Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4495 State: PUBLISHED Published: 2022-12-14T00:00:00 Last Updated: 2024-08-03T01:41:45.280Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: collective.dms.basecontent Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.7 is able to address this issue. The name of the patch is 6c4d616fcc771822a14ebae5e23f3f6d96d134bd. It is recomm
rsion 1.7 is able to address this issue. The name of the patch is 6c4d616fcc771822a14ebae5e23f3f6d96d134bd. It is recommended to upgrade the affected component. The identifier VDB-215813 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.215813 - https://github.com/collective/collective.dms.basecontent/commit/6c4d616fcc771822a14ebae5e23f3f6d96d134bd - https://github.com/collective/collective.dms.basecontent/releases/tag/1.7
CVE ID: CVE-2022-4496 State: PUBLISHED Published: 2023-01-30T20:31:36.908Z Last Updated: 2025-03-28T14:03:32.744Z Vendors: miniOrange Products: miniOrange WordPress SAML SSO Standard, miniOrange WordPress SAML SSO Premium, miniOrange WordPress SAML SSO Premium MulsiteSite Problem Types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Description: The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not validate that the redirect parameter to its SSO login endpoint points to an internal site URL, making it vulnerable to an
alidate that the redirect parameter to its SSO login endpoint points to an internal site URL, making it vulnerable to an Open Redirect issue when the user is already logged in. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/af2e30c7-0787-4fe2-97ee-bc616f7178a1 - https://wpscan.com/vulnerability/be21f355-0e5b-4ad7-9d8f-85e9a0101ddc - https://wpscan.com/vulnerability/e6c4c8c7-1dcd-45bf-8582-f12accca6fac
CVE ID: CVE-2022-4497 State: PUBLISHED Published: 2023-01-09T22:13:36.385Z Last Updated: 2025-04-09T19:20:34.757Z Vendors: Unknown Products: Jetpack CRM Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3fa6c8b3-6b81-4fe3-b997-25c9e5fdec86
CVE ID: CVE-2022-4498 State: PUBLISHED Published: 2023-01-11T20:38:37.312Z Last Updated: 2025-11-04T19:14:14.345Z Vendors: TP-Link Products: WR710N, Archer C5 Problem Types: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Description: In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.cert.org/vuls/id/572615
CVE ID: CVE-2022-4499 State: PUBLISHED Published: 2023-01-11T18:48:41.778Z Last Updated: 2025-11-04T19:14:15.425Z Vendors: TP-Link Products: WR710N, Archer C5 Problem Types: CWE-676 Description: TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.cert.org/vuls/id/572615
CVE ID: CVE-2022-4501 State: PUBLISHED Published: 2022-12-14T20:38:45.281Z Last Updated: 2025-01-23T20:30:59.860Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: nasir179125 Products: Mega Addons For WPBakery Page Builder Problem Types: CWE-862 Missing Authorization Description: The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versions up to, and including, 4.2.7. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin's settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
nd above, to update the plugin's settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a1eda885-7e10-4294-9748-5359efd51754 - https://plugins.trac.wordpress.org/browser/mega-addons-for-visual-composer/tags/4.2.7/main.php#L87
CVE ID: CVE-2022-4502 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-14T18:00:52.785Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879 - https://huntr.dev/bounties/5bdef791-6886-4008-b9ba-045cb4524114
CVE ID: CVE-2022-4503 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-14T18:01:06.430Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879 - https://huntr.dev/bounties/4cba644c-a2f5-4ed7-af5d-f2cab1895e13
CVE ID: CVE-2022-4504 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-14T18:01:20.536Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: openemr Products: openemr/openemr Problem Types: CWE-20 Description: Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f50538cb-99d3-411d-bd1a-5f36d1fa9f5d - https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879
CVE ID: CVE-2022-4505 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-14T18:01:36.920Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: openemr Products: openemr/openemr Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e36ca754-bb9f-4686-ad72-7fb849e97d92 - https://github.com/openemr/openemr/commit/235b1910ffe5296187667277d4e197a0c3a9ac33
CVE ID: CVE-2022-4506 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-14T18:01:51.787Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f423d193-4ab0-4f03-ad90-25e4f02e7942 - https://github.com/openemr/openemr/commit/2e7678d812df167ea3c0756382408b670e8aa51f - https://www.cve.org/CVERecord?id=CVE-2022-4506
CVE ID: CVE-2022-4507 State: PUBLISHED Published: 2023-01-16T15:37:55.105Z Last Updated: 2025-04-04T18:12:06.867Z Vendors: Unknown Products: Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Real Cookie Banner WordPress plugin before 3.4.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/93c61a70-5624-4c4d-ac3a-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/93c61a70-5624-4c4d-ac3a-c598aec4f8b6
CVE ID: CVE-2022-4508 State: PUBLISHED Published: 2023-01-16T15:38:00.451Z Last Updated: 2025-04-04T17:57:19.117Z Vendors: Unknown Products: ConvertKit Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high-privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5101a979-7a53-40bf-8988-6347ef851eab
CVE ID: CVE-2022-4509 State: PUBLISHED Published: 2023-01-23T14:31:46.069Z Last Updated: 2025-04-02T15:12:13.699Z Vendors: Unknown Products: Content Control Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/90baba2e-a64f-4725-b76c-3aed94
rogram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/90baba2e-a64f-4725-b76c-3aed94b18910
CVE ID: CVE-2022-4510 State: PUBLISHED Published: 2023-01-25T12:25:14.811Z Last Updated: 2025-03-27T19:55:06.184Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Refirm Labs Products: binwalk Problem Types: CWE-22 Description: A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder
e achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through 2.3.3 included. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ReFirmLabs/binwalk/pull/617 - https://security.gentoo.org/glsa/202309-07
CVE ID: CVE-2022-4511 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-14T15:55:06.447Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: RainyGao Products: DocSys Problem Types: CWE-22 Description: A vulnerability has been found in RainyGao DocSys and classified as critical. Affected by this vulnerability is an unknown functionality of the component com.DocSystem.controller.UserController#getUserImg. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of
closed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215851. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/RainyGao/DocSys/issues/I66A3V - https://vuldb.com/?id.215851
CVE ID: CVE-2022-4512 State: PUBLISHED Published: 2023-02-13T14:32:16.762Z Last Updated: 2025-03-21T19:31:04.066Z Vendors: Unknown Products: Better Font Awesome Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7957f355-c767-4f59-bb28-0302d33386a6
CVE ID: CVE-2022-4513 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-15T13:04:15.652Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: European Environment Agency Products: eionet.contreg Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This issue affects some unknown processing. The manipulation of the argument searchTag/resourceUri leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2022-06-27T0948 is able to address this issue. The name of the patch is a120c2153e263e62c4db34a06ab96a9f1c6bccb6.
ersion 2022-06-27T0948 is able to address this issue. The name of the patch is a120c2153e263e62c4db34a06ab96a9f1c6bccb6. It is recommended to upgrade the affected component. The identifier VDB-215885 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eea/eionet.contreg/commit/a120c2153e263e62c4db34a06ab96a9f1c6bccb6 - https://github.com/eea/eionet.contreg/releases/tag/2022-06-27T0948 - https://vuldb.com/?id.215885
CVE ID: CVE-2022-4514 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-15T13:04:08.099Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Opencaching Deutschland Products: oc-server3 Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php. The manipulation of the argument varvalue leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 4bdd6a0e7b7760cea03b91812cbb80d7b1
he exploit has been disclosed to the public and may be used. The name of the patch is 4bdd6a0e7b7760cea03b91812cbb80d7b16e3b5f. It is recommended to apply a patch to fix this issue. VDB-215886 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpencachingDeutschland/oc-server3/pull/902 - https://github.com/OpencachingDeutschland/oc-server3/commit/4bdd6a0e7b7760cea03b91812cbb80d7b16e3b5f - https://vuldb.com/?id.215886
CVE ID: CVE-2022-4515 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-14T18:14:57.235Z Vendors: n/a Products: Exuberant Ctags Problem Types: CWE-78 Description: A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/ctags/code/HEAD/tree/tags/ctags-5.8/sort.c#l56 - https://lists.debian.or
chment: References: - https://sourceforge.net/p/ctags/code/HEAD/tree/tags/ctags-5.8/sort.c#l56 - https://lists.debian.org/debian-lts-announce/2022/12/msg00040.html
CVE ID: CVE-2022-4516 State: REJECTED Published: N/A Last Updated: 2022-12-22T00:00:00 Description: No description available.
CVE ID: CVE-2022-4519 State: PUBLISHED Published: 2022-12-15T19:19:18.205Z Last Updated: 2025-01-23T20:26:31.537Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: walkeprashant Products: WP User – Custom Registration Forms, Login and User Profile Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and abo
on and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8ee21796-5340-4f84-b1c4-a95137a27223 - https://wordpress.org/plugins/wp-user/#description
CVE ID: CVE-2022-4520 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-15T13:03:58.576Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: WSO2 Products: carbon-registry Problem Types: CWE-707 Description: A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue is some unknown functionality of the file components/registry/org.wso2.carbon.registry.search.ui/src/main/resources/web/search/advancedSearchForm-ajaxprocessor.jsp of the component Advanced Search. The manipulation of the argument mediaType/rightOp/leftOp/rightPropertyValue/leftPropertyValue leads to cross site script
he manipulation of the argument mediaType/rightOp/leftOp/rightPropertyValue/leftPropertyValue leads to cross site scripting. The attack may be launched remotely. Upgrading to version 4.8.12 is able to address this issue. The name of the patch is 0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215900. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wso2/carbon-registry/pull/404 - https://github.com/wso2/carbon-registry/releases/tag/v4.8.12 - https://github.com/wso2/carbon-registry/commit/0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4 - https://vuldb
es/tag/v4.8.12 - https://github.com/wso2/carbon-registry/commit/0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4 - https://vuldb.com/?id.215900
CVE ID: CVE-2022-4521 State: PUBLISHED Published: 2022-12-15T00:00:00 Last Updated: 2024-08-03T01:41:45.620Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: WSO2 Products: carbon-registry Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in WSO2 carbon-registry up to 4.8.6. This affects an unknown part of the component Request Parameter Handler. The manipulation of the argument parentPath/path/username/path/profile_menu leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.8.7 is able to address this issue. The name of the patch is 9f967abfde9317bee2cda469dbc09b57d539f2cc.
ading to version 4.8.7 is able to address this issue. The name of the patch is 9f967abfde9317bee2cda469dbc09b57d539f2cc. It is recommended to upgrade the affected component. The identifier VDB-215901 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.215901 - https://github.com/wso2/carbon-registry/pull/399 - https://github.com/wso2/carbon-registry/commit/9f967abfde9317bee2cda469dbc09b57d539f2cc - https://github.com/wso2/carbon-registry/releases/tag/v4.8.7
CVE ID: CVE-2022-4522 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-15T13:03:44.972Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: CalendarXP Problem Types: CWE-707 Description: A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is e3715b2228ddefe00113296069969f9e184836da. It is recommended to upgrade the affected component. VDB-215902 is the identifier assigned to this vulner
69f9e184836da. It is recommended to upgrade the affected component. VDB-215902 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/victorwon/calendarxp/commit/e3715b2228ddefe00113296069969f9e184836da - https://github.com/victorwon/calendarxp/releases/tag/10.0.2 - https://vuldb.com/?id.215902
CVE ID: CVE-2022-4523 State: PUBLISHED Published: 2022-12-15T00:00:00 Last Updated: 2024-08-03T01:41:45.561Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: vexim2 Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in vexim2. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 21c0a60d12e9d587f905cd084b2c70f9b1592065. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215903. Additional Analyst Notes: - CVE Program Container: Re
ue. The associated identifier of this vulnerability is VDB-215903. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vexim/vexim2/pull/274 - https://github.com/vexim/vexim2/commit/21c0a60d12e9d587f905cd084b2c70f9b1592065 - https://vuldb.com/?id.215903
CVE ID: CVE-2022-4524 State: PUBLISHED Published: 2022-12-15T00:00:00 Last Updated: 2024-08-03T01:41:45.501Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Roots Products: soil Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Roots soil Plugin up to 4.0.x. Affected is the function language_attributes of the file src/Modules/CleanUpModule.php. The manipulation of the argument language leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 4.1.0 is able to address this issue. The name of the patch is 0c9151e00ab047da253e5cdbfccb204dd423269d. It is recommended t
.0 is able to address this issue. The name of the patch is 0c9151e00ab047da253e5cdbfccb204dd423269d. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215904. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.215904 - https://github.com/roots/soil/pull/285 - https://github.com/roots/soil/commit/0c9151e00ab047da253e5cdbfccb204dd423269d - https://github.com/roots/soil/releases/tag/4.1.0