Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0909 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-02T23:47:42.113Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Divide by zero in libtiff Description: Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/libtiff/libtiff/-/issues/393 - https://gitlab.com/libtiff/libtiff/-/merge_requests/310 - https://gitlab.com/gitlab-org/cves/-/blob/maste
-/issues/393 - https://gitlab.com/libtiff/libtiff/-/merge_requests/310 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0909.json - https://www.debian.org/security/2022/dsa-5108 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/ - https://security.netapp.com/advisory/ntap-20220506-0002/ - https://security.gentoo.org/glsa/202210-10
CVE ID: CVE-2022-0910 State: PUBLISHED Published: 2022-05-24T02:20:13 Last Updated: 2024-08-02T23:47:42.905Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Zyxel Products: USG/ZyWALL series firmware, USG FLEX series firmware, ATP series firmware, VPN series firmware Problem Types: CWE-287 Description: A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware versions 4.32 through 5.21, that could allow an authenticated attack
versions 4.32 through 5.21, and VPN series firmware versions 4.32 through 5.21, that could allow an authenticated attacker to bypass the second authentication phase to connect the IPsec VPN server even though the two-factor authentication (2FA) was enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml
CVE ID: CVE-2022-0911 State: PUBLISHED Published: 2022-03-16T09:05:10 Last Updated: 2024-08-02T23:47:42.839Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9 - https://huntr.dev/bounties/b242edb1-b036-4dca-9b53-891494dd7a77
CVE ID: CVE-2022-0912 State: PUBLISHED Published: 2022-03-11T09:11:05 Last Updated: 2024-08-02T23:47:42.838Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ae5bb359-7e53-498b-848e-540c05b44c54 - https://github.com/microweber/microweber/commit/24245297231f5dc88bb3a2b20d0e4e25b0ebc789
CVE ID: CVE-2022-0913 State: PUBLISHED Published: 2022-03-11T09:10:58 Last Updated: 2024-08-02T23:47:42.130Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-190 Description: Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f5f3e468-663b-4df0-8340-a2d77e4cc75f - https://github.com/microweber/microweber/commit/7559e141d0707f8eeff2f9aeaa5a0ca2e3fe6583
CVE ID: CVE-2022-0914 State: PUBLISHED Published: 2022-04-11T14:40:55 Last Updated: 2024-08-02T23:47:43.207Z Vendors: Unknown Products: Export All URLs Problem Types: CWE-352 Description: The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbitrary CSV file, which the attacker can then download and retrieve the list of titles for example Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c328be28-75dd-43db-a5b9-c1ba0636c930
CVE ID: CVE-2022-0915 State: PUBLISHED Published: 2022-04-12T18:35:09.413733Z Last Updated: 2024-09-16T18:35:00.585Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Logitech Products: Sync Problem Types: CWE-367 Description: There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user. Additional Analyst Notes: - CVE Program Container: References: - https://prosupport.logi.com/hc/en-us/articles/360040085114-Download-Logitech-Sync
CVE ID: CVE-2022-0916 State: PUBLISHED Published: 2022-05-03T13:40:09.127198Z Last Updated: 2024-09-17T02:26:48.928Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Logitech Products: Options Problem Types: CWE-287 Description: An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations. Additional Analyst Notes: - CVE Program Container: References: - https://support.logi.com/hc/en-us/articles/360025297893
CVE ID: CVE-2022-0918 State: PUBLISHED Published: 2022-03-16T14:04:23.000Z Last Updated: 2025-11-03T20:34:32.997Z Vendors: n/a Products: 389-ds-base Problem Types: Uncontrolled Resource Consumption Description: A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2055815 - ht
dditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2055815 - https://access.redhat.com/security/cve/CVE-2022-0918 - https://github.com/389ds/389-ds-base/issues/5242 - https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
CVE ID: CVE-2022-0919 State: PUBLISHED Published: 2022-04-11T14:40:56 Last Updated: 2024-08-02T23:47:42.636Z Vendors: Unknown Products: Salon booking system, Salon Booking System Pro Problem Types: CWE-862 Description: The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, allowing any unauthenticated users to search other's booking, as well as retrieve sensitive information about the bookings, such as the full name, email and phone number of the person who booked it. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e8f32e0b-4a89-460b-bb78-7c83ef5e16b4
CVE ID: CVE-2022-0920 State: PUBLISHED Published: 2022-04-11T14:40:58 Last Updated: 2024-08-02T23:47:42.834Z Vendors: Unknown Products: Salon booking system, Salon Booking System Pro Problem Types: CWE-863 Description: The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5a5ab7a8-be67-4f70-925c-9cb1eff2fbe0
CVE ID: CVE-2022-0921 State: PUBLISHED Published: 2022-03-11T17:25:09 Last Updated: 2024-08-02T23:47:43.255Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-94 Description: Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e368be37-1cb4-4292-8d48-07132725f622 - https://github.com/microweber/microweber/commit/867bdda1b4660b0795ad7f87ab5abe9e44b2b318
CVE ID: CVE-2022-0922 State: PUBLISHED Published: 2022-04-01T22:17:23.641Z Last Updated: 2025-04-16T16:32:35.851Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Philips Products: e-Alert Problem Types: CWE-306 Description: The software does not perform any authentication for critical system functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-22-088-01
CVE ID: CVE-2022-0923 State: PUBLISHED Published: 2022-03-29T16:37:05.764Z Last Updated: 2025-04-16T16:36:54.593Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-0924 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-02T23:47:42.854Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/libtiff/libtiff/-/issues/278 - https://gitlab.com/libtiff/libtiff/-/merge_requests/311 - https://gitlab.com/gitlab-org/cves/-/blob
btiff/-/issues/278 - https://gitlab.com/libtiff/libtiff/-/merge_requests/311 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0924.json - https://www.debian.org/security/2022/dsa-5108 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/ - https://security.netapp.com/advisory/ntap-20220506-0002/ - https://security.gentoo.org/glsa/202210-10
CVE ID: CVE-2022-0925 State: REJECTED Published: N/A Last Updated: 2022-12-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-0926 State: PUBLISHED Published: 2022-03-12T10:05:10 Last Updated: 2024-08-02T23:47:42.691Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/dc5d1555-0108-4627-b542-93352f35fa17 - https://github.com/microweber/microweber/commit/89200cfcc2cfefe5554721e7fa3cf52f6a2a9120
CVE ID: CVE-2022-0928 State: PUBLISHED Published: 2022-03-11T10:25:10 Last Updated: 2024-08-02T23:47:42.844Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcd - https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924a
CVE ID: CVE-2022-0929 State: PUBLISHED Published: 2022-03-12T10:40:09 Last Updated: 2024-08-02T23:47:42.868Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/66abf7ec-2dd7-4cb7-87f5-e91375883f03 - https://github.com/microweber/microweber/commit/de6d17b52d261902653fbdd2ecefcaac82e54256
CVE ID: CVE-2022-0930 State: PUBLISHED Published: 2022-03-12T13:20:09 Last Updated: 2024-08-02T23:47:42.841Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-434 Description: File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d184ce19-9608-42f1-bc3d-06ece2d9a993 - https://github.com/microweber/microweber/commit/33eb4cc0f80c1f86388c1862a8aee1061fa5d72e
CVE ID: CVE-2022-0931 State: REJECTED Published: N/A Last Updated: 2024-02-08T22:26:06.999Z Description: No description available.
CVE ID: CVE-2022-0932 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-02T23:47:42.813Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: saleor Products: saleor/saleor Problem Types: CWE-862 Description: Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/88ae4cbc-c697-401b-8b04-7dc4e03ad8eb - https://github.com/saleor/saleor/commit/521dfd6394f3926a77c60d8633c058e16d0f916d
CVE ID: CVE-2022-0934 State: PUBLISHED Published: 2022-08-29T14:03:02.000Z Last Updated: 2025-11-03T21:45:45.666Z Vendors: n/a Products: dnsmasq Problem Types: CWE-416 Description: A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2057075 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html - https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611
022q1/016272.html - https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39 - https://access.redhat.com/security/cve/CVE-2022-0934
CVE ID: CVE-2022-0935 State: PUBLISHED Published: 2022-04-07T18:21:42 Last Updated: 2024-08-02T23:47:42.640Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-840 Description: Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a7e40fdf-a333-4a50-8a53-d11b16ce3ec2 - https://github.com/livehelperchat/livehelperchat/commit/ce96791cb4c7420266b668fc234c211914259ba7
CVE ID: CVE-2022-0936 State: PUBLISHED Published: 2022-04-11T06:15:15 Last Updated: 2024-08-02T23:47:42.670Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: autolab Products: autolab/autolab Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/90701766-bfed-409e-b3dd-6ff884373968 - https://github.com/autolab/autolab/commit/02d76ab3737689bba95ffe9a1c69ca5166d71c6b
CVE ID: CVE-2022-0937 State: PUBLISHED Published: 2022-03-14T02:35:09 Last Updated: 2024-08-02T23:47:42.765Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6127739d-f4f2-44cd-ae3d-e3ccb7f0d7b5 - https://github.com/star7th/showdoc/commit/42c0d9813df3035728b36116a6ce9116e6fa8ed3
CVE ID: CVE-2022-0938 State: PUBLISHED Published: 2022-03-14T08:05:10 Last Updated: 2024-08-02T23:47:42.910Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e - https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55
CVE ID: CVE-2022-0939 State: PUBLISHED Published: 2022-04-04T09:40:10 Last Updated: 2024-08-02T23:47:43.285Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H) Vendors: janeczku Products: janeczku/calibre-web Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/768fd7e2-a767-4d8d-a517-e9dda849c6e4 - https://github.com/janeczku/calibre-web/commit/4545f4a20d9ff90b99bbd4e3e34b6de4441d6367
CVE ID: CVE-2022-0940 State: PUBLISHED Published: 2022-03-14T10:45:12 Last Updated: 2024-08-02T23:47:43.247Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782 - https://github.com/star7th/showdoc/commit/78522520892d4e29cc94148c6ec84a204a607b73
CVE ID: CVE-2022-0941 State: PUBLISHED Published: 2022-03-14T12:25:09 Last Updated: 2024-08-02T23:47:43.231Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/040a910e-e689-4fcb-9e4f-95206515d1bc - https://github.com/star7th/showdoc/commit/4b6e6603c714aab1de346c5f5cb0bbb4c871be1f
CVE ID: CVE-2022-0942 State: PUBLISHED Published: 2022-03-15T13:40:10 Last Updated: 2024-08-02T23:47:43.008Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8 - https://huntr.dev/bounties/a412707c-18da-4c84-adc0-9801ed8068c9
CVE ID: CVE-2022-0943 State: PUBLISHED Published: 2022-03-14T00:00:00 Last Updated: 2024-08-02T23:47:42.937Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/9e4de32f-ad5f-4830-b3ae-9467b5ab90a1 - https://github.com/vim/vim/commit/5c68617d395f9d7b824f68475b24ce3e38d653a3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2/ - https://lists.fedorapro
ives/list/package-announce%40lists.fedoraproject.org/message/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2022-0944 State: PUBLISHED Published: 2022-03-15T01:00:15 Last Updated: 2024-08-02T23:47:42.820Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: sqlpad Products: sqlpad/sqlpad Problem Types: CWE-1336 Description: Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/46630727-d923-4444-a421-537ecd63e7fb - https://github.com/sqlpad/sqlpad/commit/3f92be386c6cd3e5eba75d85f0700d3ef54daf73
CVE ID: CVE-2022-0945 State: PUBLISHED Published: 2022-03-15T03:50:35 Last Updated: 2024-08-02T23:47:42.758Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-434 Description: Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8702e2bf-4af2-4391-b651-c8c89e7d089e - https://github.com/star7th/showdoc/commit/ba45d19e1d77a7eea866dab30eff5da552694891
CVE ID: CVE-2022-0946 State: PUBLISHED Published: 2022-03-14T13:20:08 Last Updated: 2024-08-02T23:47:42.965Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1f8f0021-396e-428e-9748-dd4e359715e1 - https://github.com/star7th/showdoc/commit/e5d575928b1371a7e07b09b6592822298335062a
CVE ID: CVE-2022-0947 State: PUBLISHED Published: 2022-05-10T18:58:01.818544Z Last Updated: 2024-09-17T01:01:17.567Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: ABB Products: ABB ARG600 Wireless Gateway series Problem Types: CWE-665 Description: A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001253&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-0948 State: PUBLISHED Published: 2022-05-09T16:50:41 Last Updated: 2024-08-02T23:47:42.866Z Vendors: Unknown Products: Order Listener for WooCommerce – Play Sounds Instantly on New Orders Problem Types: CWE-89 Description: The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/daad48df-6a25-493f-9d1d-17b897462576 - https://plugins.trac.wordpress.org/changeset/2707223