Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-48517 State: PUBLISHED Published: 2023-07-06T12:48:51.135Z Last Updated: 2024-11-19T16:58:04.440Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-701 Description: Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48518 State: PUBLISHED Published: 2023-07-06T12:53:19.166Z Last Updated: 2024-11-19T16:57:33.457Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-701 Description: Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en
DP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48519 State: PUBLISHED Published: 2023-07-06T12:54:22.659Z Last Updated: 2024-11-19T16:55:11.908Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48520 State: PUBLISHED Published: 2023-07-06T12:55:24.026Z Last Updated: 2024-11-19T16:52:18.687Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48521 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-08-03T15:17:54.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trusteddomainproject/OpenDK
as none. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trusteddomainproject/OpenDKIM/issues/148 - https://lists.debian.org/debian-lts-announce/2023/12/msg00002.html
CVE ID: CVE-2022-48522 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:21:12.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c#L16336-L16345 - https://security.netapp.com/advisory/ntap-20230915-0008/
CVE ID: CVE-2022-48538 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:17:32.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() allows a zero as the password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.cacti.net/Settings-Auth-LDAP.md - https://github.com/Cacti/cacti/issues/5189
CVE ID: CVE-2022-48541 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-04T18:14:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/2889 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LICYTADFJAFPZW3Y2MKNCJIUYODPAG4L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAULDP3GG5KI3XITQ5XSMRSILCBZS2VK
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAULDP3GG5KI3XITQ5XSMRSILCBZS2VK/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00020.html
CVE ID: CVE-2022-48545 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:16:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42092
CVE ID: CVE-2022-48547 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:09:19.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at auth_changepassword.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/issues/1882
CVE ID: CVE-2022-48554 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-03T15:17:55.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.astron.com/view.php?id=310 - https://www.debian.org/security/2023/dsa-5489 - https://security.netapp.com/advisory/ntap-20231116-0002/ - https://support.apple.com/kb/HT214081 - https://support.apple.com/kb/HT214088 - https://support.apple.com/kb/HT214084 - https://support.apple.com/kb/HT214086 - http://seclists.org/full
m/kb/HT214088 - https://support.apple.com/kb/HT214084 - https://support.apple.com/kb/HT214086 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2022-48560 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-03T15:17:54.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free exists in Python through 3.9 via heappushpop in heapq. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue39421 - https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html - https://security.netapp.com/advisory/ntap-20230929-0008/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/ - https://lists.fedoraproject
/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/
CVE ID: CVE-2022-48564 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-03T15:17:54.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue42103 - https://security.netapp.com/advisory/ntap-20230929-0009/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
CVE ID: CVE-2022-48565 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:41:29.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.python.org/issue42051 - https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html - https://security.netapp.com/advisory/ntap-20231006-0007/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html - https://lists.fedoraproje
ory/ntap-20231006-0007/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
CVE ID: CVE-2022-48566 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:08:35.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.python.org/issue40791 - https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html - https://security.netapp.com/advisory/ntap-20231006-0013/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
CVE ID: CVE-2022-48570 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:07:50.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weidai11/cryptopp/releases/tag/CRYPTOPP_8_4_0 - https://github.com/weidai11/cryptopp/issues/992
CVE ID: CVE-2022-48571 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:07:05.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/memcached/memcached/commit/6b319c8c7a29e9c353dec83dc92f01905f6c8966 - https://lists.debian.org/debian-lts-announce/2023/09/msg00004.html
CVE ID: CVE-2022-48577 State: PUBLISHED Published: 2024-01-10T22:03:19.806Z Last Updated: 2025-06-17T19:45:45.316Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-48578 State: PUBLISHED Published: 2024-06-10T19:21:23.279Z Last Updated: 2024-08-19T18:41:00.201Z Vendors: Apple Products: macOS Problem Types: Processing an AppleScript may result in unexpected termination or disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpected termination or disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345
CVE ID: CVE-2022-48579 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-17T13:57:07.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pmachapman/unrar/commit/2ecab6bb5ac4f3b88f270218445496662020205f#diff-ca3086f578522062d7e390ed2cd7e10f646378a8b8cbf287a6e4db5966df68ee - https://lists.debian.org/debian-lts-announce/2023/08/msg00023.html
CVE ID: CVE-2022-48580 State: PUBLISHED Published: 2023-08-09T17:02:24.923Z Last Updated: 2024-10-10T14:54:53.574Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48580/
CVE ID: CVE-2022-48581 State: PUBLISHED Published: 2023-08-09T17:08:11.636Z Last Updated: 2024-10-10T14:53:54.089Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48581/
CVE ID: CVE-2022-48582 State: PUBLISHED Published: 2023-08-09T17:11:15.231Z Last Updated: 2024-10-10T14:53:17.188Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48582/
CVE ID: CVE-2022-48583 State: PUBLISHED Published: 2023-08-09T17:13:54.494Z Last Updated: 2024-10-10T14:52:38.496Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48583/
CVE ID: CVE-2022-48584 State: PUBLISHED Published: 2023-08-09T17:29:49.944Z Last Updated: 2024-10-10T14:51:50.315Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48584/
CVE ID: CVE-2022-48585 State: PUBLISHED Published: 2023-08-09T17:42:14.525Z Last Updated: 2024-10-10T14:50:45.147Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48585/
CVE ID: CVE-2022-48586 State: PUBLISHED Published: 2023-08-09T17:44:56.747Z Last Updated: 2024-10-10T14:49:50.480Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48586/
CVE ID: CVE-2022-48587 State: PUBLISHED Published: 2023-08-09T17:46:05.699Z Last Updated: 2024-10-10T14:49:15.668Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48587/
CVE ID: CVE-2022-48588 State: PUBLISHED Published: 2023-08-09T17:47:49.705Z Last Updated: 2024-10-10T14:46:51.043Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48588/
CVE ID: CVE-2022-48589 State: PUBLISHED Published: 2023-08-09T17:54:20.181Z Last Updated: 2024-10-10T14:46:02.450Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48589/
CVE ID: CVE-2022-48590 State: PUBLISHED Published: 2023-08-09T17:57:42.896Z Last Updated: 2024-10-10T14:45:17.570Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48590/
CVE ID: CVE-2022-48591 State: PUBLISHED Published: 2023-08-09T18:04:59.797Z Last Updated: 2024-10-10T14:43:43.839Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48591/
CVE ID: CVE-2022-48592 State: PUBLISHED Published: 2023-08-09T18:09:37.218Z Last Updated: 2024-10-10T14:42:58.694Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48592/
CVE ID: CVE-2022-48593 State: PUBLISHED Published: 2023-08-09T18:14:54.986Z Last Updated: 2024-10-10T14:42:26.114Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48593/
CVE ID: CVE-2022-48594 State: PUBLISHED Published: 2023-08-09T18:18:03.553Z Last Updated: 2024-10-10T12:49:18.686Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48594/