Platform: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hitachi Virtual Storage Platform VP9500: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hi
Ver. 70-06-58/00; Hitachi Virtual Storage Platform VP9500: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hitachi Virtual Storage Platform G1000, G1500: before DKCMAIN Ver. 80-06-92-00/00, SVP Ver. 80-06-87/00; Hitachi Virtual Storage Platform F1500: before DKCMAIN Ver. 80-06-92-00/00, SVP Ver. 80-06-87/00; Hitachi Virtual Storage Platform 5100, 5500,5100H, 5500H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00/00, SVP Ver. 90-08-62/00, before DKCMAIN Ver. 90-08-43-00/00, SVP Ver. 90-08-43/00; Hitachi Virtual Storage Platform 5200, 5600,5200H, 5600H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00
tform 5200, 5600,5200H, 5600H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00/00, SVP Ver. 90-08-62/00, before DKCMAIN Ver. 90-08-43-00/00, SVP Ver. 90-08-43/00; Hitachi Unified Storage VM: before DKCMAIN Ver. 73-03-75-X0/00, SVP Ver. 73-03-74/00, before DKCMAIN Ver. 73(75)-03-75-X0/00, SVP Ver. 73(75)-03-74/00; Hitachi Virtual Storage Platform G100, G200, G400, G600, G800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 83-05-51-X0/00; Hitachi Virtual Storage Platform F400, F600, F800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 8
F600, F800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 83-05-51-X0/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900: before DKCMAIN Ver. 88-08-09-XX/00, SVP Ver. 88-08-11-X0/02; Hitachi Virtual Storage Platform F350, F370, F700, F900: before DKCMAIN Ver. 88-08-09-XX/00, SVP Ver. 88-08-11-X0/02; Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-06-81-X0/00, SVP Ver. 93-06-81-X0/00, before DKCMAIN Ver. 93-06-62-X0/00, SVP Ver. 93-06-62-X0/00, before DKCMAIN Ver. 93-06-43-X0/00, SVP Ver. 93-06-43-X0/00. Additional Analyst Notes: - CISA ADP Vuln
. 93-06-62-X0/00, before DKCMAIN Ver. 93-06-43-X0/00, SVP Ver. 93-06-43-X0/00. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/2022_313.html
CVE ID: CVE-2022-36408 State: REJECTED Published: 2022-07-22T21:07:56 Last Updated: 2022-08-03T04:50:48 Description: No description available.
CVE ID: CVE-2022-36412 State: PUBLISHED Published: 2022-07-26T13:34:05 Last Updated: 2024-08-03T10:07:33.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.) Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/support-center/cve-2022-36412.html
CVE ID: CVE-2022-36413 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:43:43.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-36413.html
CVE ID: CVE-2022-36414 State: PUBLISHED Published: 2022-07-23T02:33:15 Last Updated: 2024-08-03T10:07:33.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation. Additional Analyst Notes: - CVE Program Container: References: - https://www.scootersoftware.com/support.php?zz=kb_security_2022-01
CVE ID: CVE-2022-36415 State: PUBLISHED Published: 2022-07-23T02:32:16 Last Updated: 2024-08-03T10:07:33.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and then the uninstaller is run as SYSTEM, the DLLs will execute with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.scootersoftware.com/support.php?zz=kb_security_2022-02
CVE ID: CVE-2022-36416 State: PUBLISHED Published: 2023-02-16T20:00:24.397Z Last Updated: 2025-01-27T18:14:26.672Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: n/a Products: Intel(R) Ethernet 500 Series Controller drivers for VMware Problem Types: escalation of privilege Description: Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa
ntainer: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html
CVE ID: CVE-2022-36417 State: PUBLISHED Published: 2022-09-23T15:20:49.922Z Last Updated: 2025-02-20T20:01:19.922Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Vinoj Cardoza Products: 3D Tag Cloud (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in 3D Tag Cloud plugin <= 3.8 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cardoza-3d-tag-cloud/wordpress-3d-tag-cloud-plugin-3-8-multiple-stored-cross-site-scripting-xss-via-cross-site-request-forgery-c
3d-tag-cloud/wordpress-3d-tag-cloud-plugin-3-8-multiple-stored-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability/_s_id=cve - https://wordpress.org/plugins/cardoza-3d-tag-cloud/
CVE ID: CVE-2022-36418 State: PUBLISHED Published: 2024-01-17T15:51:15.793Z Last Updated: 2025-05-23T16:02:09.543Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Vagary Digital Products: HREFLANG Tags Lite Problem Types: CWE-862 Description: Missing Authorization vulnerability in Vagary Digital HREFLANG Tags Lite.This issue affects HREFLANG Tags Lite: from n/a through 2.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/hreflang-tags-by-dcgws/wordpress-hreflang-tags-lite-plugin-2-0-0-unauthenticated-plugin-data-reset-vulnerability?_s_id=cve
CVE ID: CVE-2022-36419 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:36.063Z Description: No description available.
CVE ID: CVE-2022-36420 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:37.371Z Description: No description available.
CVE ID: CVE-2022-36421 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:38.699Z Description: No description available.
CVE ID: CVE-2022-36422 State: PUBLISHED Published: 2022-09-09T14:39:52.886Z Last Updated: 2025-02-20T20:08:06.697Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Lester 'GaMerZ' Chan Products: WP-PostRatings (WordPress plugin) Problem Types: Race condition Description: Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-postratings/wordpress-wp-postratings-plugin-1-89-rating-increase-decrease-via-race-condition-vulnerability/_s_id=cve - https://wordpress.org/plu
-postratings-plugin-1-89-rating-increase-decrease-via-race-condition-vulnerability/_s_id=cve - https://wordpress.org/plugins/wp-postratings/#developers
CVE ID: CVE-2022-36423 State: PUBLISHED Published: 2022-09-09T14:39:56.347649Z Last Updated: 2024-09-17T04:03:39.048Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-16 Description: OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md
CVE ID: CVE-2022-36424 State: PUBLISHED Published: 2023-07-17T15:12:46.169Z Last Updated: 2024-09-30T13:08:37.530Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Nikola Loncar Products: Easy Appointments Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nikola Loncar Easy Appointments plugin <= 3.11.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-appointments/wordpress-easy-appointments-plugin-3-11-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-36425 State: PUBLISHED Published: 2022-09-06T17:18:54.528Z Last Updated: 2025-02-20T20:09:14.698Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: The Beaver Builder Team Products: Beaver Builder – WordPress Page Builder (WordPress plugin) Problem Types: CWE-264 Description: Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/beaver-builder-lite-version/wordpress-beaver-builder-plugin-2-5-4-3-broken-access-control-vulnerability/_s_id=cve - https://wordpress.org/plugins/beaver
press-beaver-builder-plugin-2-5-4-3-broken-access-control-vulnerability/_s_id=cve - https://wordpress.org/plugins/beaver-builder-lite-version/#developers
CVE ID: CVE-2022-36426 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:40.036Z Description: No description available.
CVE ID: CVE-2022-36427 State: PUBLISHED Published: 2022-09-06T22:19:14.243Z Last Updated: 2025-02-20T20:08:44.198Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: About Rentals. Inc. Products: About Rentals (WordPress plugin) Problem Types: CWE-264 Description: Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin <= 1.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/about-rentals/wordpress-about-rentals-plugin-1-5-missing-access-control-vulnerability/_s_id=cve - https://wordpress.org/plugins/about-rentals/
CVE ID: CVE-2022-36428 State: PUBLISHED Published: 2022-11-03T19:22:18.187Z Last Updated: 2025-02-20T19:57:11.031Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Stage Products: Rock Convert (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Stage Rock Convert plugin <= 2.11.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rock-convert/wordpress-rock-convert-plugin-2-11-0-auth-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/rock-convert/