Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28462 State: PUBLISHED Published: 2022-05-05T12:23:56 Last Updated: 2024-08-03T05:56:15.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/201206030/novel-plus/issues/85
CVE ID: CVE-2022-28463 State: PUBLISHED Published: 2022-05-08T00:00:00 Last Updated: 2024-08-03T05:56:15.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/4988 - https://github.com/ImageMagick/ImageMagick/commit/ca3654ebf7a439dc736f56f083c9aa98e4464b7f - https://github.com/ImageMagick/ImageMagick6/commit/e6ea5876e0228165ee3abc6e959aa174cee06680 - https://lists.debian.org/debian-lts-announce/2022/05/msg00018.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2022-28464 State: PUBLISHED Published: 2022-04-27T13:16:39 Last Updated: 2024-08-03T05:56:15.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/b3115557-2dce-4897-b297-454c6df89d18#%20%E3%80%8AThe%20Vulnerability%20of%20Apifox%E3%80%8B
CVE ID: CVE-2022-28467 State: PUBLISHED Published: 2022-04-05T19:03:04 Last Updated: 2024-08-03T05:56:15.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Walterjnr1/Online-Student-Admission
CVE ID: CVE-2022-28468 State: PUBLISHED Published: 2022-04-05T19:03:05 Last Updated: 2024-08-03T05:56:15.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Payroll-Management-System
CVE ID: CVE-2022-28470 State: PUBLISHED Published: 2022-05-08T19:55:31 Last Updated: 2024-08-03T05:56:15.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/marcador/ - http://pypi.doubanio.com/simple/request - https://github.com/joajfreitas/marcador/issues/5
CVE ID: CVE-2022-28471 State: PUBLISHED Published: 2022-05-05T12:37:18 Last Updated: 2024-08-03T05:56:15.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/49
CVE ID: CVE-2022-28477 State: PUBLISHED Published: 2022-04-28T19:41:21 Last Updated: 2024-08-03T05:56:15.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/APTX-4879/CVE - https://github.com/APTX-4879/CVE/blob/main/CVE-2022-28477..pdf
CVE ID: CVE-2022-28478 State: PUBLISHED Published: 2022-06-06T22:17:28 Last Updated: 2024-08-03T05:56:15.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files management" menu does not sanitize user input allowing attackers with admin privileges to delete arbitrary files on the remote system. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/seeddms/code/ci/d68c922152e8a8060dd7fc3ebdd7af685e270e36/ - https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-2022-28478
CVE ID: CVE-2022-28479 State: PUBLISHED Published: 2022-06-06T22:17:23 Last Updated: 2024-08-03T05:56:15.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject the payload inside the "Role management" menu and then trigger the payload by loading the "Users management" menu Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/seeddms/code/ci/9e92524fdbd1e7c3e6771d669f140c62389ec375/ - https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-2022-28479
CVE ID: CVE-2022-28480 State: PUBLISHED Published: 2022-04-29T16:14:03 Last Updated: 2024-08-03T05:56:15.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166465/ALLMediaServer-1.6-Remote-Buffer-Overflow.html
CVE ID: CVE-2022-28481 State: PUBLISHED Published: 2022-05-01T14:24:02 Last Updated: 2024-08-03T05:56:15.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zvory/csv-safe/issues/7 - https://github.com/zvory/csv-safe/pull/8 - https://github.com/zvory/csv-safe
CVE ID: CVE-2022-28487 State: PUBLISHED Published: 2022-05-04T00:00:00 Last Updated: 2024-08-03T05:56:15.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/723 - https://github.com/appneta/tcpreplay/pull/720 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-28488 State: PUBLISHED Published: 2022-05-04T14:18:07 Last Updated: 2024-08-03T05:56:15.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marc-q/libwav/issues/29 - https://github.com/tin-z/Stuff_and_POCs/blob/main/poc_libwav/POC
CVE ID: CVE-2022-28491 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:52:07.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/1/2.md - https://github.com/B2eFly/CVE/blob/main/totolink/CP900/2/2.md
CVE ID: CVE-2022-28492 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:51:00.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/8/8.md - https://github.com/B2eFly/CVE/blob/main/totolink/CP900/8/8.md
CVE ID: CVE-2022-28493 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:49:50.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service, Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/7/7.md
CVE ID: CVE-2022-28494 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:48:30.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/5/5.md - https://github.com/B2eFly/CVE/blob/main/totolink/CP900/5/5.md
CVE ID: CVE-2022-28495 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-20T19:03:45.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/3/3.md - https://github.com/B2eFly/CVE/blob/main/totolink/CP900/3/3.md
CVE ID: CVE-2022-28496 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:46:34.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/1/1.md
CVE ID: CVE-2022-28497 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:45:46.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/B2eFly/Router/blob/main/totolink/CP900/6/6.md
CVE ID: CVE-2022-28505 State: PUBLISHED Published: 2022-05-03T16:35:38 Last Updated: 2024-08-03T05:56:15.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/33
CVE ID: CVE-2022-28506 State: PUBLISHED Published: 2022-04-25T12:53:01 Last Updated: 2024-08-03T05:56:15.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verf1sh/Poc/blob/master/giflib_poc - https://github.com/verf1sh/Poc/blob/master/asan_report_giflib.png - https://sourceforge.net/p/giflib/bugs/159/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/ - https://lists.fedoraproject.org/archives/list/package-announce%40list
ct.org/message/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEAFUZXOOJJVFYRQM6IIJ7LMLEKCCESG/
CVE ID: CVE-2022-28507 State: PUBLISHED Published: 2022-05-06T16:39:40 Last Updated: 2024-08-03T05:56:15.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting (XSS) via Dragon path router admin page. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/Ra7tWMs5dkk - https://drive.google.com/file/d/1gAssizx8A6450rIfkfeI9_7o4t5NV0MH/view?usp=sharing
CVE ID: CVE-2022-28508 State: PUBLISHED Published: 2022-05-04T13:50:55 Last Updated: 2024-08-03T05:56:15.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/ - https://sourceforge.net/projects/mantisbt/ - https://github.com/YavuzSahbaz/CVE-2022-28508/blob/main/MantisBT%202.25.2%20XSS%20vulnurability
CVE ID: CVE-2022-28512 State: PUBLISHED Published: 2022-05-04T14:26:58 Last Updated: 2024-08-03T05:56:15.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html - https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md
CVE ID: CVE-2022-28521 State: PUBLISHED Published: 2022-04-26T20:29:28 Last Updated: 2024-08-03T05:56:15.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jorycn/thinkphp-zcms/issues/4 - https://github.com/zhendezuile/bug_report/blob/main/zcms%EF%BC%9Aphp%20file%20inclusion
CVE ID: CVE-2022-28522 State: PUBLISHED Published: 2022-04-26T20:29:29 Last Updated: 2024-08-03T05:56:15.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jorycn/thinkphp-zcms/issues/5 - https://github.com/zhendezuile/bug_report/blob/main/zcms
CVE ID: CVE-2022-28523 State: PUBLISHED Published: 2022-04-26T20:29:29 Last Updated: 2024-08-03T05:56:15.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Neeke/HongCMS/issues/17
CVE ID: CVE-2022-28524 State: PUBLISHED Published: 2022-04-26T20:29:30 Last Updated: 2024-08-03T05:56:15.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chilin89117/ED01-CMS/issues/4
CVE ID: CVE-2022-28525 State: PUBLISHED Published: 2022-04-26T20:29:30 Last Updated: 2024-08-03T05:56:15.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chilin89117/ED01-CMS/issues/5
CVE ID: CVE-2022-28527 State: PUBLISHED Published: 2022-04-26T20:29:31 Last Updated: 2024-08-03T05:56:15.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ShaoGongBra/dhcms/issues/5
CVE ID: CVE-2022-28528 State: PUBLISHED Published: 2022-04-26T20:29:31 Last Updated: 2024-08-03T05:56:15.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexlang24/bloofoxCMS/issues/14
CVE ID: CVE-2022-28530 State: PUBLISHED Published: 2022-05-05T16:43:13 Last Updated: 2024-08-03T05:56:15.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166481/Covid-19-Directory-On-Vaccination-System-1.0-SQL-Injection.html
CVE ID: CVE-2022-28531 State: PUBLISHED Published: 2022-05-20T18:29:02 Last Updated: 2024-08-03T05:56:15.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166481/Covid-19-Directory-On-Vaccination-System-1.0-SQL-Injection.html - https://www.sourcecodester.com/php/15244/design-and-implementation-covid-19-directory-vacination.html
CVE ID: CVE-2022-28533 State: PUBLISHED Published: 2022-05-05T16:24:05 Last Updated: 2024-08-03T05:56:15.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/view_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166539
CVE ID: CVE-2022-28541 State: PUBLISHED Published: 2022-04-11T19:37:35 Last Updated: 2024-08-03T05:56:15.611Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Update Problem Types: CWE-22 Description: Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-28542 State: PUBLISHED Published: 2022-04-11T19:37:36 Last Updated: 2024-08-03T05:56:15.606Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-284 Description: Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-28543 State: PUBLISHED Published: 2022-04-11T19:37:36 Last Updated: 2024-08-03T05:56:15.586Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Flow Problem Types: CWE-22 Description: Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-28544 State: PUBLISHED Published: 2022-04-11T19:37:37 Last Updated: 2024-08-03T05:56:15.626Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-22 Description: Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-28545 State: PUBLISHED Published: 2022-05-06T16:30:58 Last Updated: 2024-08-03T05:56:15.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDforum 3.1.1 is vulnerable to Stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fudforum/FUDforum/commit/8ff446881932a45ce538b84a76f833d44eada93b - https://github.com/fudforum/FUDforum/commit/aed69661b6f876c916abec9ca4fcf5035b8e2390
CVE ID: CVE-2022-28550 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T19:11:12.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Matthias-Wandel/jhead/issues/51 - https://github.com/Matthias-Wandel/jhead/commit/64894dbc7d8
nces: - https://github.com/Matthias-Wandel/jhead/issues/51 - https://github.com/Matthias-Wandel/jhead/commit/64894dbc7d8e1e232e85f1cab25c64290b2fc167
CVE ID: CVE-2022-28552 State: PUBLISHED Published: 2022-05-04T14:52:17 Last Updated: 2024-08-03T05:56:15.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/10
CVE ID: CVE-2022-28556 State: PUBLISHED Published: 2022-05-04T15:13:19 Last Updated: 2024-08-03T05:56:15.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.md
CVE ID: CVE-2022-28557 State: PUBLISHED Published: 2022-05-04T15:18:42 Last Updated: 2024-08-03T05:56:15.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.md