Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38251 State: PUBLISHED Published: 2022-09-07T21:14:38 Last Updated: 2024-08-03T10:45:52.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Settings page under the Admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7
CVE ID: CVE-2022-38254 State: PUBLISHED Published: 2022-09-07T21:14:37 Last Updated: 2024-08-03T10:45:53.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in CCM 3.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7
CVE ID: CVE-2022-38255 State: PUBLISHED Published: 2022-09-08T15:58:37 Last Updated: 2024-08-03T10:45:52.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /interview/editQuestion.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Fright1Moch/bug_report/blob/main/vendors/janobe/interview-management-system/SQLi-1.md
CVE ID: CVE-2022-38256 State: PUBLISHED Published: 2022-09-08T17:32:14 Last Updated: 2024-08-03T10:45:53.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2022-005
CVE ID: CVE-2022-38258 State: PUBLISHED Published: 2022-09-08T17:43:09 Last Updated: 2024-08-03T10:45:52.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://whokilleddb.github.io/blogs/posts/dlink_dir-819_lfi_and_dos/
CVE ID: CVE-2022-38260 State: PUBLISHED Published: 2022-09-08T16:52:21 Last Updated: 2024-08-03T10:45:52.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Fright1Moch/bug_report/blob/main/vendors/janobe/interview-management-system/SQLi-2.md
CVE ID: CVE-2022-38265 State: PUBLISHED Published: 2022-09-08T20:10:40 Last Updated: 2024-08-03T10:45:53.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxxcoll/bug_report/blob/main/vendors/oretnom23/apartment-visitor-management-system/SQLi-1.md
CVE ID: CVE-2022-38266 State: PUBLISHED Published: 2022-09-09T00:00:00 Last Updated: 2024-08-03T10:45:53.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tesseract-ocr/tesseract/issues/3498 - https://github.com/DanBloomberg/leptonica/commit/f062b42c0ea8dddebdc6a152fd16152de215d614 - https://lists.debian.org/debian-lts-announce/2022/12/msg00018.html - https://security.gentoo.org/glsa/202312-01
CVE ID: CVE-2022-38267 State: PUBLISHED Published: 2022-09-08T20:58:22 Last Updated: 2024-08-03T10:45:52.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moyess/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md
CVE ID: CVE-2022-38268 State: PUBLISHED Published: 2022-09-08T20:58:23 Last Updated: 2024-08-03T10:45:53.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moyess/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-3.md
CVE ID: CVE-2022-38269 State: PUBLISHED Published: 2022-09-08T20:58:25 Last Updated: 2024-08-03T10:45:53.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moyess/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-2.md
CVE ID: CVE-2022-38272 State: PUBLISHED Published: 2022-09-09T13:41:00 Last Updated: 2024-08-03T10:45:53.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38273 State: PUBLISHED Published: 2022-09-09T13:41:01 Last Updated: 2024-08-03T10:45:53.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38274 State: PUBLISHED Published: 2022-09-09T13:41:02 Last Updated: 2024-08-03T10:45:53.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38275 State: PUBLISHED Published: 2022-09-09T13:40:57 Last Updated: 2024-08-03T10:45:52.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38276 State: PUBLISHED Published: 2022-09-09T13:40:56 Last Updated: 2024-08-03T10:45:52.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38277 State: PUBLISHED Published: 2022-09-09T13:40:56 Last Updated: 2024-08-03T10:45:53.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38278 State: PUBLISHED Published: 2022-09-09T13:40:55 Last Updated: 2024-08-03T10:45:53.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38279 State: PUBLISHED Published: 2022-09-09T13:40:53 Last Updated: 2024-08-03T10:45:52.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38280 State: PUBLISHED Published: 2022-09-09T13:40:52 Last Updated: 2024-08-03T10:54:02.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38281 State: PUBLISHED Published: 2022-09-09T13:40:52 Last Updated: 2024-08-03T10:54:02.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/51
CVE ID: CVE-2022-38282 State: PUBLISHED Published: 2022-09-09T13:40:51 Last Updated: 2024-08-03T10:54:02.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/52
CVE ID: CVE-2022-38283 State: PUBLISHED Published: 2022-09-09T13:40:50 Last Updated: 2024-08-03T10:54:02.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/52
CVE ID: CVE-2022-38284 State: PUBLISHED Published: 2022-09-09T13:40:50 Last Updated: 2024-08-03T10:54:02.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/52
CVE ID: CVE-2022-38285 State: PUBLISHED Published: 2022-09-09T13:40:49 Last Updated: 2024-08-03T10:54:02.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/52
CVE ID: CVE-2022-38286 State: PUBLISHED Published: 2022-09-09T13:40:48 Last Updated: 2024-08-03T10:54:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/52
CVE ID: CVE-2022-38287 State: REJECTED Published: N/A Last Updated: 2023-01-14T00:00:00 Description: No description available.
CVE ID: CVE-2022-38289 State: REJECTED Published: 2022-09-06T17:19:03 Last Updated: 2022-09-06T17:19:03 Description: No description available.
CVE ID: CVE-2022-38291 State: PUBLISHED Published: 2022-09-12T20:30:54 Last Updated: 2024-08-03T10:54:02.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims9_bulian/issues/156
CVE ID: CVE-2022-38292 State: PUBLISHED Published: 2022-09-12T20:30:55 Last Updated: 2024-08-03T10:54:02.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims9_bulian/issues/158
CVE ID: CVE-2022-38295 State: PUBLISHED Published: 2022-09-12T20:43:50 Last Updated: 2024-08-03T10:54:03.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CuppaCMS/CuppaCMS/issues/34
CVE ID: CVE-2022-38296 State: PUBLISHED Published: 2022-09-12T20:43:51 Last Updated: 2024-08-03T10:54:02.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CuppaCMS/CuppaCMS/issues/33
CVE ID: CVE-2022-38297 State: PUBLISHED Published: 2022-09-12T22:10:27 Last Updated: 2024-08-03T10:54:03.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tobysunyaya/UCMS_vulunerablities/blob/main/UCMS%20v1.6%20cookies%20poisoning%20attack%20vulnerability
CVE ID: CVE-2022-38298 State: PUBLISHED Published: 2022-09-12T21:49:54 Last Updated: 2024-08-03T10:54:02.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appsmithorg/appsmith/pull/15782
CVE ID: CVE-2022-38299 State: PUBLISHED Published: 2022-09-12T21:49:55 Last Updated: 2024-08-03T10:54:02.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appsmithorg/appsmith/pull/15834
CVE ID: CVE-2022-38301 State: PUBLISHED Published: 2022-09-14T20:13:38 Last Updated: 2024-08-03T10:54:02.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theonedev/onedev/commit/5b6a19c1f7fe9c271acc4268bcd261a9a1cbb3ea - https://research.loginsoft.com/vulnerability/path-traversal-in-onedev-v7-4-14/
CVE ID: CVE-2022-38302 State: PUBLISHED Published: 2022-09-12T22:44:01 Last Updated: 2024-08-03T10:54:03.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GGMMNN/bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-1.md
CVE ID: CVE-2022-38303 State: PUBLISHED Published: 2022-09-12T22:44:02 Last Updated: 2024-08-03T10:54:03.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GGMMNN/bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-2.md
CVE ID: CVE-2022-38304 State: PUBLISHED Published: 2022-09-12T22:44:03 Last Updated: 2024-08-03T10:54:03.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_leave_type.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GGMMNN/bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-3.md
CVE ID: CVE-2022-38305 State: PUBLISHED Published: 2022-09-13T22:36:09 Last Updated: 2024-08-03T10:54:02.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MegaTKC/AeroCMS/issues/3
CVE ID: CVE-2022-38306 State: PUBLISHED Published: 2022-09-13T20:16:44 Last Updated: 2024-08-03T10:54:02.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lief-project/LIEF/issues/763
CVE ID: CVE-2022-38307 State: PUBLISHED Published: 2022-09-13T20:16:45 Last Updated: 2024-08-03T10:54:02.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lief-project/LIEF/issues/764
CVE ID: CVE-2022-38308 State: PUBLISHED Published: 2022-09-14T20:25:46 Last Updated: 2024-08-03T10:54:02.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhoisZkuan/TOTOlink-A700RU
CVE ID: CVE-2022-38309 State: PUBLISHED Published: 2022-09-07T18:41:01 Last Updated: 2024-08-03T10:54:03.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/4
CVE ID: CVE-2022-38310 State: PUBLISHED Published: 2022-09-07T18:41:03 Last Updated: 2024-08-03T10:54:03.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/6
CVE ID: CVE-2022-38311 State: PUBLISHED Published: 2022-09-07T18:41:05 Last Updated: 2024-08-03T10:54:03.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/5
CVE ID: CVE-2022-38312 State: PUBLISHED Published: 2022-09-07T18:41:06 Last Updated: 2024-08-03T10:54:03.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/3
CVE ID: CVE-2022-38313 State: PUBLISHED Published: 2022-09-07T18:41:07 Last Updated: 2024-08-03T10:54:03.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/2
CVE ID: CVE-2022-38314 State: PUBLISHED Published: 2022-09-07T18:40:52 Last Updated: 2024-08-03T10:54:02.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/1
CVE ID: CVE-2022-38322 State: REJECTED Published: N/A Last Updated: 2024-08-09T21:15:17.663358 Description: No description available.
CVE ID: CVE-2022-38323 State: PUBLISHED Published: 2022-09-15T00:39:45 Last Updated: 2024-08-03T10:54:02.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Gsir97/bug_report/blob/main/vendors/Nikhil_B/event-management-system/RCE-1.md
CVE ID: CVE-2022-38325 State: PUBLISHED Published: 2022-09-15T19:01:37 Last Updated: 2024-08-03T10:54:03.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1160300418/Vuls/blob/main/Tenda/AC/Vul_expandDlnaFile.md
CVE ID: CVE-2022-38326 State: PUBLISHED Published: 2022-09-15T19:01:38 Last Updated: 2024-08-03T10:54:03.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1160300418/Vuls/blob/main/Tenda/AC/Vul_NatStaticSetting.md
CVE ID: CVE-2022-38329 State: PUBLISHED Published: 2022-09-13T00:00:00.000Z Last Updated: 2025-03-28T15:06:34.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing the administrator to perform unintended actions on an affected system. The vulnerability could allow attackers to modify or delete specific content through crafted requests, potentially leading to data loss and system integrity issues. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangqiquan/shopxian_cms/issues/4 - https://albert5888.github.io/pos
Program Container: References: - https://github.com/zhangqiquan/shopxian_cms/issues/4 - https://albert5888.github.io/posts/CVE-2022-38329/
CVE ID: CVE-2022-38333 State: PUBLISHED Published: 2022-09-19T16:13:20 Last Updated: 2024-08-03T10:54:03.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://git.openwrt.org/?p=project/cgi-io.git%3Ba=commit%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176 - https://git.openwrt.org/?p=project/cgi-io.git%3Ba=commitdiff%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176 - https://git.openwrt.org/?p=project/