Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43228 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:33:45.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /clearance/clearance.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HKD01l/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/SQLi-1.md
CVE ID: CVE-2022-43229 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:32:48.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/update_status.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HKD01l/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md - http://packetstormsecurity.com/files/169605/Simple-Cold-Storage-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2022-43230 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:26:15.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/view_details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HKD01l/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE ID: CVE-2022-43231 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:14:27.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HKD01l/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/RCE-1.md
CVE ID: CVE-2022-43232 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T13:38:46.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchOrderData.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HKD01l/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-2.md
CVE ID: CVE-2022-43233 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T13:36:12.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchSelectedUser.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HKD01l/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md
CVE ID: CVE-2022-43234 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:48:14.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/havok89/Hoosk/issues/64
CVE ID: CVE-2022-43235 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:48:03.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_epel_pixels_8_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/337 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43236 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:46:44.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/343 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43237 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:45:23.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void put_epel_hv_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/344 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43238 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:43:54.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/336 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43239 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T13:58:03.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma<unsigned short> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/341 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43240 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T14:49:46.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_qpel_h_2_v_1_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/335 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43241 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T14:48:23.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/338 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43242 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T13:53:31.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma<unsigned char> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/340 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43243 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T13:51:58.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/339 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43244 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T13:50:32.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/342 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43245 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-05T13:48:53.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal<unsigned short> in sao.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/352 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43248 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:40:42.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_weighted_pred_avg_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/349 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43249 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:37:43.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_hv_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/345 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43250 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:36:50.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_0_0_fallback_16 in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/346 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43252 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:35:46.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/347 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43253 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:33:59.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_unweighted_pred_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/348 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-43254 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:32:44.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2284
CVE ID: CVE-2022-43255 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:31:15.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2285 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-43256 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:47:26.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seacms-com/seacms/issues/23
CVE ID: CVE-2022-43259 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-12T14:48:11.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1VjYjZKv7MJ69hGPG-xD0xublUw-taq4w/view?usp=sharing
CVE ID: CVE-2022-43260 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-12T14:47:39.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1elSFijqHselDzRNuawGfcHD4uL4N8_mM/view?usp=sharing
CVE ID: CVE-2022-43262 State: PUBLISHED Published: 2022-11-16T00:00:00 Last Updated: 2024-08-03T13:26:02.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/null302/bug_report/blob/main/vendors/oretnom23/Human%20Resource%20Management%20System/SQLi-1.md
CVE ID: CVE-2022-43263 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:46:11.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pizzapower.me/2022/10/11/guitar-pro-directory-traversal-and-filename-xss/
CVE ID: CVE-2022-43264 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:41:47.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pizzapower.me/2022/10/11/guitar-pro-directory-traversal-and-filename-xss/
CVE ID: CVE-2022-43265 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:15:16.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html - https://10degres.net/cves/cve-2022-43265/
CVE ID: CVE-2022-43271 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T15:19:43.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerability via the User profile component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://inhabit.com.au/CVE-2022-43271 - https://github.com/SecurityWillCheck/CVE-2022-43271
CVE ID: CVE-2022-43272 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-11-03T20:35:09.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wolai.com/vaVuMxU4gGqFakbzvc9NYw - https://github.com/songxpu/bug_report/tree/master/DCMTK/memory_leak_in_3.6.7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3QG7MSHORLYAHDXMYG6FQKU4GOCRBCR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
SHORLYAHDXMYG6FQKU4GOCRBCR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMQ2USESKF6OAZAH64OFHNK2HJIJVGPP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HROBSUUV2LZCYUNODI2YM7G7AYYO75B/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00022.html
CVE ID: CVE-2022-43275 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T13:34:23.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/01001000entai/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/RCE-1.md
CVE ID: CVE-2022-43276 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T13:32:41.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelectedfood.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/01001000entai/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md
CVE ID: CVE-2022-43277 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:22:27.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HuahuaDaren/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/RCE-1.md
CVE ID: CVE-2022-43278 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:21:49.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HuahuaDaren/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md
CVE ID: CVE-2022-43279 State: PUBLISHED Published: 2022-11-15T00:00:00 Last Updated: 2024-08-03T13:26:02.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://brick-pamphlet-d24.notion.site/LimeSurvey-V5-4-4-background-update-php-SQL-injection-50e8fd6eba4644bb941b2c8d6fb7979a - https://github.com/LimeSurvey/LimeSurvey/commit/42920389f99cdd25449eb7ace57f24417e83b692
CVE ID: CVE-2022-43280 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T13:31:30.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/1982
CVE ID: CVE-2022-43281 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:34:14.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/1981