Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29254 State: PUBLISHED Published: 2022-06-06T19:35:10.000Z Last Updated: 2025-04-23T18:19:05.162Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: silverstripe Products: silverstripe-omnipay Problem Types: CWE-436 Description: silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is possible for payments to be prematurely marked as completed without payment being taken. This is mitigated by the fact that most payment gateways hide this information f
completed without payment being taken. This is mitigated by the fact that most payment gateways hide this information from users, however some issuing banks offer flawed 3DSecure implementations that may inadvertently expose this data. The following versions have been patched to fix this issue: `2.5.2`, `3.0.2`, `3.1.4`, and `3.2.1`. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/silverstripe/silverstripe-omnipay/security/advisories/GHSA-48f2-m7jg-866x - https://github.com/silverstripe/silverstripe-omnipay/commit/7dee9a1e0a5f54c2dc06e018cff3d9a19044e01b
CVE ID: CVE-2022-29255 State: PUBLISHED Published: 2022-06-06T19:55:10.000Z Last Updated: 2025-04-22T17:54:47.403Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: vyperlang Products: vyper Problem Types: CWE-670 Description: Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling an external contract with no return value, the contract address (including side effects) could be evaluated twice. This may result in incorrect outcomes for contracts. This issue has been addressed in v0.3.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vyper
.3.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-4v9q-cgpw-cf38 - https://github.com/vyperlang/vyper/commit/6b4d8ff185de071252feaa1c319712b2d6577f8d
CVE ID: CVE-2022-29256 State: PUBLISHED Published: 2022-05-25T21:20:12.000Z Last Updated: 2025-04-23T18:21:26.238Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: lovell Products: sharp Problem Types: CWE-77 Description: sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. If an attacker has the ability to set the value of the `PKG_CONFIG_PATH` environment variable in a build environment then they might be able to use this to inject an arbitrary command at `npm install` time. This is not
build environment then they might be able to use this to inject an arbitrary command at `npm install` time. This is not part of any runtime code, does not affect Windows users at all, and is unlikely to affect anyone that already cares about the security of their build environment. This problem is fixed in version 0.30.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lovell/sharp/security/advisories/GHSA-gp95-ppv5-3jc5 - https://github.com/lovell/sharp/commit/a6aeef612be50f5868a77481848b1de674216f0c
CVE ID: CVE-2022-29257 State: PUBLISHED Published: 2022-06-13T21:25:10.000Z Last Updated: 2025-04-23T18:16:23.820Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: electron Products: electron Problem Types: CWE-20 Description: Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows attackers who have control over a given apps update server / update storage to serve maliciously crafted update packages that pass the code signing validation check but contain malicious code in some components. This kind of attack would requir
t pass the code signing validation check but contain malicious code in some components. This kind of attack would require significant privileges in a potential victim's own auto updating infrastructure and the ease of that attack entirely depends on the potential victim's infrastructure security. Electron versions 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 contain a fix for this issue. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/electron/electron/security/advisories/GHSA-77xc-hjv8-ww97
CVE ID: CVE-2022-29258 State: PUBLISHED Published: 2022-05-31T16:45:11.000Z Last Updated: 2025-04-23T18:21:07.259Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-80, CWE-116 Description: XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stream with settings for each stream. Starting with versions 6.0-milestone-2 and 5.4.4 and prior to versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3, XWiki Platform Filter UI contains a possible cross-site scripting vector in the `Filter.FilterStreamDescriptorForm` wiki page related to pretty much all the form f
e cross-site scripting vector in the `Filter.FilterStreamDescriptorForm` wiki page related to pretty much all the form fields printed in the home page of the application. The issue is patched in versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The easiest workaround is to edit the wiki page `Filter.FilterStreamDescriptorForm` (with wiki editor) according to the instructions in the GitHub Security Advisory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xjfw-5vv5-vjq2 - https://github.com/xwiki/xwiki-platform/commit/21906acb5ee2304552f56f9bbdbf8e7d368f7f3a - https://jira.xwiki.org/bro
2 - https://github.com/xwiki/xwiki-platform/commit/21906acb5ee2304552f56f9bbdbf8e7d368f7f3a - https://jira.xwiki.org/browse/XWIKI-19293
CVE ID: CVE-2022-29262 State: PUBLISHED Published: 2023-11-14T19:05:09.467Z Last Updated: 2024-08-30T15:09:15.619Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board BIOS firmware Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html
CVE ID: CVE-2022-29263 State: PUBLISHED Published: 2022-05-05T16:43:25.102294Z Last Updated: 2024-09-16T23:27:04.518Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP APM, BIG-IP APM Clients Problem Types: CWE-732 Description: On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Techni
ervice does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K33552735
CVE ID: CVE-2022-29264 State: PUBLISHED Published: 2022-04-25T06:11:03 Last Updated: 2024-08-03T06:17:54.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7 - https://review.coreboot.org/c/coreboot/+/63478
CVE ID: CVE-2022-29265 State: PUBLISHED Published: 2022-04-30T08:05:10 Last Updated: 2024-08-03T06:17:54.476Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: CWE-611 Description: Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML External Entity references when configured with default property values: - EvaluateXPath - EvaluateXQuery - ValidateXml Apache NiFi flow configurations that include these Processors are vulnerable to
uateXPath - EvaluateXQuery - ValidateXml Apache NiFi flow configurations that include these Processors are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations in the default configuration for these Processors, and disallows XML External Entity resolution in standard services. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2022-29265 - https://lists.apache.org/thread/47od9kr9n4cyv0mv81jh3pkyx815kyjl
CVE ID: CVE-2022-29266 State: PUBLISHED Published: 2022-04-20T07:15:13 Last Updated: 2024-08-03T06:17:54.494Z Vendors: Apache Software Foundation Products: Apache APISIX Problem Types: CWE-209 Description: In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/6qpfyxogbvn18g9xr8g218jjfjbfsbhr - http://www.openwall.com/lists/oss-security/2022/04/20/1
CVE ID: CVE-2022-29268 State: REJECTED Published: 2022-04-15T15:24:48 Last Updated: 2022-04-20T15:30:27 Description: No description available.
CVE ID: CVE-2022-29269 State: PUBLISHED Published: 2022-06-29T00:58:34 Last Updated: 2024-08-03T06:17:54.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that lead to the reformatting/editing of emails from an official email address. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://github.com/4LPH4-NL/CVEs - https://github.com/sT0wn-nl/CVEs/blob/master/README.md#nagios-xi
CVE ID: CVE-2022-29270 State: PUBLISHED Published: 2022-06-29T00:58:40 Last Updated: 2024-08-03T06:17:54.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://github.com/4LPH4-NL/CVEs - https://github.com/sT0wn-nl/CVEs/blob/master/README.md#nagios-xi
CVE ID: CVE-2022-29271 State: PUBLISHED Published: 2022-06-29T00:58:46 Last Updated: 2024-08-03T06:17:54.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://github.com/4LPH4-NL/CVEs - https://github.com/sT0wn-nl/CVEs/blob/master/README.md#nagios-xi
CVE ID: CVE-2022-29272 State: PUBLISHED Published: 2022-06-29T00:58:52 Last Updated: 2024-08-03T06:17:54.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://github.com/4LPH4-NL/CVEs - https://github.com/sT0wn-nl/CVEs/blob/master/README.md#nagios-xi
CVE ID: CVE-2022-29273 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-12T15:08:01.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.netgate.com/pfsense/en/latest/releases/index.html#current-and-upcoming-supported-releases - https://redmine.pfsense.org/issues/13060 - https://docs.netgate.com/downloads/pfSense-SA-22_05.webgui.asc
CVE ID: CVE-2022-29275 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:59:04.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058 Additional Analyst Notes: - CVE Program Container:
: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022058
CVE ID: CVE-2022-29276 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:57:40.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.18 Kernel 5.1: version 05.17.18 Kernel 5.2: version 05.27.18 Kernel 5.3: version 05.36.18 Kernel 5.4: version 05.44.18 Kernel 5.5: version 05.52.18 https://www.insyde.com/security-pledge/SA-2022059 Additional Analyst Notes: - CVE Program Container: - CISA ADP V
.52.18 https://www.insyde.com/security-pledge/SA-2022059 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022059
CVE ID: CVE-2022-29277 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:56:19.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk
/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.
30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022060
CVE ID: CVE-2022-29278 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:54:34.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory. This issue was discovered by Insyde during security review. Fixed in: Kernel 5.1: Version 05.17.23 Kernel 5.2: Version 05.27.23 Kernel 5.3: Version 05.36.23 Kernel 5.4: Version 05.44.23 Kernel 5.5: Version 05.52.23 https://www.insyde.com/security-pledge/SA-2022061 Additional Analyst Notes: - CVE Program Container: - CIS
sion 05.52.23 https://www.insyde.com/security-pledge/SA-2022061 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022061
CVE ID: CVE-2022-29279 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:53:03.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.17 Kernel 5.1: version 05.17.17 Kernel 5.2: version 05.27.17 Kernel 5.3: version 05.36.17 Kernel 5.4: version 05.44.17 Kernel 5.5: version 05.52.17 https://www.insyde.com/security-pledge/SA-2022062 Additional Analyst Not
: version 05.44.17 Kernel 5.5: version 05.52.17 https://www.insyde.com/security-pledge/SA-2022062 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022062
CVE ID: CVE-2022-29280 State: REJECTED Published: 2022-04-21T21:34:35 Last Updated: 2022-04-21T21:34:35 Description: No description available.
CVE ID: CVE-2022-29281 State: PUBLISHED Published: 2022-04-15T20:41:14 Last Updated: 2024-08-03T06:17:54.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program (or theft of NTLM credentials via an SMB relay attack, because the application resolves UNC paths). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/notable/notable-insiders/releases/tag/v1.9.0-beta.8 - https://github.com/hmnthabit/Advisories/blob/master
s://github.com/notable/notable-insiders/releases/tag/v1.9.0-beta.8 - https://github.com/hmnthabit/Advisories/blob/master/CVE-2022-29281.md
CVE ID: CVE-2022-29286 State: PUBLISHED Published: 2022-07-17T21:04:14 Last Updated: 2024-08-03T06:17:54.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-29286
CVE ID: CVE-2022-29287 State: PUBLISHED Published: 2022-04-15T23:52:42 Last Updated: 2024-08-03T06:17:54.687Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current user. The exported XML contains every option of the exported user (even the hashed password). Additional Analyst Notes: - CVE Program Container: References: - https://devnet.kentic
user (even the hashed password). Additional Analyst Notes: - CVE Program Container: References: - https://devnet.kentico.com/download/hotfixes - https://www.offensity.com/en/blog/authenticated-insecure-direct-object-reference-in-kentico-cms-cve-outstanding/
CVE ID: CVE-2022-29296 State: PUBLISHED Published: 2022-06-06T22:55:57 Last Updated: 2024-08-03T06:17:54.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/167341/Avantune-Genialcloud-ProJ-10-Cross-Site-Scripting.html - https://dl.packetstormsecurity.net/2206-exploits/avantunegenialcloudproj10-xss.txt
CVE ID: CVE-2022-29298 State: PUBLISHED Published: 2022-05-12T15:17:13 Last Updated: 2024-08-03T06:17:54.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1-RHw9ekVidP8zc0xpbzBXnse2gSY1xbH/view?usp=sharing - http://packetstormsecurity.com/files/167383/SolarView-Compact-6.00-Directory-Traversal.html
CVE ID: CVE-2022-29299 State: REJECTED Published: 2022-06-22T18:11:21 Last Updated: 2022-06-22T18:11:21 Description: No description available.
CVE ID: CVE-2022-29301 State: REJECTED Published: 2022-06-22T18:11:49 Last Updated: 2022-06-22T18:11:49 Description: No description available.
CVE ID: CVE-2022-29302 State: PUBLISHED Published: 2022-05-12T15:17:14 Last Updated: 2024-08-03T06:17:54.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1Bfyk1Nx51HbFGYuDNFKoDxUrloEj-Rzx/view?usp=sharing
CVE ID: CVE-2022-29303 State: PUBLISHED Published: 2022-05-12T15:17:16.000Z Last Updated: 2025-10-21T23:15:39.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing - http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html
CVE ID: CVE-2022-29304 State: PUBLISHED Published: 2022-05-19T20:40:21 Last Updated: 2024-08-03T06:17:54.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/playZG/Exploit-/blob/main/Online%20Sports%20Complex%20Booking%20System/Online%20Sports%20Complex%20Booking%20System%201.0%20SQL%20Injection%28%E4%B8%89%29.md