Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rocess. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-997779.pdf
CVE ID: CVE-2022-47968 State: PUBLISHED Published: 2022-12-27T00:00:00.000Z Last Updated: 2025-04-11T16:49:52.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/linuxserver/Heimdall/issues/1086 - https://samy.link/blog
CVE ID: CVE-2022-47974 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:06:21.511Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: DoS attack vulnerability Description: The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2022-47975 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:03:59.379Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Double free vulnerability Description: The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166 - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
CVE ID: CVE-2022-47976 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:02:09.637Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Control connection replacement vulnerability Description: The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2022-47977 State: PUBLISHED Published: 2023-02-14T10:36:22.513Z Last Updated: 2025-03-20T16:49:09.008Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities Problem Types: CWE-119 Description: A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-po
rrent process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf
CVE ID: CVE-2022-47983 State: PUBLISHED Published: 2023-02-01T17:42:12.571Z Last Updated: 2025-03-26T18:43:01.320Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/243161
CVE ID: CVE-2022-47984 State: PUBLISHED Published: 2023-05-19T15:56:37.237Z Last Updated: 2025-02-12T16:06:11.089Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-89 Description: IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/6988153 - https://exchange.xf
ner: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/6988153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/243163
CVE ID: CVE-2022-47986 State: PUBLISHED Published: 2023-02-17T15:46:04.120Z Last Updated: 2025-10-21T23:15:24.899Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-502 Description: IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512. Additional Analyst Notes: - CVE Program Container: - CISA ADP
was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6952319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/243512 - http://packetstormsecurity.com/files/171772/IBM-Aspera-Faspex-4.4.1-YAML-Deserialization.html
CVE ID: CVE-2022-47990 State: PUBLISHED Published: 2023-01-18T18:19:12.270Z Last Updated: 2025-04-03T13:00:23.435Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-120 Description: IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM X-Force ID: 243556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6855827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/243556
CVE ID: CVE-2022-48006 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T15:38:34.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/taogogo/taocms/issues/35
CVE ID: CVE-2022-48007 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T17:09:26.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Piwigo/Piwigo/issues/1835
CVE ID: CVE-2022-48008 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T17:08:29.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Sakura-501/LimeSurvey-5.4.15-PluginUploadtoRCE
CVE ID: CVE-2022-48010 State: PUBLISHED Published: 2023-01-27T00:00:00 Last Updated: 2024-08-03T15:02:36.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /index.php/surveyAdministration/rendersidemenulink?subaction=surveytexts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Welcome-message text fields. NOTE: the vendor indicates that this is not a vulnerability because the manipulation requires Superadministrator privileges, and Superadministrators are already allowed to customize su
use the manipulation requires Superadministrator privileges, and Superadministrators are already allowed to customize surveys with JavaScript as they wish. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Sakura-501/LimeSurvey-5.4.15-Stored-XSS-in-surveytexts
CVE ID: CVE-2022-48011 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T17:07:55.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0.9.7-sql%20injection%20in%20viewerrors-importID.md - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities
CVE ID: CVE-2022-48012 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T16:23:07.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /opencats/index.php?m=settings&a=ajax_tags_upd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0.9.7-Reflected%20XSS%20in%20onChangeTag.md
CVE ID: CVE-2022-48013 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T16:22:15.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0
a-501/Opencats-0.9.7-Vulnerabilities - https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0.9.7-Stored%20XSS%20in%20Calendar-Add-Event.md
CVE ID: CVE-2022-48019 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T15:20:49.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kkent030315/CVE-2022-42046 - https://store.steampowered.com/app/1252600 - https://www.wfs.games/news/20221220_02.html - https://wp.another-eden.jp/index.php/news/20221220_2/ - https://twitter.com/rpg_AE/status/1605041933801250817
CVE ID: CVE-2022-48020 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-02-05T17:28:41.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim user's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/in/dmitry-kiryukhin-b5741421b/ - https://seq.team/en/ - https://seq.team/en/blog/reflected-cross-site-scripting-xss-in-vinteo-vcc/
CVE ID: CVE-2022-48021 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:32:17.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/de/advisories/zaa-2022-11
CVE ID: CVE-2022-48022 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:32:41.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/de/advisories/zaa-2022-13
CVE ID: CVE-2022-48023 State: PUBLISHED Published: 2023-02-03T00:00:00 Last Updated: 2024-08-03T15:02:36.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/de/advisories/zaa-2022-12
CVE ID: CVE-2022-48063 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T15:30:37.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29924 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd - https://security.netapp.com/advisory/ntap-20231006-0008/
CVE ID: CVE-2022-48064 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T15:25:34.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29922 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931 - https://lists.fedoraproject.org/archives/list/p
eb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z/ - https://security.netapp.com/advisory/ntap-20231006-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
CVE ID: CVE-2022-48065 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:45:03.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29925 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a - https://security.netapp.com/advisory/ntap-20231006-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
dvisory/ntap-20231006-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
CVE ID: CVE-2022-48066 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T16:18:32.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Totolink-A830R-V4-1-2cu-5182-Login-Authentication-Bypass-Vulnerability-e0dfe09f136a4cf59e3754edbd934c15
CVE ID: CVE-2022-48067 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T16:03:54.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Totolink-A830R-V4-1-2cu-5182-Sensitive-Information-Disclosure-567f4a17d5cc401b97e5c3e61aae8ca0
CVE ID: CVE-2022-48069 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T16:03:08.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Totolink-A830R-V4-1-2cu-5182-command-injection-2a88f84e3f3543758277ddf3a76c9d31
CVE ID: CVE-2022-48070 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T16:02:13.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Phicomm-K2-v22-6-534-263-Command-injection-Vulnerability-cb3492d6c33b4382a253db9e92f7efb6
CVE ID: CVE-2022-48071 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T15:58:29.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Phicomm-K2-v22-6-534-263-Sensitive-Information-Disclosure-Vulnerability-530d2415593a400099451d9f0dd7371a
CVE ID: CVE-2022-48072 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T15:57:15.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Phicomm-K2G-v22-6-3-20-Command-injection-Vulnerability-36d54f03e35045bba8ec02bb85379614
CVE ID: CVE-2022-48073 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T15:54:05.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://befitting-vinca-933.notion.site/Phicomm-K2-v22-6-534-263-Sensitive-Information-Disclosure-Vulnerability-530d2415593a400099451d9f0dd7371a - https://befitting-vinca-933.notion.site/Phicomm-K2G-v22-6-3-20-Sensitive-Information-Disclosure-Vulnerability-8649a75a7ea7455583294e7447145cc6
CVE ID: CVE-2022-48074 State: PUBLISHED Published: 2023-02-03T00:00:00 Last Updated: 2024-08-03T15:02:36.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file. Additional Analyst Notes: - CVE Program Container: References: - https://kb.nomachine.com/SU11T00239
CVE ID: CVE-2022-48077 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-24T17:38:15.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/hax3xploit/3210813c7221f3ae505494da57f26cbc - https://github.com/hax3xploit/CVEs/blob/master/GenymotionDesktop.md
CVE ID: CVE-2022-48078 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T19:40:04.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zrax/pycdc/issues/295
CVE ID: CVE-2022-48079 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-27T13:58:00.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://mf.mengnai.top/ - https://thanatosxingyu.github.io/
CVE ID: CVE-2022-48082 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-26T19:43:46.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.asmx/SearchTag. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/purplededa/EasyoneCRM-5.50.02-SQLinjection
CVE ID: CVE-2022-48085 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T19:29:12.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://google.com - https://www.softr.io/ - http://softr.com - https://studio.softr.io/dashboard - https://isaghojaria.medium.com/softr-v2-0-was-discovered-to-contain-a-html-injection-vulnerability-via-the-work-space-name-d0152e1cff51