Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2464 State: PUBLISHED Published: 2022-08-25T17:24:59.000Z Last Updated: 2025-04-16T17:50:01.212Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: ISaGRAF Workbench Problem Types: CWE-22 Description: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for t
create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
CVE ID: CVE-2022-2465 State: PUBLISHED Published: 2022-08-25T17:25:07.000Z Last Updated: 2025-04-16T17:49:53.570Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: ISaGRAF Workbench Problem Types: CWE-502 Description: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction
by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
CVE ID: CVE-2022-2466 State: PUBLISHED Published: 2022-08-31T15:33:01 Last Updated: 2024-08-03T00:39:07.746Z Vendors: n/a Products: quarkus Problem Types: CWE-444 Description: It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/quarkusio/quarkus/issues/26748
CVE ID: CVE-2022-2467 State: PUBLISHED Published: 2022-07-19T09:30:16.000Z Last Updated: 2025-04-14T16:00:22.362Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input 1@a.com' AND (SELECT 6427 FROM (SELECT(SLEEP(5)))LwLu) AND 'hsvT'='hsvT leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used
ads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Garage-Management-System.md - https://vuldb.com/?id.204160
CVE ID: CVE-2022-2468 State: PUBLISHED Published: 2022-07-19T09:30:22.000Z Last Updated: 2025-04-15T14:04:32.532Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /editbrand.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
d to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Garage-Management-System.md - https://vuldb.com/?id.204161
CVE ID: CVE-2022-2469 State: PUBLISHED Published: 2022-07-19T15:53:56 Last Updated: 2024-08-03T00:39:07.671Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: GNU Products: GNU SASL Problem Types: Out-of-bounds read in GNU SASL Description: GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gsasl/gsasl/-/commit/796e4197f696261c1f872d7576371232330bcc30 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2469.json - https://www.debian.org/security/2022/dsa-5189
CVE ID: CVE-2022-2470 State: PUBLISHED Published: 2022-07-22T14:24:36 Last Updated: 2024-08-03T00:39:07.974Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3f1f679c-c243-431c-8ed0-e61543b9921b - https://github.com/microweber/microweber/commit/d28655183800b833abb20ccd55e1628f16ff65e4
CVE ID: CVE-2022-2471 State: PUBLISHED Published: 2022-09-15T13:15:15.916218Z Last Updated: 2024-09-16T16:57:55.973Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: EZVIZ Products: CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL Problem Types: CWE-121 Description: Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior
device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
CVE ID: CVE-2022-2472 State: PUBLISHED Published: 2022-09-15T13:20:11.708721Z Last Updated: 2024-09-17T03:03:45.761Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: EZVIZ Products: CS-C6N-A0-1C2WFR Problem Types: CWE-665 Description: Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
CVE ID: CVE-2022-2473 State: PUBLISHED Published: 2022-09-06T17:18:58.000Z Last Updated: 2025-05-05T16:18:28.079Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gamerz Products: WP-UserOnline Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP-UserOnline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘templates[browsingpage][text]' parameter in versions up to, and including, 2.87.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative capabilities and above to inject arbitrary web
. This makes it possible for authenticated attackers with administrative capabilities and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The only affects multi-site installations and installations where unfiltered_html is disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6a44a55e-a96a-4698-9948-6ef33138a834?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2758412%40wp-useronline&new=2758412%40wp-useronline&sfp_email=&sfph_mail= - https://youtu.be/Q3zInrUnAV0 - https://www.wordfence
40wp-useronline&new=2758412%40wp-useronline&sfp_email=&sfph_mail= - https://youtu.be/Q3zInrUnAV0 - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2473 - https://www.exploit-db.com/exploits/50988 - https://packetstormsecurity.com/files/167864/wpuseronline2876-xss.txt - https://www.exploitalert.com/view-details.html?id=38893 - https://www.exploitalert.com/view-details.html?id=38912
CVE ID: CVE-2022-2474 State: PUBLISHED Published: 2022-10-28T17:11:30.593Z Last Updated: 2025-04-16T16:07:37.506Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Haas Products: Haas CNC Controller Problem Types: CWE-306 Description: Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected remotely) to access the service and write unauthorized macros to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/ic
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-01
CVE ID: CVE-2022-2475 State: PUBLISHED Published: 2022-10-28T17:11:55.096Z Last Updated: 2025-04-16T16:07:29.326Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Haas Products: Haas CNC Controller Problem Types: CWE-1220 Description: Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write macros into registers outside of the authorized accessible range. This could allow a user to access privileged resources or resources out of context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-01
CVE ID: CVE-2022-2476 State: PUBLISHED Published: 2022-07-19T00:00:00 Last Updated: 2024-08-03T00:39:07.680Z Vendors: n/a Products: Wavpack Problem Types: CWE-476 Description: A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-g
the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/121 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CK45CC7MQ54SHEIJ63PW3HP4BCPTX6QP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMIXZWB3OURGBAEU3T5HQY56BN2ZVL
/lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMIXZWB3OURGBAEU3T5HQY56BN2ZVLYF/
CVE ID: CVE-2022-2477 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:39:08.001Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1336266 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
s://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-2478 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:39:07.878Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1335861 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/
nce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-2479 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:39:07.670Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1329987 - https://security.gentoo.org/glsa/
og.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1329987 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-2480 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:39:07.766Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1339844 - http://packetstormsecurity.com/files/168115/Chrome-content-ServiceWorkerVersion-MaybeTimeoutRequest-Heap-Use-After-Free.html - https://security.gentoo.org/glsa/2022
Chrome-content-ServiceWorkerVersion-MaybeTimeoutRequest-Heap-Use-After-Free.html - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-2481 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:39:07.699Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via UI interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1341603 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedor
ttps://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-2482 State: PUBLISHED Published: 2023-01-06T21:03:42.655Z Last Updated: 2025-01-16T22:03:09.854Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Nokia Products: ASIK AirScale Problem Types: CWE-1274 Description: A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible from Linux. A script placed in the appropriate place could allow for arbitrary code execution in the bootloader. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02
CVE ID: CVE-2022-2483 State: PUBLISHED Published: 2023-01-06T21:04:52.603Z Last Updated: 2025-01-16T22:03:03.157Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Nokia Products: ASIK AirScale Problem Types: CWE-1282 Description: The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02
CVE ID: CVE-2022-2484 State: PUBLISHED Published: 2023-01-06T21:05:38.228Z Last Updated: 2025-01-16T22:02:55.884Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Nokia Products: ASIK AirScale Problem Types: CWE-1274 Description: The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02
CVE ID: CVE-2022-2485 State: PUBLISHED Published: 2022-08-31T15:59:34.000Z Last Updated: 2025-04-16T17:49:04.112Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: AutomationDirect Products: SIO-MB04RTDS, SIO- MB04ADS, SIO-MB04THMS, SIO-MB08ADS-1, SIO-MB08ADS-2, SIO-MB08THMS, SIO-MB04DAS, SIO-MB12CDR, SIO-MB16CDD2, SIO-MB16ND3, SIO-MB04ADS Problem Types: CWE-319 Description: Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/us
ckets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05 - https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf
CVE ID: CVE-2022-2486 State: PUBLISHED Published: 2022-07-20T11:35:21.000Z Last Updated: 2025-04-15T14:04:25.065Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WAVLINK Products: WN535K2, WN535K3 Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1angx/webray.com.cn/blob/main/Wav
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20mesh.cgi.md - https://vuldb.com/?id.204537
CVE ID: CVE-2022-2487 State: PUBLISHED Published: 2022-07-20T11:35:27.000Z Last Updated: 2025-04-15T14:04:15.957Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WAVLINK Products: WN535K2, WN535K3 Problem Types: CWE-78 Description: A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1angx/webray.com.cn/blob/ma
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20nightled.cgi%20.md - https://vuldb.com/?id.204538
CVE ID: CVE-2022-2488 State: PUBLISHED Published: 2022-07-20T11:35:34.000Z Last Updated: 2025-04-15T14:04:06.986Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WAVLINK Products: WN535K2, WN535K3 Problem Types: CWE-78 Description: A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1angx/webray.com.cn/blob/main/W
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20touchlist_sync.cgi.md - https://vuldb.com/?id.204539
CVE ID: CVE-2022-2489 State: PUBLISHED Published: 2022-07-20T11:35:38.000Z Last Updated: 2025-04-15T14:03:56.190Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple E-Learning System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||(SELECT 0x6770715a WHERE 8795=8795 AND (SELECT 8342 FROM(SELECT COUNT(*),CONCAT(0x7171786b71,(SELECT (ELT(8342=8342,1))),0x717a7a7671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGI
T COUNT(*),CONCAT(0x7171786b71,(SELECT (ELT(8342=8342,1))),0x717a7a7671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||' leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Simple-E-Learning-System.md - https://vuldb.com/?id.204551