Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45013 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:38:39.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Show Advanced Option module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Section Header field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS - https://github.com/gozan10/cve/issues/2 - https://github.com/gozan10
CVE ID: CVE-2022-45014 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:33:15.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Results Header field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS - https://github.com/gozan10 - https://github.com/gozan10/cve/issues/3
CVE ID: CVE-2022-45015 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:31:53.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Results Footer field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS - https://github.com/gozan10 - https://github.com/gozan10/cve/issues/4
CVE ID: CVE-2022-45016 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T14:00:48.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Footer field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS - https://github.com/gozan10 - https://github.com/gozan10/cve/issues/5
CVE ID: CVE-2022-45017 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T13:59:07.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Overview Page settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Loop field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS - https://github.com/gozan10 - https://github.com/WBCE/WBCE_CMS/issues/525
CVE ID: CVE-2022-45019 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:41:17.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.5.0
CVE ID: CVE-2022-45020 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:53:09.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /rukovoditel/index.php?module=users/login. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/rukovoditel.net/2022/rukovoditel-3.2.1
CVE ID: CVE-2022-45025 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:52:41.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/shd101wyy/vscode-markdown-preview-enhanced/issues/639
CVE ID: CVE-2022-45026 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:51:47.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/shd101wyy/vscode-markdown-preview-enhanced/issues/640
CVE ID: CVE-2022-45027 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T13:52:56.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html - https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/
CVE ID: CVE-2022-45028 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:17:18.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seanpesce.blogspot.com/2022/11/unauthenticated-stored-xss-in-arris.html - https://drive.google.com/file/d/1AHqvciVNMQpUoomFgtctnByewkkr24kB/view
CVE ID: CVE-2022-45030 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T15:57:26.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rconfig.com/downloads/rconfig-3.9.7.zip - http://packetstormsecurity.com/files/171613/rconfig-3.9.7-SQL-Injection.html
CVE ID: CVE-2022-45033 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:39:48.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cyb3r-n3rd/cve-request/blob/main/cve-poc-payload
CVE ID: CVE-2022-45036 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T18:47:11.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the No Results field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/2wAlXR1j6BsJlDAP
CVE ID: CVE-2022-45037 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T18:48:50.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/dPkpKPQEjXfvYoqO
CVE ID: CVE-2022-45038 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T18:57:39.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Footer field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/Ee32MrJd80iEwyA2
CVE ID: CVE-2022-45039 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T19:01:03.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/XKq4MKmDYDC8B1kN
CVE ID: CVE-2022-45040 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T19:07:03.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name Section field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/XKq4MKmDGnsgjZkN
CVE ID: CVE-2022-45041 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:39:48.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exits in xinhu < 2.5.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/N1k0la-T/somefiles/blob/main/sqli.py - https://github.com/N1k0la-T/vulnerability/issues/1
CVE ID: CVE-2022-45043 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T19:19:26.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/2
CVE ID: CVE-2022-45044 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2025-11-11T20:20:05.358Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:T/RC:C) Vendors: Siemens Products: SIPROTEC 5 6MD84 (CP300), SIPROTEC 5 6MD85 (CP200), SIPROTEC 5 6MD85 (CP300), SIPROTEC 5 6MD86 (CP200), SIPROTEC 5 6MD86 (CP300), SIPROTEC 5 6MD89 (CP300), SIPROTEC 5 6MU85 (CP300), SIPROTEC 5 7KE85 (CP200), SIPROTEC 5 7KE85 (CP300), SIPROTEC 5 7SA82 (CP100), SIPROTEC 5 7SA82 (CP150), SIPROTEC 5 7SA84 (CP200), SIPROTEC 5 7SA86 (CP200), SIPROTEC 5 7SA86 (CP300), SIPROTEC 5 7SA87 (CP200), SIPROTEC 5 7SA87 (CP300), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SD82 (CP150), SIPROTEC
CP300), SIPROTEC 5 7SA87 (CP200), SIPROTEC 5 7SA87 (CP300), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SD82 (CP150), SIPROTEC 5 7SD84 (CP200), SIPROTEC 5 7SD86 (CP200), SIPROTEC 5 7SD86 (CP300), SIPROTEC 5 7SD87 (CP200), SIPROTEC 5 7SD87 (CP300), SIPROTEC 5 7SJ81 (CP100), SIPROTEC 5 7SJ81 (CP150), SIPROTEC 5 7SJ82 (CP100), SIPROTEC 5 7SJ82 (CP150), SIPROTEC 5 7SJ85 (CP200), SIPROTEC 5 7SJ85 (CP300), SIPROTEC 5 7SJ86 (CP200), SIPROTEC 5 7SJ86 (CP300), SIPROTEC 5 7SK82 (CP100), SIPROTEC 5 7SK82 (CP150), SIPROTEC 5 7SK85 (CP200), SIPROTEC 5 7SK85 (CP300), SIPROTEC 5 7SL82 (CP100), SIPROTEC 5 7SL82 (CP150), SIPROTEC 5 7SL86 (CP200), SIPROTEC 5 7SL86 (CP300), SIPROTEC 5 7SL87 (CP200), SIPROTEC 5 7SL87
SIPROTEC 5 7SL82 (CP150), SIPROTEC 5 7SL86 (CP200), SIPROTEC 5 7SL86 (CP300), SIPROTEC 5 7SL87 (CP200), SIPROTEC 5 7SL87 (CP300), SIPROTEC 5 7SS85 (CP200), SIPROTEC 5 7SS85 (CP300), SIPROTEC 5 7ST85 (CP200), SIPROTEC 5 7ST85 (CP300), SIPROTEC 5 7ST86 (CP300), SIPROTEC 5 7SX82 (CP150), SIPROTEC 5 7SX85 (CP300), SIPROTEC 5 7UM85 (CP300), SIPROTEC 5 7UT82 (CP100), SIPROTEC 5 7UT82 (CP150), SIPROTEC 5 7UT85 (CP200), SIPROTEC 5 7UT85 (CP300), SIPROTEC 5 7UT86 (CP200), SIPROTEC 5 7UT86 (CP300), SIPROTEC 5 7UT87 (CP200), SIPROTEC 5 7UT87 (CP300), SIPROTEC 5 7VE85 (CP300), SIPROTEC 5 7VK87 (CP200), SIPROTEC 5 7VK87 (CP300), SIPROTEC 5 7VU85 (CP300), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)
5 7VK87 (CP200), SIPROTEC 5 7VK87 (CP300), SIPROTEC 5 7VU85 (CP300), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1), SIPROTEC 5 Communication Module ETH-BD-2FO, SIPROTEC 5 Compact 7SX800 (CP050) Problem Types: CWE-400 Description: A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPR
) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versio
, SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIP
versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versi
TEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SI
00) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2
unication Module ETH-BB-2FO (Rev. 1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack. Additional Analyst Notes: - C
ial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf - https://cert-portal.siemens.com/productcert/html/ssa-552874.html
CVE ID: CVE-2022-45045 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T20:09:06.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied pa
perating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vulncheck.com/blog/xiongmai-iot-exploitation
CVE ID: CVE-2022-45046 State: REJECTED Published: 2022-12-05T00:00:00 Last Updated: 2022-12-19T16:24:37.230Z Description: No description available.
CVE ID: CVE-2022-45047 State: PUBLISHED Published: 2022-11-16T00:00:00 Last Updated: 2024-08-03T14:01:31.528Z Vendors: Apache Software Foundation Products: Apache MINA SSHD Problem Types: CWE-502 Description: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server. Additional Analyst Notes: - CVE Program Container: References: - https://www.mail-archive.com/dev%40mina.apache.org/msg39312.html - https://security.netapp.com/advisory/ntap-2
rences: - https://www.mail-archive.com/dev%40mina.apache.org/msg39312.html - https://security.netapp.com/advisory/ntap-20240216-0008/
CVE ID: CVE-2022-45048 State: PUBLISHED Published: 2023-05-05T07:50:25.762Z Last Updated: 2024-10-15T18:12:43.127Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: CWE-74 Description: Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/6rpzwy1smdhr60tsh1ydknn3kdm45bb6
CVE ID: CVE-2022-45049 State: PUBLISHED Published: 2023-01-04T18:11:23.783Z Last Updated: 2025-04-10T18:05:15.986Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Axiell Products: Iguana Problem Types: CWE-79 Description: A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2022-45049/ - https://csirt.divd.nl/DIVD-2022-00064/
CVE ID: CVE-2022-45050 State: PUBLISHED Published: 2022-12-01T08:00:43.460Z Last Updated: 2025-04-25T14:37:55.759Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Axiell Products: Iguana Problem Types: CWE-79 Description: A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2022-45050/ - https://csirt.divd.nl/DIVD-2022-00064/
CVE ID: CVE-2022-45051 State: PUBLISHED Published: 2023-01-04T18:11:32.145Z Last Updated: 2025-04-10T18:05:14.579Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Axiell Products: Iguana Problem Types: CWE-79 Description: A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The module parameter on the Service.template.cls endpoint does not properly neutralise user input, resulting in the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2022-45051/ - https://csirt.divd.nl/DIVD-2022-00064/
CVE ID: CVE-2022-45052 State: PUBLISHED Published: 2023-01-04T18:11:20.473Z Last Updated: 2025-03-11T13:41:05.512Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Axiell Products: Iguana Problem Types: CWE-552 Description: A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server. Additional Analyst Notes: - CVE Program Container: References: - https://csirt.divd.nl/CVE-2022-45052/ - https://csirt.divd.nl/DIVD-2022-00064/
CVE ID: CVE-2022-45059 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:30:34.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://varnish-cache.org/security/VSV00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
rg/security/VSV00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/