Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45478 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-23T19:37:25.370Z Vendors: Telepad Products: Telepad Problem Types: CWE-319 Description: Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/
CVE ID: CVE-2022-45479 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-23T14:09:28.918Z Vendors: BEAppsMobile Products: PC Keyboard WiFi & Bluetooth Problem Types: CWE-306 Description: PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/
CVE ID: CVE-2022-45480 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:16:07.710Z Vendors: Telepad Products: PC Keyboard WiFi & Bluetooth Problem Types: CWE-319 Description: PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/
CVE ID: CVE-2022-45481 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:47:03.536Z Vendors: thisAAY Products: Lazy Mouse Problem Types: CWE-306 Description: The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/
CVE ID: CVE-2022-45482 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:56:37.974Z Vendors: thisAAY Products: Lazy Mouse Problem Types: CWE-521 Description: Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/
CVE ID: CVE-2022-45483 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:55:38.620Z Vendors: thisAAY Products: Lazy Mouse Problem Types: CWE-319 Description: Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/
CVE ID: CVE-2022-45484 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:43:31.045Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3, Teamcenter Visualization V14.0, Teamcenter Visualization V14.1 Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.9), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.
3.0.9), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.5), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CCITT_G4Decode.dll contains an out of bounds read vulnerability when parsing a RAS file. An attacker can leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19056) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE ID: CVE-2022-45491 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:31:12.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sheredom/json.h/issues/94 - https://github.com/hyrathon/trophies/security/advisories/GHSA-55fm-gm4m-3v3j
CVE ID: CVE-2022-45492 State: PUBLISHED Published: 2023-02-03T00:00:00 Last Updated: 2024-08-03T14:17:03.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sheredom/json.h/issues/95 - https://github.com/hyrathon/trophies/security/advisories/GHSA-r9wh-hxqh-3xq7
CVE ID: CVE-2022-45493 State: PUBLISHED Published: 2023-02-03T00:00:00 Last Updated: 2024-08-03T14:17:03.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hyrathon/trophies/security/advisories/GHSA-r2mm-2f4c-6243
CVE ID: CVE-2022-45494 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:30:23.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function json_parse_object in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sheredom/json.h - https://github.com/sheredom/json.h/issues/93 - https://github.com/sheredom/json.h/issues/97 - https://github.com/hyrathon/trophies/security/advisories/GHSA-wvpq-p7pp-cj6m
CVE ID: CVE-2022-45496 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:45:49.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sheredom/json.h/issues/92 - https://github.com/hyrathon/trophies/security/advisories/GHSA-29hf-wrjw-2f28
CVE ID: CVE-2022-45497 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:05:20.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/exeCommand/readme.md
CVE ID: CVE-2022-45498 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:04:42.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/SysToolReboot/readme.md
CVE ID: CVE-2022-45499 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:03:31.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/WifiMacFilterGet/readme.md
CVE ID: CVE-2022-45501 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:02:31.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/wifiSSIDset/readme.md
CVE ID: CVE-2022-45503 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:01:36.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/setAutoPing/readme.md
CVE ID: CVE-2022-45504 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:00:53.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/SysToolRestoreSet/readme.md
CVE ID: CVE-2022-45505 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:56:37.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/exeCommand/readme.md
CVE ID: CVE-2022-45506 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:52:48.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/delFileName/readme.md
CVE ID: CVE-2022-45507 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:51:46.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/editFileName/readme.md
CVE ID: CVE-2022-45508 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:50:55.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/editUserName/readme.md
CVE ID: CVE-2022-45509 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:49:19.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/addUserName/readme.md
CVE ID: CVE-2022-45510 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:47:55.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/AdvSetWrlsafeset/readme.md
CVE ID: CVE-2022-45511 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:44:53.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/QuickIndex/readme.md
CVE ID: CVE-2022-45512 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:44:23.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeEmailFilter/readme.md
CVE ID: CVE-2022-45513 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:43:09.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/P2pListFilter/readme.md
CVE ID: CVE-2022-45514 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:42:00.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/webExcptypemanFilter/readme.md
CVE ID: CVE-2022-45515 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:40:27.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/addressNat/readme.md
CVE ID: CVE-2022-45516 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:39:22.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/NatStaticSetting/readme.md
CVE ID: CVE-2022-45517 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:37:49.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/VirtualSer/readme.md
CVE ID: CVE-2022-45518 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:37:00.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SetIpBind/readme.md
CVE ID: CVE-2022-45519 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:35:00.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeMacFilter/readme.md
CVE ID: CVE-2022-45520 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:33:59.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/qossetting/readme.md
CVE ID: CVE-2022-45521 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:32:46.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeUrlFilter/readme.md
CVE ID: CVE-2022-45522 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:31:25.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeClientFilter/readme.md
CVE ID: CVE-2022-45523 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:30:52.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/L7Im/readme.md
CVE ID: CVE-2022-45524 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:30:17.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/IPSECsave/readme.md
CVE ID: CVE-2022-45525 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T14:28:42.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/CertListInfo/readme.md
CVE ID: CVE-2022-45526 State: PUBLISHED Published: 2023-02-08T00:00:00.000Z Last Updated: 2025-03-25T14:19:33.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Future-Depth/IMS/issues/1
CVE ID: CVE-2022-45527 State: PUBLISHED Published: 2023-02-08T00:00:00.000Z Last Updated: 2025-03-25T14:18:29.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Future-Depth/IMS/issues/2
CVE ID: CVE-2022-45529 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-25T21:02:24.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\edit_post.php. This vulnerability allows attackers to access database information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rdyx0.github.io/2018/09/05/AeroCMS-v0.0.1-SQLi%20edit_post_post_category_id_sql_injectin/ - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/edit_post_post_category_id_sql_injection/edit_post_post_cat
github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/edit_post_post_category_id_sql_injection/edit_post_post_category_id_sql_injection.md
CVE ID: CVE-2022-45535 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-25T20:59:07.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/update_categories_sql_injection/update_categories_sql_injection.md - https://rdyx0.github.io/2018/09/06/AeroCMS-v0.0.1-SQLi%20update_categories_sql_injection/
CVE ID: CVE-2022-45536 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T16:24:04.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This vulnerability allows attackers to access database information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/post_comments_sql_injection/post_comments_sql_injection.md - https://rdyx0.github.io/2018/09/07/AeroCMS-v0.0.1-SQLi%20post_comments_sql_injection/
CVE ID: CVE-2022-45537 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:10:10.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/34