Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-35148 State: PUBLISHED Published: 2022-08-17T20:56:34 Last Updated: 2024-08-03T09:29:17.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/931
CVE ID: CVE-2022-35150 State: PUBLISHED Published: 2022-08-22T15:15:50 Last Updated: 2024-08-03T09:29:17.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baijicms v4 was discovered to contain an arbitrary file upload vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/To-LingJing/CVE-Issues/blob/main/baijiacms/upload_file.md - https://gitee.com/cui-yiwei/cve-number/blob/master/images/Cve%20number.md
CVE ID: CVE-2022-35151 State: PUBLISHED Published: 2022-08-17T21:13:14 Last Updated: 2024-08-03T09:29:17.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kekingcn/kkFileView/issues/366
CVE ID: CVE-2022-35153 State: PUBLISHED Published: 2022-08-18T04:16:34 Last Updated: 2024-08-03T09:29:17.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/de22a9121a091e7fedddff22329dd6149dc5ab28 - https://github.com/fusionpbx/fusionpbx/commit/07679fe80dadb08ca23d0fc16c0f832348bfec78
CVE ID: CVE-2022-35154 State: PUBLISHED Published: 2022-08-18T04:28:08 Last Updated: 2024-08-03T09:29:17.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/secf0ra11/secf0ra11.github.io/blob/main/Shopro_SQL_injection.md
CVE ID: CVE-2022-35155 State: PUBLISHED Published: 2022-09-30T18:10:11.000Z Last Updated: 2025-11-12T14:45:27.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://bus.com - https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html - https://github.com/shellshok3/Cross-Site-Scripting-XSS/blob/main/Bus%20Pass%20Management%20System%201.0.md
CVE ID: CVE-2022-35156 State: PUBLISHED Published: 2022-09-30T18:10:01.000Z Last Updated: 2025-11-12T14:47:36.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - https://www.exploit-db.com/exploits/50543 - http://bus.com - https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2022-35158 State: PUBLISHED Published: 2022-08-03T20:33:42 Last Updated: 2024-08-03T09:29:17.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a crafted lua script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Tencent/TscanCode/issues/65
CVE ID: CVE-2022-35161 State: PUBLISHED Published: 2022-08-03T20:33:43 Last Updated: 2024-08-03T09:29:17.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/collin80/GVRET/issues/27
CVE ID: CVE-2022-35162 State: PUBLISHED Published: 2022-08-05T20:13:41 Last Updated: 2024-08-03T09:29:17.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller.php?action=edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xysasa/bug_report/blob/main/vendors/campcodes.com/online-job-search-system/XSS.md
CVE ID: CVE-2022-35163 State: PUBLISHED Published: 2022-08-05T20:13:50 Last Updated: 2024-08-03T09:29:17.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /category/controller.php?action=edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chen-liyu/bug_report/blob/main/vendors/campcodes.com/online-job-search-system/XSS.md
CVE ID: CVE-2022-35164 State: PUBLISHED Published: 2022-08-18T04:49:05 Last Updated: 2024-08-03T09:29:17.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/497
CVE ID: CVE-2022-35165 State: PUBLISHED Published: 2022-08-18T04:49:05 Last Updated: 2024-08-03T09:29:17.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/712
CVE ID: CVE-2022-35166 State: PUBLISHED Published: 2022-08-18T04:49:06 Last Updated: 2024-08-03T09:29:17.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/76
CVE ID: CVE-2022-35167 State: PUBLISHED Published: 2022-08-19T01:03:05 Last Updated: 2024-08-03T09:29:17.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions. Additional Analyst Notes: - CVE Program Container: References: - http://printix.com - http://printixnet.com - https://www.pentagrid.ch/en/blog/vulnerabilities-in-printix-cloud-print-management/
CVE ID: CVE-2022-35168 State: PUBLISHED Published: 2022-07-12T20:27:54 Last Updated: 2024-08-03T09:29:17.420Z Vendors: SAP SE Products: SAP Business one Problem Types: CWE-611 Description: Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3211203
CVE ID: CVE-2022-35169 State: PUBLISHED Published: 2022-07-12T20:28:08 Last Updated: 2024-08-03T09:29:17.419Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (LCM) Problem Types: CWE-200 Description: SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabling the attacker to modify the password or import the file into another system causing high impact on confidentiality but a limited impact on the availability and integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.c
ity and integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3194361
CVE ID: CVE-2022-35170 State: PUBLISHED Published: 2022-07-12T20:28:02 Last Updated: 2024-08-03T09:29:17.379Z Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-79 Description: SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchp
ntainer: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3208819
CVE ID: CVE-2022-35171 State: PUBLISHED Published: 2022-07-12T20:28:13 Last Updated: 2024-08-03T09:29:17.455Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-20 Description: When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sa
rences: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3220746
CVE ID: CVE-2022-35172 State: PUBLISHED Published: 2022-07-12T20:28:18 Last Updated: 2024-08-03T09:29:17.458Z Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-79 Description: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3207902
CVE ID: CVE-2022-35173 State: PUBLISHED Published: 2022-08-18T05:08:54 Last Updated: 2024-08-03T09:29:17.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation. Additional Analyst Notes: - CVE Program Container: References: - http://hg.nginx.org/njs/rev/b7c4e0f714a9 - https://github.com/nginx/njs/issues/553 - https://github.com/nginx/njs/commit/404553896792b8f5f429dc8852d15784a59d8d3e
CVE ID: CVE-2022-35174 State: PUBLISHED Published: 2022-08-18T17:27:17 Last Updated: 2024-08-03T09:29:17.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Kirby's Starterkit v3.7.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tags field. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/www-community/attacks/xss/ - https://www.youtube.com/watch?v=0lngc_zPTSg
CVE ID: CVE-2022-35175 State: PUBLISHED Published: 2022-08-18T17:34:58 Last Updated: 2024-08-03T09:29:17.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /blotter/blotter.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1770746252/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/SQLi-1.md
CVE ID: CVE-2022-35191 State: PUBLISHED Published: 2022-08-22T23:35:26 Last Updated: 2024-08-03T09:29:17.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://wireless.com - https://pastebin.com/wD1UfaZz
CVE ID: CVE-2022-35192 State: PUBLISHED Published: 2022-08-25T23:22:28 Last Updated: 2024-08-03T09:29:17.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to Login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://wireless.com - https://pastebin.com/upHp001e
CVE ID: CVE-2022-35193 State: PUBLISHED Published: 2022-09-16T15:59:19 Last Updated: 2024-08-03T09:29:17.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HuangYuHsiangPhone/CVEs/ - https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35193
CVE ID: CVE-2022-35194 State: PUBLISHED Published: 2022-09-16T20:30:27 Last Updated: 2024-08-03T09:29:17.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HuangYuHsiangPhone/CVEs/ - https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35194
CVE ID: CVE-2022-35195 State: PUBLISHED Published: 2022-09-16T15:36:53 Last Updated: 2024-08-03T09:29:17.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HuangYuHsiangPhone/CVEs/ - https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35195
CVE ID: CVE-2022-35196 State: PUBLISHED Published: 2022-09-20T15:52:42.000Z Last Updated: 2025-05-29T13:37:48.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HuangYuHsiangPhone/CVEs/ - https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35196
CVE ID: CVE-2022-35198 State: PUBLISHED Published: 2022-08-18T05:35:40 Last Updated: 2024-08-03T09:29:17.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contract Management System v2.0 contains a weak default password which gives attackers to access database connection information. Additional Analyst Notes: - CVE Program Container: References: - https://laolisafe.com/contract-management-system2-0
CVE ID: CVE-2022-35201 State: PUBLISHED Published: 2022-08-19T14:25:08 Last Updated: 2024-08-03T09:29:17.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://tenda-ac18.com - https://www.tendacn.com/default.html - http://124.222.176.39/21f93b5e3b39b22b6df1e6a9c61ed70d54e8378bbeacd844efff921b9a1a8624/index.html
CVE ID: CVE-2022-35202 State: PUBLISHED Published: 2025-02-11T00:00:00.000Z Last Updated: 2025-02-13T17:28:35.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the private keys used for signing SAML Authn requests. The underlying issue is a Java keystore that may become accessible and downloadable via WebDAV. This keystore is protected with a low-complexity, auto-generated password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.sitevision.se/archives/release-notes/release-notes/2022-05-06-release-notes-sitev
hment: References: - https://developer.sitevision.se/archives/release-notes/release-notes/2022-05-06-release-notes-sitevision-10.3 - https://www.shelltrail.com/research/how-auto-generated-passwords-in-sitevision-leads-to-signing-key-leakage-cve-2022-35202/
CVE ID: CVE-2022-35203 State: PUBLISHED Published: 2022-08-23T12:34:01 Last Updated: 2024-08-03T09:29:17.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information. Additional Analyst Notes: - CVE Program Container: References: - http://trendnet.com - http://tv-ip572pi.com - https://medium.com/%40shrutukapoor25/cve-2022-35203-2372a0728279
CVE ID: CVE-2022-35204 State: PUBLISHED Published: 2022-08-18T18:15:21 Last Updated: 2024-08-03T09:29:17.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vitejs/vite/issues/8498 - https://github.com/vitejs/vite/releases/tag/v2.9.13 - https://github.com/vitejs/vite/releases/tag/v3.0.0-beta.4
CVE ID: CVE-2022-35205 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-29T15:11:27.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29289 - https://security.netapp.com/advisory/ntap-20231006-0010/
CVE ID: CVE-2022-35206 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:33:16.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29290
CVE ID: CVE-2022-35212 State: PUBLISHED Published: 2022-08-18T19:30:23 Last Updated: 2024-08-03T09:29:17.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error(). Additional Analyst Notes: - CVE Program Container: References: - https://forums.oscommerce.com/topic/497119-potencial-xss-vulnerability/?tab=comments#comment-1823082
CVE ID: CVE-2022-35213 State: PUBLISHED Published: 2022-08-18T19:30:24 Last Updated: 2024-08-03T09:29:17.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerability via the function base_url() at /blog/blogpublish.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/219 - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/56465fb6a83aaa934a76615a8579100938b790a1
CVE ID: CVE-2022-35216 State: PUBLISHED Published: 2022-08-04T09:15:30.441616Z Last Updated: 2024-09-16T22:35:59.865Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ITPison Products: OMICARD EDM Problem Types: CWE-22 Description: OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6374-1c6c9-1.html - https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f
CVE ID: CVE-2022-35217 State: PUBLISHED Published: 2022-08-02T02:55:28.143245Z Last Updated: 2024-09-16T20:53:13.282Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NHI Products: card’s web service component Problem Types: CWE-787 Description: The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6353-31470
service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6353-31470-1.html
CVE ID: CVE-2022-35218 State: PUBLISHED Published: 2022-08-02T15:20:04.675625Z Last Updated: 2024-09-16T19:15:40.514Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NHI Products: card’s web service component Problem Types: CWE-787 Description: The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6354-1cf61-1.html
CVE ID: CVE-2022-35219 State: PUBLISHED Published: 2022-08-02T15:20:19.164673Z Last Updated: 2024-09-16T23:51:28.770Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NHI Products: card’s web service component Problem Types: CWE-787 Description: The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6355-3bdab-1.html
CVE ID: CVE-2022-35220 State: PUBLISHED Published: 2022-08-02T15:20:32.031324Z Last Updated: 2024-09-17T03:33:42.342Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: TEAMPLUS TECHNOLOGY INC. Products: Teamplus Pro Problem Types: CWE-770 Description: Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal termination of this client’s Teamplus Pro application. Additional Analyst Notes: - CVE Program Container: References: - https://ww
n of this client’s Teamplus Pro application. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6359-f5d1c-1.html