Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38850 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2399 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38851 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2393 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38853 State: PUBLISHED Published: 2022-09-15T14:57:26 Last Updated: 2024-08-03T11:02:14.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2398
CVE ID: CVE-2022-38855 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2392 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38856 State: PUBLISHED Published: 2022-09-15T14:51:09 Last Updated: 2024-08-03T11:02:14.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2395
CVE ID: CVE-2022-38858 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2396 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38860 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2402 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38861 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2407 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38862 State: PUBLISHED Published: 2022-09-15T14:37:51 Last Updated: 2024-08-03T11:02:14.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2404
CVE ID: CVE-2022-38863 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2405 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38864 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2406 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38865 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2401 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38866 State: PUBLISHED Published: 2022-09-15T00:00:00 Last Updated: 2024-08-03T11:02:14.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2403#comment:2 - https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html
CVE ID: CVE-2022-38867 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-04-01T16:39:25.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zhaojh329/rttys/issues/117 - https://github.com/zhaojh329/rttys/blob/v4.4.1/api.go#L295
CVE ID: CVE-2022-38868 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:08:02.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seccome/Ehoney/issues/59
CVE ID: CVE-2022-38870 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:14:12.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free5gc v3.2.1 is vulnerable to Information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc/issues/387
CVE ID: CVE-2022-38871 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-30T14:05:04.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc/issues/198
CVE ID: CVE-2022-38873 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:52:22.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119_beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-3662 v1.05rc047 and earlier allows attackers to cause a Denial of Service (DoS) via uploading a crafted firmware after modifying the firmware header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
e after modifying the firmware header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Yuhao-W/BUG--D-Link--Firmware-Update-Vulnerabilities/blob/main/README.md
CVE ID: CVE-2022-38877 State: PUBLISHED Published: 2022-09-16T15:03:30.000Z Last Updated: 2025-06-03T18:01:32.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MagicWHat/bug_report/blob/main/vendors/mayuri_k/garage-management-system/RCE-1.md
CVE ID: CVE-2022-38878 State: PUBLISHED Published: 2022-09-16T15:00:45.000Z Last Updated: 2025-06-03T17:38:13.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MagicWHat/bug_report/blob/main/vendors/wsatm/school-activity-updates-sms-notification/SQLi-1.md
CVE ID: CVE-2022-38880 State: PUBLISHED Published: 2022-09-19T13:56:39 Last Updated: 2024-08-03T11:02:14.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://github.com/democritus-project/d8s-urls/issues/8
CVE ID: CVE-2022-38881 State: PUBLISHED Published: 2022-09-19T15:26:55 Last Updated: 2024-08-03T11:02:14.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-archives/ - https://github.com/democritus-project/d8s-archives/issues/12
CVE ID: CVE-2022-38882 State: PUBLISHED Published: 2022-09-19T15:28:52 Last Updated: 2024-08-03T11:02:14.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-json/ - https://github.com/democritus-project/d8s-json/issues/9
CVE ID: CVE-2022-38883 State: PUBLISHED Published: 2022-09-19T15:30:57 Last Updated: 2024-08-03T11:02:14.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-math/ - https://github.com/democritus-project/d8s-math/issues/11
CVE ID: CVE-2022-38884 State: PUBLISHED Published: 2022-09-19T15:32:10 Last Updated: 2024-08-03T11:02:14.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-grammars/ - https://github.com/democritus-project/d8s-grammars/issues/6
CVE ID: CVE-2022-38885 State: PUBLISHED Published: 2022-09-19T15:34:02 Last Updated: 2024-08-03T11:02:14.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-netstrings/ - https://github.com/democritus-project/d8s-netstrings/issues/4
CVE ID: CVE-2022-38886 State: PUBLISHED Published: 2022-09-19T15:35:42 Last Updated: 2024-08-03T11:02:14.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-xml/ - https://github.com/democritus-project/d8s-xml/issues/10
CVE ID: CVE-2022-38887 State: PUBLISHED Published: 2022-09-19T15:38:43.000Z Last Updated: 2025-06-03T17:42:14.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/democritus-strings/ - https://pypi.org/project/d8s-python/ - https://github.com/democritus-project/d8s-python/issues/36
CVE ID: CVE-2022-38890 State: PUBLISHED Published: 2022-09-15T15:28:36 Last Updated: 2024-08-03T11:02:14.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/569
CVE ID: CVE-2022-38900 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-25T19:50:41.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SamVerschueren/decode-uri-component/issues/5 - https://github.com/sindresorhus/query-string/issues/345 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
SEWAMQ6UZAUBZ5KXKEOESH375/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNV2GNZXOTEDAJRFH3ZYWRUBGIVL7BSU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QABOUA2I542UTANVZIVFKWMRYVHLV32D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW4SCMT3SEUFVIL7YIADQ5K36GJEO6I5/
CVE ID: CVE-2022-38901 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:19:54.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the description field of uploaded svg file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://drive.proton.me/urls/D27RQ14NGW#b71d8XrBl2Mu - https://www.offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-3890
27RQ14NGW#b71d8XrBl2Mu - https://www.offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-38901-and-cve-2022-38902/
CVE ID: CVE-2022-38902 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:16:23.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the name field of newly created topic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://drive.proton.me/urls/D27RQ14NGW#b71d8XrBl2Mu - https://www.offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-38901-and-cve-2022-38
Bl2Mu - https://www.offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-38901-and-cve-2022-38902/
CVE ID: CVE-2022-38916 State: PUBLISHED Published: 2022-09-20T16:09:40.000Z Last Updated: 2025-05-27T18:09:09.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pagekit/pagekit/issues/970
CVE ID: CVE-2022-38922 State: PUBLISHED Published: 2023-04-03T00:00:00.000Z Last Updated: 2025-02-18T15:57:33.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings' token using a Time-based blind SLEEP payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bluepage-cms.com/index.php - https://www.iss-oberlausitz.de/index.php - https://github.com/dtssec/CVE-Disclosures/blob/main/CVE-2022-38922_CVE-2022-38923_Bluepage_CMS_SQLi/CVE-2022-38922-BluePage_CMS_3.9.md
CVE ID: CVE-2022-38923 State: PUBLISHED Published: 2023-04-03T00:00:00.000Z Last Updated: 2025-02-14T19:22:47.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-based blind SLEEP payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bluepage-cms.com/index.php - https://www.iss-oberlausitz.de/index.php - https://github.com/dtssec/CVE-Disclosures/blob/main/CVE-2022-38922_CVE-2022-38923_Bluepage_CMS_SQLi/CVE-2022-38922-BluePage_CMS_3.9.md
CVE ID: CVE-2022-38928 State: PUBLISHED Published: 2022-09-21T12:57:51.000Z Last Updated: 2025-05-27T18:22:24.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421
CVE ID: CVE-2022-38931 State: PUBLISHED Published: 2022-09-20T19:58:59.000Z Last Updated: 2025-05-28T15:54:36.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zer0yu/CVE_Request/blob/master/baijiacms/baijiacmsv4_ssrf.md
CVE ID: CVE-2022-38932 State: PUBLISHED Published: 2022-09-27T17:52:45.000Z Last Updated: 2025-05-21T15:03:58.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/klange/toaruos/issues/243
CVE ID: CVE-2022-38934 State: PUBLISHED Published: 2022-09-28T16:30:55.000Z Last Updated: 2025-05-21T14:24:11.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/klange/toaruos/issues/244
CVE ID: CVE-2022-38935 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:05:14.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yourkevin/NiterForum/issues/25
CVE ID: CVE-2022-38936 State: PUBLISHED Published: 2022-09-23T10:49:03.000Z Last Updated: 2025-05-27T14:45:11.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbc_wmessage_integer in src/wmessage.c:137. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudwu/pbc/issues/158
CVE ID: CVE-2022-38946 State: PUBLISHED Published: 2024-12-09T00:00:00 Last Updated: 2024-12-11T15:56:32.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signup_com.php, allows attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Cosemz/CVE/blob/main/Doctor-Appointment.md
CVE ID: CVE-2022-38947 State: PUBLISHED Published: 2024-12-09T00:00:00 Last Updated: 2024-12-11T15:58:03.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in product_title parameter, allows attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Cosemz/CVE/blob/main/Flipkart-Clone-PHP/Flipkart-Clone-PHP.md
CVE ID: CVE-2022-38955 State: PUBLISHED Published: 2022-09-20T17:47:27.000Z Last Updated: 2025-05-28T16:00:21.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p