Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30791 State: PUBLISHED Published: 2022-07-11T10:40:38.913416Z Last Updated: 2024-09-16T16:48:31.565Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Gateway, CODESYS Edge Gateway for Windows, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, COD
eckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Edge Gateway for Linux Problem Types: CWE-400 Description: In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19b
VE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=
CVE ID: CVE-2022-30792 State: PUBLISHED Published: 2022-07-11T10:40:43.935648Z Last Updated: 2024-09-16T23:05:31.037Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Gateway, CODESYS Edge Gateway for Windows, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, COD
eckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Edge Gateway for Linux Problem Types: CWE-400 Description: In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=171
nal Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=
CVE ID: CVE-2022-30794 State: PUBLISHED Published: 2022-05-31T15:06:48 Last Updated: 2024-08-03T07:03:39.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/online-ordering-system/SQLi-1.md
CVE ID: CVE-2022-30795 State: PUBLISHED Published: 2022-05-31T15:08:26 Last Updated: 2024-08-03T07:03:39.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/online-ordering-system/SQLi-4.md
CVE ID: CVE-2022-30797 State: PUBLISHED Published: 2022-05-31T15:11:23 Last Updated: 2024-08-03T07:03:38.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/online-ordering-system/SQLi-3.md
CVE ID: CVE-2022-30798 State: PUBLISHED Published: 2022-05-31T15:13:01 Last Updated: 2024-08-03T07:03:38.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/online-ordering-system/SQLi-2.md
CVE ID: CVE-2022-30799 State: PUBLISHED Published: 2022-05-31T15:14:44 Last Updated: 2024-08-03T07:03:39.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/online-ordering-system/SQLi-5.md
CVE ID: CVE-2022-30804 State: PUBLISHED Published: 2022-05-31T16:29:52 Last Updated: 2024-08-03T07:03:38.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/delet-file-1.md
CVE ID: CVE-2022-30808 State: PUBLISHED Published: 2022-05-31T16:25:32 Last Updated: 2024-08-03T07:03:38.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/RCE-1.md
CVE ID: CVE-2022-30809 State: PUBLISHED Published: 2022-05-31T16:23:49 Last Updated: 2024-08-03T07:03:39.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-1.md
CVE ID: CVE-2022-30810 State: PUBLISHED Published: 2022-05-31T16:22:14 Last Updated: 2024-08-03T07:03:38.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-2.md
CVE ID: CVE-2022-30813 State: PUBLISHED Published: 2022-05-31T16:18:27 Last Updated: 2024-08-03T07:03:39.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-3.md
CVE ID: CVE-2022-30814 State: PUBLISHED Published: 2022-05-31T16:17:00 Last Updated: 2024-08-03T07:03:38.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-5.md
CVE ID: CVE-2022-30815 State: PUBLISHED Published: 2022-05-31T15:54:59 Last Updated: 2024-08-03T07:03:38.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar= Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-4.md
CVE ID: CVE-2022-30816 State: PUBLISHED Published: 2022-05-31T15:52:26 Last Updated: 2024-08-03T07:03:39.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-6.md
CVE ID: CVE-2022-30817 State: PUBLISHED Published: 2022-05-31T16:34:18 Last Updated: 2024-08-03T07:03:39.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/simple-bus-ticket-booking-system/SQLi-1.md
CVE ID: CVE-2022-30818 State: PUBLISHED Published: 2022-05-31T17:17:19 Last Updated: 2024-08-03T07:03:39.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-10.md
CVE ID: CVE-2022-30819 State: PUBLISHED Published: 2022-05-31T17:40:25 Last Updated: 2024-08-03T07:03:39.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-3.md
CVE ID: CVE-2022-30820 State: PUBLISHED Published: 2022-05-31T17:38:53 Last Updated: 2024-08-03T07:03:39.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-4.md
CVE ID: CVE-2022-30821 State: PUBLISHED Published: 2022-05-31T17:37:25 Last Updated: 2024-08-03T07:03:38.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-2.md
CVE ID: CVE-2022-30822 State: PUBLISHED Published: 2022-05-31T17:35:22 Last Updated: 2024-08-03T07:03:38.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-5.md
CVE ID: CVE-2022-30823 State: PUBLISHED Published: 2022-05-31T17:32:55 Last Updated: 2024-08-03T07:03:39.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-1.md
CVE ID: CVE-2022-30825 State: PUBLISHED Published: 2022-05-31T17:30:04 Last Updated: 2024-08-03T07:03:38.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-2.md
CVE ID: CVE-2022-30826 State: PUBLISHED Published: 2022-05-31T17:28:29 Last Updated: 2024-08-03T07:03:39.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-3.md
CVE ID: CVE-2022-30827 State: PUBLISHED Published: 2022-05-31T17:27:07 Last Updated: 2024-08-03T07:03:39.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\package_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-4.md
CVE ID: CVE-2022-30828 State: PUBLISHED Published: 2022-05-31T17:25:58 Last Updated: 2024-08-03T07:03:39.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\photos_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-6.md
CVE ID: CVE-2022-30829 State: PUBLISHED Published: 2022-05-31T17:24:46 Last Updated: 2024-08-03T07:03:38.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\users_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-7.md
CVE ID: CVE-2022-30830 State: PUBLISHED Published: 2022-05-31T17:23:14 Last Updated: 2024-08-03T07:03:38.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\feature_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-5.md
CVE ID: CVE-2022-30831 State: PUBLISHED Published: 2022-05-31T17:22:04 Last Updated: 2024-08-03T07:03:39.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management/wedding_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-8.md
CVE ID: CVE-2022-30832 State: PUBLISHED Published: 2022-05-31T17:20:48 Last Updated: 2024-08-03T07:03:39.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_assign.php?booking=31&user_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-9.md
CVE ID: CVE-2022-30833 State: PUBLISHED Published: 2022-05-31T17:19:17 Last Updated: 2024-08-03T07:03:39.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_edit.php?booking=31&user_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-10.md
CVE ID: CVE-2022-30834 State: PUBLISHED Published: 2022-05-31T17:15:20 Last Updated: 2024-08-03T07:03:39.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_manage_account_details.php?booking_id=31&user_id= Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-11.md
CVE ID: CVE-2022-30835 State: PUBLISHED Published: 2022-05-31T17:13:48 Last Updated: 2024-08-03T07:03:39.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection. via /Wedding-Management/admin/budget.php?booking_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-12.md
CVE ID: CVE-2022-30836 State: PUBLISHED Published: 2022-05-31T17:12:24 Last Updated: 2024-08-03T07:03:39.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin/select.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-13.md
CVE ID: CVE-2022-30837 State: PUBLISHED Published: 2022-05-24T14:01:53 Last Updated: 2024-08-03T07:03:39.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/bug_report_CVE/blob/main/toll-tax-management-system/xss.md
CVE ID: CVE-2022-30838 State: PUBLISHED Published: 2022-05-24T14:06:59 Last Updated: 2024-08-03T07:03:39.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=update_application_status Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/bug_report_CVE/blob/main/Covid-19-Travel-Pass-Management-System/sql.md
CVE ID: CVE-2022-30839 State: PUBLISHED Published: 2022-05-24T14:09:46 Last Updated: 2024-08-03T07:03:39.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting (XSS) via /rrps/classes/Master.php?f=save_category, vehicle_name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/bug_report_CVE/blob/main/room-rent-portal-site/xss.md
CVE ID: CVE-2022-30842 State: PUBLISHED Published: 2022-05-24T14:04:34 Last Updated: 2024-08-03T07:03:39.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ctpms/classes/Users.php?f=save, firstname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/bug_report_CVE/blob/main/Covid-19-Travel-Pass-Management-System/xss.md
CVE ID: CVE-2022-30843 State: PUBLISHED Published: 2022-05-24T14:08:40 Last Updated: 2024-08-03T07:03:38.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=delete_category, id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikeccltt/bug_report_CVE/blob/main/room-rent-portal-site/sql.md
CVE ID: CVE-2022-30852 State: PUBLISHED Published: 2022-07-08T11:10:28 Last Updated: 2024-08-03T07:03:39.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idno/known - https://withknown.com/ - https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
CVE ID: CVE-2022-30858 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-31T15:31:54.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CA_file2_0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miniupnp/ngiflib/issues/22 - https://github.com/Marsman1996/pocs/blob/master/ngiflib/CVE-2022-30858/README.md
CVE ID: CVE-2022-30860 State: PUBLISHED Published: 2022-06-06T13:34:41 Last Updated: 2024-08-03T07:03:40.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fudforum/FUDforum/issues/23
CVE ID: CVE-2022-30861 State: PUBLISHED Published: 2022-06-06T13:40:00 Last Updated: 2024-08-03T07:03:39.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fudforum/FUDforum/issues/24
CVE ID: CVE-2022-30863 State: PUBLISHED Published: 2022-06-06T13:44:00 Last Updated: 2024-08-03T07:03:39.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fudforum/FUDforum/issues/24
CVE ID: CVE-2022-30874 State: PUBLISHED Published: 2022-06-21T14:35:16 Last Updated: 2024-08-03T07:03:39.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nukeviet/nukeviet - https://blog.stmcyber.com/vulns/cve-2022-30874/ - https://whitehub.net/submissions/2968
CVE ID: CVE-2022-30875 State: PUBLISHED Published: 2022-06-08T16:04:23 Last Updated: 2024-08-03T07:03:40.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr 12.0.5 is vulnerable to Cross Site Scripting (XSS) via Sql Error Page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mustgundogdu/Research/edit/main/Dolibar_12.0.5-ReflectedXSS%2C - https://github.com/mustgundogdu/Research/edit/main/Dolibar_12.0.5-ReflectedXSS/README.md
CVE ID: CVE-2022-30877 State: PUBLISHED Published: 2022-06-08T17:39:13 Last Updated: 2024-08-03T07:03:40.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/keep - https://github.com/OrkoHunter/keep/issues/85
CVE ID: CVE-2022-30882 State: PUBLISHED Published: 2022-06-08T19:05:48 Last Updated: 2024-08-03T07:03:39.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code (remote). When installing the pyanxdns package of version 0.2, the request package will be installed. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/pyanxdns/ - https://github.com/egeback/pyanxdns/issues/1
CVE ID: CVE-2022-30885 State: PUBLISHED Published: 2022-06-24T20:41:10 Last Updated: 2024-08-03T07:03:39.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/pyesasky/ - https://github.com/esdc-esac-esa-int/pyesasky/issues/39