Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31337 State: PUBLISHED Published: 2022-05-31T14:54:32 Last Updated: 2024-08-03T07:19:05.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-10.md
CVE ID: CVE-2022-31338 State: PUBLISHED Published: 2022-05-31T14:51:14 Last Updated: 2024-08-03T07:19:05.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-9.md
CVE ID: CVE-2022-31339 State: PUBLISHED Published: 2022-06-01T13:22:45 Last Updated: 2024-08-03T07:19:05.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/simple-inventory-system/SQLi-1.md
CVE ID: CVE-2022-31340 State: PUBLISHED Published: 2022-06-01T13:21:21 Last Updated: 2024-08-03T07:19:05.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/argie/simple-inventory-system/SQLi-2.md
CVE ID: CVE-2022-31342 State: PUBLISHED Published: 2022-06-01T13:42:05 Last Updated: 2024-08-03T07:19:05.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/delete-file-1.md
CVE ID: CVE-2022-31343 State: PUBLISHED Published: 2022-06-01T13:40:10 Last Updated: 2024-08-03T07:19:05.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-1.md
CVE ID: CVE-2022-31344 State: PUBLISHED Published: 2022-06-01T13:38:55 Last Updated: 2024-08-03T07:19:05.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-3.md
CVE ID: CVE-2022-31345 State: PUBLISHED Published: 2022-06-01T13:37:30 Last Updated: 2024-08-03T07:19:05.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-2.md
CVE ID: CVE-2022-31346 State: PUBLISHED Published: 2022-06-01T13:36:17 Last Updated: 2024-08-03T07:19:05.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-5.md
CVE ID: CVE-2022-31347 State: PUBLISHED Published: 2022-06-01T13:34:43 Last Updated: 2024-08-03T07:19:05.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-4.md
CVE ID: CVE-2022-31348 State: PUBLISHED Published: 2022-06-01T13:33:33 Last Updated: 2024-08-03T07:19:05.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-6.md
CVE ID: CVE-2022-31350 State: PUBLISHED Published: 2022-06-01T13:31:04 Last Updated: 2024-08-03T07:19:05.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-7.md
CVE ID: CVE-2022-31351 State: PUBLISHED Published: 2022-06-01T13:29:48 Last Updated: 2024-08-03T07:19:05.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-10.md
CVE ID: CVE-2022-31352 State: PUBLISHED Published: 2022-06-01T13:28:24 Last Updated: 2024-08-03T07:19:05.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-9.md
CVE ID: CVE-2022-31353 State: PUBLISHED Published: 2022-06-01T13:27:02 Last Updated: 2024-08-03T07:19:05.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-8.md
CVE ID: CVE-2022-31354 State: PUBLISHED Published: 2022-06-01T13:25:22 Last Updated: 2024-08-03T07:19:05.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-car-wash-booking-system/SQLi-11.md
CVE ID: CVE-2022-31355 State: PUBLISHED Published: 2022-06-17T13:35:47 Last Updated: 2024-08-03T07:19:05.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-2.md
CVE ID: CVE-2022-31356 State: PUBLISHED Published: 2022-06-17T13:29:55 Last Updated: 2024-08-03T07:19:05.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-4.md
CVE ID: CVE-2022-31357 State: PUBLISHED Published: 2022-06-17T13:29:55 Last Updated: 2024-08-03T07:19:06.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-3.md
CVE ID: CVE-2022-31358 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T16:07:44.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://proxmox.com - https://git.proxmox.com/?p=pve-http-server.git%3Ba=commitdiff%3Bh=00661f1223b7c0afffa64e1d91f5e018b985f762 - https://www.proxmox.com/en/ - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-
0afffa64e1d91f5e018b985f762 - https://www.proxmox.com/en/ - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/
CVE ID: CVE-2022-31361 State: PUBLISHED Published: 2022-06-22T17:16:54 Last Updated: 2024-08-03T07:19:05.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://www.swascan.com/security-advisory-docebo-community-edition/ - https://blog.formalms.org/about/blog/20-life-after-docebo-the-forma-project-begins.html
CVE ID: CVE-2022-31362 State: PUBLISHED Published: 2022-06-22T17:16:13 Last Updated: 2024-08-03T07:19:05.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.swascan.com/security-advisory-docebo-community-edition/ - https://blog.formalms.org/about/blog/20-life-after-docebo-the-forma-project-begins.html
CVE ID: CVE-2022-31363 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:32:20.018Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.
gered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.google.com/document/d/1iSZze8Ig6HZVsrldmXw0bibZLGMMTU5w/edit
CVE ID: CVE-2022-31364 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:30:16.728Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN. Additional Analyst Notes: - CVE Program Contai
riggered by sending a series of segmented packets with inconsistent SegN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.google.com/document/d/1tCJg1uBYtfx4SNvewWPNXd7PB6Z__iiG/edit
CVE ID: CVE-2022-31366 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:56:11.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eve-ng.com - https://erpaciocco.github.io/2022/eve-ng-rce/
CVE ID: CVE-2022-31367 State: PUBLISHED Published: 2022-09-27T13:02:41.000Z Last Updated: 2025-05-22T13:50:07.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strapi/strapi/releases/tag/v4.1.10 - https://github.com/strapi/strapi/releases/tag/v3.6.10 - https://github.com/kos0ng/CVEs/tree/main/CVE-2022-31367
CVE ID: CVE-2022-31372 State: PUBLISHED Published: 2022-06-16T13:32:53 Last Updated: 2024-08-03T07:19:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wiris/moodle-filter_wiris/commit/037ce9c1d9b9642689a332b6ebee8eaf0a737576
CVE ID: CVE-2022-31373 State: PUBLISHED Published: 2022-06-21T13:00:38 Last Updated: 2024-08-03T07:19:05.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/badboycxcc/SolarView_Compact_6.0_xss
CVE ID: CVE-2022-31374 State: PUBLISHED Published: 2022-06-21T13:00:38 Last Updated: 2024-08-03T07:19:06.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/badboycxcc/SolarView_Compact_6.0_upload
CVE ID: CVE-2022-31382 State: PUBLISHED Published: 2022-06-16T16:46:06 Last Updated: 2024-08-03T07:19:05.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php. Additional Analyst Notes: - CVE Program Container: References: - http://phpgurukul.com - http://directory.com - https://github.com/laotun-s/POC/blob/main/CVE-2022-31382.txt
CVE ID: CVE-2022-31383 State: PUBLISHED Published: 2022-06-16T16:41:18 Last Updated: 2024-08-03T07:19:05.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php. Additional Analyst Notes: - CVE Program Container: References: - http://phpgurukul.com - http://directory.com - https://github.com/laotun-s/POC/blob/main/CVE-2022-31383.txt
CVE ID: CVE-2022-31384 State: PUBLISHED Published: 2022-06-16T16:37:22 Last Updated: 2024-08-03T07:19:05.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php. Additional Analyst Notes: - CVE Program Container: References: - http://phpgurukul.com - http://directory.com - https://github.com/laotun-s/POC/blob/main/CVE-2022-31384.txt
CVE ID: CVE-2022-31386 State: PUBLISHED Published: 2022-06-09T13:34:50 Last Updated: 2024-08-03T07:19:05.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Fanli2012/nbnbk/issues/5
CVE ID: CVE-2022-31390 State: PUBLISHED Published: 2022-06-09T13:34:51 Last Updated: 2024-08-03T07:19:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cherry-toto/jizhicms/issues/75
CVE ID: CVE-2022-31393 State: PUBLISHED Published: 2022-06-09T13:34:52 Last Updated: 2024-08-03T07:19:05.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cherry-toto/jizhicms/issues/76
CVE ID: CVE-2022-31394 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-17T18:32:29.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hyperium/hyper/issues/2826 - https://github.com/hyperium/hyper/pull/2828 - https://github.com/hyperium/hyper/compare/v0.14.18...v0.14.19
CVE ID: CVE-2022-31395 State: PUBLISHED Published: 2022-06-22T13:34:40 Last Updated: 2024-08-03T07:19:05.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua. Additional Analyst Notes: - CVE Program Container: References: - https://n0ur5sec.medium.com/achievement-unlocked-cve-2022-31395-33299f32cc00
CVE ID: CVE-2022-31398 State: PUBLISHED Published: 2022-06-13T12:54:09 Last Updated: 2024-08-03T07:19:05.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/OungdOub18c
CVE ID: CVE-2022-31400 State: PUBLISHED Published: 2022-06-13T12:54:13 Last Updated: 2024-08-03T07:19:06.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/uqO6hluHDB4
CVE ID: CVE-2022-31402 State: PUBLISHED Published: 2022-06-10T16:47:00 Last Updated: 2024-08-03T07:19:05.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/itop/ - https://www.itophub.io/ - https://github.com/YavuzSahbaz/CVE-2022-31402/blob/main/iTop%203.0.1%20XSS%20Vulnerability
CVE ID: CVE-2022-31403 State: PUBLISHED Published: 2022-06-14T16:17:13 Last Updated: 2024-08-03T07:19:05.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/itop/ - https://www.itophub.io/ - https://github.com/IbrahimEkimIsik/CVE/blob/main/CVE-2022-31403
CVE ID: CVE-2022-31405 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T16:29:43.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ifmacedo/mconnect/blob/main/IDCE-ClearTextStorage - https://www.linkedin.com/pulse/armazenamento-inseguro-idce-mv-iran-macedo - https://mv.com.br/pt/blog/microdata-integra-novo-modulo-cockpit-ao-ris-idce
CVE ID: CVE-2022-31414 State: PUBLISHED Published: 2022-09-07T16:57:57.000Z Last Updated: 2025-06-17T19:34:02.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://tsd.dlink.com.tw/ddgo - https://github.com/Davidteeri/Bug-Report/blob/main/dlink-dir1960-%200x42acdc.md
CVE ID: CVE-2022-31415 State: PUBLISHED Published: 2022-06-14T02:35:10 Last Updated: 2024-08-03T07:19:06.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php. Additional Analyst Notes: - CVE Program Container: References: - https://researchinthebin.org/posts/ofrs-sql-injection/
CVE ID: CVE-2022-31446 State: PUBLISHED Published: 2022-06-14T02:41:45 Last Updated: 2024-08-03T07:19:05.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wshidamowang/Router/blob/main/Tenda/AC18/RCE_1.md
CVE ID: CVE-2022-31447 State: PUBLISHED Published: 2022-06-14T02:46:00 Last Updated: 2024-08-03T07:19:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://magicpin.in/ - https://gist.github.com/Mr-Akuma/4f6261007fcfbd96fa2c2d8ad4a5e1ca
CVE ID: CVE-2022-31454 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-03T07:19:05.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40rohitgautam26/cve-2022-31454-8e8555c31fd3