Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43282 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:29:25.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/1983
CVE ID: CVE-2022-43283 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T19:25:37.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/1985
CVE ID: CVE-2022-43284 State: PUBLISHED Published: 2022-10-28T00:00:00 Last Updated: 2024-08-03T13:26:02.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/470 - https://github.com/nginx/njs/issues/529
CVE ID: CVE-2022-43285 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:02:39.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/533
CVE ID: CVE-2022-43286 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:00:14.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/480 - https://github.com/nginx/njs/commit/2ad0ea24a58d570634e09c2e58c3b314505eaa6a
CVE ID: CVE-2022-43288 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:35:52.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/view&type=php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kubozz/rukovoditel-3.2.1/issues/2
CVE ID: CVE-2022-43289 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:44:29.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jsummers/deark/issues/52 - https://github.com/jsummers/deark
CVE ID: CVE-2022-43290 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:21:14.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/songyangqi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md
CVE ID: CVE-2022-43291 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:20:38.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/songyangqi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-2.md
CVE ID: CVE-2022-43292 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:19:34.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/songyangqi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-3.md
CVE ID: CVE-2022-43293 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T20:20:01.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lucabarile.github.io/Blog/blog.html - https://lucabarile.github.io/Blog/CVE-2022-43293/index.html - https://github.com/LucaBarile/CVE-2022-43293 - https://cdn.wacom.com/u/productsupport/drivers/win/professional/releasenotes/Windows_6.4.2-1.html
CVE ID: CVE-2022-43294 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:33:58.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/arendst/Tasmota/pull/16802/commits/066878da4d4762a9b6cb169fdf353e804d735cfd - https://github.com/arendst/Tasmota/pull/16802
CVE ID: CVE-2022-43295 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-05-13T19:25:16.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?t=42360
CVE ID: CVE-2022-43303 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:02:17.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-strings/ - https://pypi.org/project/democritus-uuids/ - https://github.com/dadadadada111/info/issues/8
CVE ID: CVE-2022-43304 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:04:30.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/democritus-uuids/ - https://pypi.org/project/d8s-timer/ - https://github.com/dadadadada111/info/issues/9
CVE ID: CVE-2022-43305 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:05:37.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-python/ - https://pypi.org/project/democritus-algorithms/ - https://github.com/dadadadada111/info/issues/10
CVE ID: CVE-2022-43306 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:07:14.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-timer/ - https://pypi.org/project/democritus-dates/ - https://github.com/dadadadada111/info/issues/11
CVE ID: CVE-2022-43308 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-30T13:55:00.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vitorespf/Advisories/blob/master/Intelbras-switch.txt - https://www.intelbras.com/pt-br/switch-gerenciavel-24-portas-poe-gigabit-ethernet-sg-2404-poe
CVE ID: CVE-2022-43309 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-11T20:11:55.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://supermicro.com - http://x11ssl-cf.com - https://www.supermicro.com/en/support/security_VRM_Jan_2023
CVE ID: CVE-2022-43310 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:18:47.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.foxitsoftware.cn/support/security-bulletins.html - https://github.com/hxxt9049/futing
CVE ID: CVE-2022-43317 State: PUBLISHED Published: 2022-11-07T00:00:00 Last Updated: 2024-08-03T13:26:02.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImaizumiYui/bug_report/blob/main/vendors/oretnom23/Human%20Resource%20Management%20System/XSS-1.md
CVE ID: CVE-2022-43318 State: PUBLISHED Published: 2022-11-07T00:00:00 Last Updated: 2024-08-03T13:26:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImaizumiYui/bug_report/blob/main/vendors/oretnom23/Human%20Resource%20Management%20System/SQLi-1.md
CVE ID: CVE-2022-43319 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:08:35.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ImaizumiYui/bug_report/blob/main/vendors/oretnom23/Simple%20E-Learning%20System/discl1.md
CVE ID: CVE-2022-43320 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:17:45.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liufee/feehicms/issues/4
CVE ID: CVE-2022-43321 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:16:49.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/library/Page.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://yii-shopwind.com - https://github.com/shopwind/yii-shopwind/issues/1
CVE ID: CVE-2022-43323 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:25:04.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/28#issue-1410026516
CVE ID: CVE-2022-43325 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:52:28.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-43325
CVE ID: CVE-2022-43326 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T16:38:15.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-43326
CVE ID: CVE-2022-43328 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:10:37.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YReyi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-2.md
CVE ID: CVE-2022-43329 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:09:17.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YReyi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md
CVE ID: CVE-2022-43330 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:08:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YReyi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-2.md
CVE ID: CVE-2022-43331 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:06:17.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_action/printOrder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YReyi/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-3.md
CVE ID: CVE-2022-43332 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T15:03:33.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/maikroservice/CVE-2022-43332
CVE ID: CVE-2022-43333 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T17:55:29.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the component action_export_control.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/it/security-advisory-telenia-software-tvox/
CVE ID: CVE-2022-43340 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-12T19:52:46.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zyx0814/dzzoffice - http://dzzoffice.com - https://github.com/zyx0814/dzzoffice/issues/223
CVE ID: CVE-2022-43342 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:22:57.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the KPI Title text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.eramba.org/ - https://discussions.eramba.org/t/question-stored-xss-vulnerability/2326
CVE ID: CVE-2022-43343 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:19:21.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sasagawa888/nprolog/issues/75
CVE ID: CVE-2022-43350 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:10:54.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hujozay/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-2.md
CVE ID: CVE-2022-43351 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:12:14.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hujozay/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/delete-file-1.md
CVE ID: CVE-2022-43352 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:14:36.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hujozay/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md
CVE ID: CVE-2022-43353 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:05:06.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/daytime888/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md
CVE ID: CVE-2022-43354 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:03:00.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/daytime888/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-2.md
CVE ID: CVE-2022-43355 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-02T21:01:47.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/daytime888/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-3.md
CVE ID: CVE-2022-43357 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:35:50.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sass/libsass - https://drive.google.com/file/d/1aC5q3czen0atI91fuBIoCBFkS30_OSWX/ - https://github.com/sass/libsass/issues/3177
CVE ID: CVE-2022-43358 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:34:45.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sass/libsass - https://drive.google.com/file/d/1j5fkPjWH9zQeTdO_4dMcZ-FpOBzP0MaI/ - https://github.com/sass/libsass/issues/3178