Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43033 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:31:49.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4_HdlrAtom::~AP4_HdlrAtom() which allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/765
CVE ID: CVE-2022-43034 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:30:58.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4_BitReader::SkipBits(unsigned int) function in mp42ts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/764
CVE ID: CVE-2022-43035 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:30:16.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42aac. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/762
CVE ID: CVE-2022-43037 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:19:21.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4_File::ParseStream in /Core/Ap4File.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/788
CVE ID: CVE-2022-43038 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:29:19.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadCache() function in mp42ts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/787
CVE ID: CVE-2022-43039 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:28:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_meta_restore_items_ref at /isomedia/meta.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2281
CVE ID: CVE-2022-43040 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:53:32.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2280
CVE ID: CVE-2022-43042 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:52:00.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2278
CVE ID: CVE-2022-43043 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:50:22.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BD_CheckSFTimeOffset at /bifs/field_decode.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2276
CVE ID: CVE-2022-43044 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:48:07.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_get_meta_item_info at /isomedia/meta.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2282
CVE ID: CVE-2022-43045 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:46:38.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at /scene_manager/scene_dump.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2277
CVE ID: CVE-2022-43046 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T17:53:17.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Food Ordering Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /foms/place-order.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oudaorui/bug_report/blob/main/vendors/oretnom23/Food%20Ordering%20Management%20System/XSS-1.md
CVE ID: CVE-2022-43049 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T17:55:02.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youthappam/add-food.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sdpyly/bug_report_canteen/blob/master/SQLi.md
CVE ID: CVE-2022-43050 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T17:56:27.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1909900436/bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/RCE-1.md
CVE ID: CVE-2022-43051 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T17:57:37.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete_test. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1909900436/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43052 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T17:58:47.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1909900436/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-2.md
CVE ID: CVE-2022-43058 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:04:54.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ctg503/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43061 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:03:28.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /operations/travellers.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YorkLee53645349/Cve_report/blob/main/vendor/mayuri_k/online-tours-travels-management-system/RCE-1.md
CVE ID: CVE-2022-43062 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:01:40.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_appointment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YorkLee53645349/Cve_report/blob/main/vendor/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43063 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:00:23.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=delete_client. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YorkLee53645349/Cve_report/blob/main/vendor/oretnom23/online-diagnostic-lab-management-system/SQLi-2.md
CVE ID: CVE-2022-43066 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:53:07.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=delete_message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wang1213884/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-2.md
CVE ID: CVE-2022-43068 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:51:54.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wang1213884/bug_report/blob/main/vendors/oretnom23/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-43071 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T18:01:31.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42349&p=43959#p43959
CVE ID: CVE-2022-43074 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-05-01T13:47:58.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/loadream/AyaCMS/issues/3
CVE ID: CVE-2022-43076 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:13:21.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtemail parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/XSS-1.md
CVE ID: CVE-2022-43078 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:09:34.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/XSS-2.md
CVE ID: CVE-2022-43079 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:05:26.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/XSS-3.md
CVE ID: CVE-2022-43081 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T14:34:48.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/SQLi-3.md
CVE ID: CVE-2022-43082 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T14:32:05.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/XSS-4.md
CVE ID: CVE-2022-43083 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T14:29:24.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/RCE-2.md
CVE ID: CVE-2022-43084 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:04:19.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the v_name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/XSS-5.md
CVE ID: CVE-2022-43085 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:02:09.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/RCE-3.md
CVE ID: CVE-2022-43086 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:01:00.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0e/CVE_Hunter/blob/main/SQLi-4.md
CVE ID: CVE-2022-43096 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:15:47.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.media5corp.com/display/MP/DGW+Security+Improvement+Notes+v48.5.2718 - https://github.com/ProxyStaffy/Mediatrix-CVE-2022-43096
CVE ID: CVE-2022-43097 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:20:43.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the registration form & login pages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nibin-m/CVE-2022-43097
CVE ID: CVE-2022-43101 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T19:34:12.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#formsetdevicenameset_device_namesprintfv4-s1-a1
CVE ID: CVE-2022-43102 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T12:59:09.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#fromsetsystimesub_496104strcpychar-v6-s
CVE ID: CVE-2022-43103 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T12:58:18.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#formsetqosband
CVE ID: CVE-2022-43104 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T12:49:57.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#fromsetwirelessrepeatsub_45cd64sub_45cad8sub_45bb10
CVE ID: CVE-2022-43105 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T12:49:24.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#fromsetwifigusetbasic
CVE ID: CVE-2022-43106 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T19:17:58.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#setschedwifi-strcpychar-ptr--2-v8
CVE ID: CVE-2022-43107 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T19:16:18.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#setsmartpowermanagement
CVE ID: CVE-2022-43108 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T12:47:38.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#formsetfirewallcfg
CVE ID: CVE-2022-43109 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T12:46:54.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/ppcrab/IOT_FIRMWARE/blob/main/%E5%8F%8B%E8%AE%AF/dir-823g/cve_v1.0.2.pdf
CVE ID: CVE-2022-43110 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-22T20:25:23.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting dow
to being able to configure operating system commands that should run if the system detects a connected UPS shutting down. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ready2disclose.com/vpow-31491-43110/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05
CVE ID: CVE-2022-43117 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T19:55:36.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Name, Username, Description and Site Feature parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1ZmAuKMVzUpL8pt5KXQJk8IyPECoVP9xw/view?usp=sharing - https://github.com/RashidKhanPathan/CVE-2022-43117