Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29684 State: PUBLISHED Published: 2022-05-26T13:27:44 Last Updated: 2024-08-03T06:26:06.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/33#issue-1209055493
CVE ID: CVE-2022-29685 State: PUBLISHED Published: 2022-05-26T13:27:45 Last Updated: 2024-08-03T06:26:06.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/32#issue-1209054307
CVE ID: CVE-2022-29686 State: PUBLISHED Published: 2022-05-26T13:27:46 Last Updated: 2024-08-03T06:26:06.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/29#issue-1209046027
CVE ID: CVE-2022-29687 State: PUBLISHED Published: 2022-05-26T13:27:47 Last Updated: 2024-08-03T06:26:06.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/30#issue-1209049714
CVE ID: CVE-2022-29688 State: PUBLISHED Published: 2022-05-26T13:27:48 Last Updated: 2024-08-03T06:26:06.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/27#issue-1209040138
CVE ID: CVE-2022-29689 State: PUBLISHED Published: 2022-05-26T13:27:49 Last Updated: 2024-08-03T06:26:06.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/28#issue-1209044410
CVE ID: CVE-2022-29692 State: PUBLISHED Published: 2022-05-27T19:07:44 Last Updated: 2024-08-03T06:26:06.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unicorn-engine/unicorn/issues/1578
CVE ID: CVE-2022-29693 State: PUBLISHED Published: 2022-05-27T19:07:45 Last Updated: 2024-08-03T06:33:42.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unicorn-engine/unicorn/issues/1586 - https://github.com/unicorn-engine/unicorn/commit/469fc4c35a0cfabdbefb158e22d145f4ee6f77b9
CVE ID: CVE-2022-29694 State: PUBLISHED Published: 2022-05-27T19:07:46 Last Updated: 2024-08-03T06:33:41.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unicorn-engine/unicorn/issues/1588 - https://violentbinary.github.io/posts/2-simple-analysis-of-software-virtualization-of-memory-in-unicorn-engine/ - https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63 - https://github.com/unicorn-engine/unicorn/pull/1593/commits/6a879a082d4d67a5d13f1233ae0334cde0a7
9c4fef5dac004f07a2e63 - https://github.com/unicorn-engine/unicorn/pull/1593/commits/6a879a082d4d67a5d13f1233ae0334cde0a7f844 - https://github.com/unicorn-engine/unicorn/pull/1593/commits/31389e59457f304be3809f9679f91a42daa7ebaa
CVE ID: CVE-2022-29695 State: PUBLISHED Published: 2022-05-27T19:07:46 Last Updated: 2024-08-03T06:33:41.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unicorn-engine/unicorn/issues/1595 - https://github.com/unicorn-engine/unicorn/commit/5a79d7879ca3ee0ce684ad6576d8ac15e8d90fc7
CVE ID: CVE-2022-29700 State: PUBLISHED Published: 2022-04-27T02:47:13 Last Updated: 2024-08-03T06:33:41.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2022-03
CVE ID: CVE-2022-29701 State: PUBLISHED Published: 2022-04-27T02:47:11 Last Updated: 2024-08-03T06:33:41.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2022-04
CVE ID: CVE-2022-29704 State: PUBLISHED Published: 2022-06-02T16:04:46 Last Updated: 2024-08-03T06:33:41.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://browsbox.com - https://www.youtube.com/watch?v=ECTu2QVAl1c
CVE ID: CVE-2022-29709 State: PUBLISHED Published: 2022-07-25T11:32:20 Last Updated: 2024-08-03T06:33:42.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the username and password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://clink.com - http://communilink.com - https://packetstormsecurity.com/files/167240/CLink-Office-2.0-SQL-Injection.html
CVE ID: CVE-2022-29710 State: PUBLISHED Published: 2022-05-24T23:56:15 Last Updated: 2024-08-03T06:33:42.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/f7b35619a1c4b0893754594c7d5870fd599a0f9c
CVE ID: CVE-2022-29711 State: PUBLISHED Published: 2022-05-31T13:14:49 Last Updated: 2024-08-03T06:33:42.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/pull/13931 - https://github.com/librenms/librenms/commit/cc6112b8fb36039b862b42d86eb79ef7ee89d31b
CVE ID: CVE-2022-29712 State: PUBLISHED Published: 2022-05-31T13:14:52 Last Updated: 2024-08-03T06:33:41.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/pull/13932
CVE ID: CVE-2022-29718 State: PUBLISHED Published: 2022-06-02T00:00:00 Last Updated: 2024-08-03T06:33:42.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caddyserver/caddy/pull/4499 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CP2VIUT5IKA3OKM6YWA5LTLJ2GTEIH7C/
CVE ID: CVE-2022-29720 State: PUBLISHED Published: 2022-05-26T12:55:03 Last Updated: 2024-08-03T06:33:41.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/1
CVE ID: CVE-2022-29721 State: PUBLISHED Published: 2022-05-26T12:55:08 Last Updated: 2024-08-03T06:33:42.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/2
CVE ID: CVE-2022-29725 State: PUBLISHED Published: 2022-05-31T13:31:32 Last Updated: 2024-08-03T06:33:42.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Creatiwity/wityCMS/issues/161
CVE ID: CVE-2022-29727 State: PUBLISHED Published: 2022-05-11T12:57:58 Last Updated: 2024-08-03T06:33:42.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup parameter. Additional Analyst Notes: - CVE Program Container: References: - https://surveysparrow.com/ - https://github.com/haxpunk1337/Enterprise-Survey-Software/blob/main/Enterprise-Survey-Software%202022 - http://packetstormsecurity.com/files/167187/Survey-Sparrow-Enterprise-Survey-Software-2022-Cross-Site-Scripting.html
CVE ID: CVE-2022-29728 State: PUBLISHED Published: 2022-05-11T12:59:32 Last Updated: 2024-08-03T06:33:42.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS) vulnerability in the test parameter. Additional Analyst Notes: - CVE Program Container: References: - https://surveysparrow.com/ - https://github.com/haxpunk1337/Enterprise-Survey-Software/blob/main/Enterprise-Survey-Software%202022
CVE ID: CVE-2022-29729 State: PUBLISHED Published: 2022-05-27T12:56:14 Last Updated: 2024-08-03T06:33:42.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords that are accessible to unauthenticated attackers via the webUI login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.verizon.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5701.php
CVE ID: CVE-2022-29730 State: PUBLISHED Published: 2022-05-27T12:56:14 Last Updated: 2024-08-03T06:33:42.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.pusr.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5705.php
CVE ID: CVE-2022-29731 State: PUBLISHED Published: 2022-05-27T12:56:15 Last Updated: 2024-08-03T06:33:42.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users. Additional Analyst Notes: - CVE Program Container: References: - https://www.ict.co/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5700.php
CVE ID: CVE-2022-29732 State: PUBLISHED Published: 2022-05-27T12:56:16 Last Updated: 2024-08-03T06:33:42.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.deltacontrols.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5703.php
CVE ID: CVE-2022-29733 State: PUBLISHED Published: 2022-05-27T12:56:17 Last Updated: 2024-08-03T06:33:42.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.deltacontrols.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5704.php
CVE ID: CVE-2022-29734 State: PUBLISHED Published: 2022-05-27T12:56:18 Last Updated: 2024-08-03T06:33:42.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.ict.co/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5699.php
CVE ID: CVE-2022-29735 State: PUBLISHED Published: 2022-05-27T12:56:19 Last Updated: 2024-08-03T06:33:42.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.deltacontrols.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5702.php
CVE ID: CVE-2022-29738 State: PUBLISHED Published: 2022-05-12T15:35:41 Last Updated: 2024-08-03T06:33:42.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-2.md
CVE ID: CVE-2022-29739 State: PUBLISHED Published: 2022-05-12T15:34:26 Last Updated: 2024-08-03T06:33:42.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-3.md
CVE ID: CVE-2022-29741 State: PUBLISHED Published: 2022-05-12T15:32:04 Last Updated: 2024-08-03T06:33:42.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-4.md
CVE ID: CVE-2022-29745 State: PUBLISHED Published: 2022-05-12T15:27:34 Last Updated: 2024-08-03T06:33:42.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-5.md
CVE ID: CVE-2022-29746 State: PUBLISHED Published: 2022-05-12T15:26:28 Last Updated: 2024-08-03T06:33:42.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-6.md
CVE ID: CVE-2022-29747 State: PUBLISHED Published: 2022-05-12T14:36:52 Last Updated: 2024-08-03T06:33:42.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-2.md
CVE ID: CVE-2022-29748 State: PUBLISHED Published: 2022-05-12T14:34:59 Last Updated: 2024-08-03T06:33:42.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-1.md
CVE ID: CVE-2022-29749 State: PUBLISHED Published: 2022-05-12T14:33:17 Last Updated: 2024-08-03T06:33:42.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-4.md
CVE ID: CVE-2022-29750 State: PUBLISHED Published: 2022-05-12T14:31:52 Last Updated: 2024-08-03T06:33:42.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-3.md
CVE ID: CVE-2022-29751 State: PUBLISHED Published: 2022-05-12T14:30:16 Last Updated: 2024-08-03T06:33:42.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-5.md
CVE ID: CVE-2022-29767 State: PUBLISHED Published: 2022-06-03T00:43:54 Last Updated: 2024-08-03T06:33:42.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service (DoS) via high CPU usage due to a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adbyby/Files/issues/2
CVE ID: CVE-2022-29770 State: PUBLISHED Published: 2022-06-03T20:03:59 Last Updated: 2024-08-03T06:33:42.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuxueli/xxl-job/issues/2836
CVE ID: CVE-2022-29773 State: PUBLISHED Published: 2022-06-03T20:11:07 Last Updated: 2024-08-03T06:33:42.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set. Additional Analyst Notes: - CVE Program Container: References: - https://edugit.org/AlekSIS/official/AlekSIS-Core/-/issues/688 - https://aleksis.org/2022-05-04_advisory.html
CVE ID: CVE-2022-29774 State: PUBLISHED Published: 2022-06-21T14:00:19 Last Updated: 2024-08-03T06:33:42.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b - https://github.com/securylight/CVES_write_ups - https://github.com/securylight/CVES_write_ups/blob/main/iSpy_connect.pdf
CVE ID: CVE-2022-29775 State: PUBLISHED Published: 2022-06-21T13:59:16 Last Updated: 2024-08-03T06:33:42.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b - https://github.com/securylight/CVES_write_ups
CVE ID: CVE-2022-29776 State: PUBLISHED Published: 2022-06-01T12:51:10 Last Updated: 2024-08-03T06:33:42.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#601 - https://github.com/ONLYOFFICE/core/commit/88cf60a3ed4a2b40d71a1c2ced72fa3902a30967 - https://github.com/moehw/poc_exploits/tree/master/CVE-2022-29776
CVE ID: CVE-2022-29777 State: PUBLISHED Published: 2022-06-01T12:51:11 Last Updated: 2024-08-03T06:33:42.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#601 - https://github.com/ONLYOFFICE/core/commit/b17d5e860f30e8be2caeb0022b63be4c76660178 - https://github.com/moehw/poc_exploits/tree/master/CVE-2022-29777
CVE ID: CVE-2022-29778 State: PUBLISHED Published: 2022-06-03T20:19:24 Last Updated: 2024-10-28T20:55:50.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/TyeYeah/DIR-890L-1.20-RCE
CVE ID: CVE-2022-29779 State: PUBLISHED Published: 2022-05-27T13:13:47 Last Updated: 2024-08-03T06:33:42.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/485 - https://github.com/nginx/njs/commit/2e00e95473861846aa8538be87db07699d9f676d