Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45919 State: PUBLISHED Published: 2022-11-27T00:00:00 Last Updated: 2024-08-03T14:24:03.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/linux-media/20221121063308.GA33821%40ubuntu/T/#u - https://security.netapp.com/advisory/ntap-20230113-0008/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=280a8ab81733da8bc442253c700a52c4c0886ffd
CVE ID: CVE-2022-45920 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:04:11.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-10.html
CVE ID: CVE-2022-45921 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-28T18:13:47.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request. To be specific, an attacker may be able to view or retrieve any file readable by the user running the FusionAuth process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fusionauth.io/docs/v1/tech/release-notes - https://github.com/FusionAuth/fusionauth-issues/issues/1983
CVE ID: CVE-2022-45922 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:25:16.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request handler for ll.KeepAliveSession sets a valid AdminPwd cookie even when the Web Admin password was not entered. This allows access to endpoints, which require a valid AdminPwd cookie, without knowing the password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-e
-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
CVE ID: CVE-2022-45923 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:24:06.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common Gateway Interface (CGI) program cs.exe allows an attacker to increase/decrease an arbitrary memory address by 1 and trigger a call to a method of a vftable with a vftable pointer value chosen by the attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/pre-authenticated-remote-code-execution-in-csexe-opentext-server-component/ - http://
ult.com/vulnerability-lab/advisory/pre-authenticated-remote-code-execution-in-csexe-opentext-server-component/ - http://seclists.org/fulldisclosure/2023/Jan/10 - http://packetstormsecurity.com/files/170613/OpenText-Extended-ECM-22.3-cs.exe-Remote-Code-Execution.html
CVE ID: CVE-2022-45924 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:23:01.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint itemtemplate.createtemplate2 allows a low-privilege user to delete arbitrary files on the server's local filesystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170
rce-opentexttm-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
CVE ID: CVE-2022-45925 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:21:43.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The action xmlexport accepts the parameter requestContext. If this parameter is present, the response includes most of the HTTP headers sent to the server and some of the CGI variables like remote_adde and server_name, which is an information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-inclu
ent: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
CVE ID: CVE-2022-45926 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:07:34.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint notify.localizeEmailTemplate allows a low-privilege user to evaluate webreports. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-
//seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
CVE ID: CVE-2022-45927 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:02:10.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java application server can be used to bypass the authentication of the QDS endpoints of the Content Server. These endpoints can be used to create objects and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/pre-authenticated-remote-code-execution-via-java-frontend-qds-endpoint-opentext-extended-ecm/ - http://seclists.org/fu
y/pre-authenticated-remote-code-execution-via-java-frontend-qds-endpoint-opentext-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/13 - http://packetstormsecurity.com/files/170614/OpenText-Extended-ECM-22.3-Java-Frontend-Remote-Code-Execution.html
CVE ID: CVE-2022-45928 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T16:56:17.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript code in HTML files, it is possible for an attacker to execute Oscript code. The Oscript scripting language allows the attacker (for example) to manipulate files on the filesystem, create new network connections, or execute OS co
llows the attacker (for example) to manipulate files on the filesystem, create new network connections, or execute OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/ - http://seclists.org/fulldisclosure/2023/Jan/14 - http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
CVE ID: CVE-2022-45929 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-03T14:24:03.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://northern.tech - https://mender.io/blog/cve-2022-45929-cve-2022-41324-improper-access-control-for-low-privileged-users
CVE ID: CVE-2022-45930 State: PUBLISHED Published: 2022-11-27T00:00:00.000Z Last Updated: 2025-04-29T13:54:22.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.opendaylight.org/browse/AAA-240 - https://git.opendaylight.org/gerrit/c/aaa/+/103242
CVE ID: CVE-2022-45931 State: PUBLISHED Published: 2022-11-27T00:00:00.000Z Last Updated: 2025-04-29T13:48:42.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.opendaylight.org/browse/AAA-241 - https://git.opendaylight.org/gerrit/c/aaa/+/103243
CVE ID: CVE-2022-45932 State: PUBLISHED Published: 2022-11-27T00:00:00.000Z Last Updated: 2025-04-29T13:46:19.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.opendaylight.org/browse/AAA-239 - https://git.opendaylight.org/gerrit/c/aaa/+/103241
CVE ID: CVE-2022-45933 State: PUBLISHED Published: 2022-11-27T00:00:00.000Z Last Updated: 2025-04-29T13:44:59.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position is that KubeView was a "fun side project and a learning exercise," and not "very secure." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/benc-uk/kubeview/issues/95
CVE ID: CVE-2022-45934 State: PUBLISHED Published: 2022-11-27T00:00:00.000Z Last Updated: 2025-04-29T13:41:05.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDAKCGDW6CQ6G3RZWYZJO454R3L5CTQB/ - https://sec
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDAKCGDW6CQ6G3RZWYZJO454R3L5CTQB/ - https://security.netapp.com/advisory/ntap-20230113-0008/ - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2022-45935 State: PUBLISHED Published: 2023-01-06T09:33:30.150Z Last Updated: 2025-04-10T13:35:31.647Z Vendors: Apache Software Foundation Products: Apache James server Problem Types: CWE-668 Description: Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/j61fo8xc1rxtofrn8vc33whx35s9cj1d
CVE ID: CVE-2022-45936 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:56:20.318Z Vendors: Siemens Products: Mendix Email Connector Problem Types: CWE-284 Description: A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf
CVE ID: CVE-2022-45937 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:43:23.146Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: APOGEE PXC Compact (BACnet), APOGEE PXC Compact (P2 Ethernet), APOGEE PXC Modular (BACnet), APOGEE PXC Modular (P2 Ethernet), TALON TC Compact (BACnet), TALON TC Modular (BACnet) Problem Types: CWE-284 Description: A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.
< V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf
CVE ID: CVE-2022-45938 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T18:26:04.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.xfinity.com/vulnerabilityreport - https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f
CVE ID: CVE-2022-45939 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-28T18:12:24.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gnu.o
ut. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=d48bb4874bc6cd3e69c7a15fc3c91cc141025c51 - https://lists.debian.org/debian-lts-announce/2022/12/msg00046.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOXIH2FDEQJEAARE52C3GHTLGQFBYPIB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOSK3J7BBAEI4IITW2DRUKLQYUZYKH6Y/ - https://www.debian.org/security/2023/dsa-5314
CVE ID: CVE-2022-45942 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:37:06.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://this-is-y.xyz/2022/11/20/baijiacmsV4-RCE/ - https://github.com/This-is-Y/baijiacms-RCE
CVE ID: CVE-2022-45956 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T19:15:41.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/169962/Boa-Web-Server-0.94.13-0.94.14-Authentication-Bypass.html
CVE ID: CVE-2022-45957 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T19:20:47.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/169949/ZTE-ZXHN-H108NS-Stack-Buffer-Overflow-Denial-Of-Service.html
CVE ID: CVE-2022-45962 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:18:16.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via CalendarModal.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/OS4ED/openSIS-Classic/blob/381a1ad907285182c88e30b8bb6ce91123d9275d/CalendarModal.php#L30 - https://ccat.gitbook.io/cyber-sec/cve/cve-2022-45962-postauth-sqli - https://github.com/OS4ED/openSIS-Classic/commit/81799fd1de74d7b4bf3c4c37ad6042214e
ec/cve/cve-2022-45962-postauth-sqli - https://github.com/OS4ED/openSIS-Classic/commit/81799fd1de74d7b4bf3c4c37ad6042214e48a469#diff-06a8cd9b045bb97531de5ba5122272ffdd519a78b1daa12060e12e337c8d2016 - https://github.com/OS4ED/openSIS-Classic/commit/81799fd1de74d7b4bf3c4c37ad6042214e48a469
CVE ID: CVE-2022-45963 State: PUBLISHED Published: 2022-12-27T00:00:00.000Z Last Updated: 2025-04-11T18:56:44.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/fc6478328f8c2e2bf62a631a81afb265
CVE ID: CVE-2022-45966 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T15:03:08.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yinfei6/classcms
CVE ID: CVE-2022-45968 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T20:43:57.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alist-org/alist/issues/2444
CVE ID: CVE-2022-45969 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:35:39.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alist v3.4.0 is vulnerable to Directory Traversal, Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alist-org/alist/issues/2449
CVE ID: CVE-2022-45970 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T19:01:23.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alist-org/alist/issues/2457
CVE ID: CVE-2022-45977 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T19:00:25.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/3
CVE ID: CVE-2022-45979 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:53:42.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/4
CVE ID: CVE-2022-45980 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:50:21.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/6
CVE ID: CVE-2022-45982 State: PUBLISHED Published: 2023-02-08T00:00:00.000Z Last Updated: 2025-03-25T14:07:03.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Dar1in9s/aa87df679057db3bbdade360d77f8cca
CVE ID: CVE-2022-45988 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:27:19.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/happy0717/StarSoftComm_HP_CooCare_An_elevation_of_privilege_vulnerability_exists/edit/main/README.md - https://github.com/happy0717/CVE-2022-45988