Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28018 State: PUBLISHED Published: 2022-04-21T19:05:25 Last Updated: 2024-08-03T05:41:11.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_m/README.md
CVE ID: CVE-2022-28019 State: PUBLISHED Published: 2022-04-21T19:05:24 Last Updated: 2024-08-03T05:41:11.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_n/README.md
CVE ID: CVE-2022-28020 State: PUBLISHED Published: 2022-04-21T19:05:23 Last Updated: 2024-08-03T05:41:11.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_o/README.md
CVE ID: CVE-2022-28021 State: PUBLISHED Published: 2022-04-21T19:05:23 Last Updated: 2024-08-03T05:41:11.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/purchase-order-management-system/RCE-1.md
CVE ID: CVE-2022-28022 State: PUBLISHED Published: 2022-04-21T19:05:23 Last Updated: 2024-08-03T05:41:11.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/purchase-order-management-system/SQLi-1.md
CVE ID: CVE-2022-28023 State: PUBLISHED Published: 2022-04-21T19:05:22 Last Updated: 2024-08-03T05:41:11.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/purchase-order-management-system/SQLi-2.md
CVE ID: CVE-2022-28024 State: PUBLISHED Published: 2022-04-21T19:05:21 Last Updated: 2024-08-03T05:41:11.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Student-Grading-System/SQLi-1.md
CVE ID: CVE-2022-28025 State: PUBLISHED Published: 2022-04-21T19:05:21 Last Updated: 2024-08-03T05:41:11.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Student-Grading-System/SQLi-2.md
CVE ID: CVE-2022-28026 State: PUBLISHED Published: 2022-04-21T19:05:20 Last Updated: 2024-08-03T05:41:11.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Student-Grading-System/SQLi-3.md
CVE ID: CVE-2022-28028 State: PUBLISHED Published: 2022-04-21T19:05:17 Last Updated: 2024-08-03T05:41:11.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Simple-Real-Estate-Portal-System/SQLi-1.md
CVE ID: CVE-2022-28029 State: PUBLISHED Published: 2022-04-21T19:05:16 Last Updated: 2024-08-03T05:41:11.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Simple-Real-Estate-Portal-System/SQLi-2.md
CVE ID: CVE-2022-28030 State: PUBLISHED Published: 2022-04-21T19:05:16 Last Updated: 2024-08-03T05:41:11.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_estate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Simple-Real-Estate-Portal-System/SQLi-3.md
CVE ID: CVE-2022-28032 State: PUBLISHED Published: 2022-04-12T15:14:24 Last Updated: 2024-08-03T05:41:11.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thedigicraft/Atom.CMS/issues/263
CVE ID: CVE-2022-28033 State: PUBLISHED Published: 2022-04-12T15:16:03 Last Updated: 2024-08-03T05:41:11.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thedigicraft/Atom.CMS/issues/259
CVE ID: CVE-2022-28034 State: PUBLISHED Published: 2022-04-12T15:17:15 Last Updated: 2024-08-03T05:41:11.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thedigicraft/Atom.CMS/issues/261
CVE ID: CVE-2022-28035 State: PUBLISHED Published: 2022-04-12T15:18:29 Last Updated: 2024-08-03T05:41:11.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thedigicraft/Atom.CMS/issues/260
CVE ID: CVE-2022-28036 State: PUBLISHED Published: 2022-04-12T15:19:34 Last Updated: 2024-08-03T05:41:11.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thedigicraft/Atom.CMS/issues/262
CVE ID: CVE-2022-28041 State: PUBLISHED Published: 2022-04-15T00:00:00 Last Updated: 2024-08-03T05:41:11.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/1292 - https://github.com/nothings/stb/pull/1297 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I4HXIWU5HBOADXZVMREHT4YTO5WVYXEQ/ - https://lists.fedoraproject.org/a
package-announce%40lists.fedoraproject.org/message/I4HXIWU5HBOADXZVMREHT4YTO5WVYXEQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FXLM5XL77SNH4IPTSXOQD7XL4E2EMIN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXX76TJMZBPN3NU542MGN6B7C7QHRFGB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIRW5D4CJIDS6FHOGHSS42SSDDKQMXPN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEQGDVH43YW7AG7TRU2CTU5TMIYP27WP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ge/SEQGDVH43YW7AG7TRU2CTU5TMIYP27WP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52ZIQAFEG7A6TO526OJ7OA4GSEZQ2WEG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHTD76NDEN77KCPI3XGGK2VVSA25WWEG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2G6JJJQ5JABTPF5H2L5FQGLILYLIGPW6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMBCMJGAZRQS55SNECUWZSC5URVLEZ5R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J72YJQ3R5MG23GECPUCLAWPPZ6TZPG7U
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J72YJQ3R5MG23GECPUCLAWPPZ6TZPG7U/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE ID: CVE-2022-28042 State: PUBLISHED Published: 2022-04-15T00:00:00 Last Updated: 2024-08-03T05:41:11.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/pull/1297 - https://github.com/nothings/stb/issues/1289 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I4HXIWU5HBOADXZVMREHT4YTO5WVYXEQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FXLM5XL77SNH4IPTSXOQD7XL4E2EMIN
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FXLM5XL77SNH4IPTSXOQD7XL4E2EMIN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMBCMJGAZRQS55SNECUWZSC5URVLEZ5R/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE ID: CVE-2022-28044 State: PUBLISHED Published: 2022-04-15T13:06:35 Last Updated: 2024-08-03T05:41:11.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/216 - https://github.com/ckolivas/lrzip/commit/5faf80cd53ecfd16b636d653483144cd12004f46 - https://lists.debian.org/debian-lts-announce/2022/05/msg00016.html - https://www.debian.org/security/2022/dsa-5145
CVE ID: CVE-2022-28048 State: PUBLISHED Published: 2022-04-15T13:06:36 Last Updated: 2024-08-03T05:41:11.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/pull/1297 - https://github.com/nothings/stb/issues/1293 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I4HXIWU5HBOADXZVMREHT4YTO5WVYXEQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FXLM5XL77SNH4IPTSXOQD7XL4E
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FXLM5XL77SNH4IPTSXOQD7XL4E2EMIN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMBCMJGAZRQS55SNECUWZSC5URVLEZ5R/
CVE ID: CVE-2022-28049 State: PUBLISHED Published: 2022-04-15T13:06:37 Last Updated: 2024-08-03T05:41:11.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/473 - https://github.com/nginx/njs/commit/f65981b0b8fcf02d69a40bc934803c25c9f607ab - https://security.netapp.com/advisory/ntap-20220519-0008/
CVE ID: CVE-2022-28051 State: PUBLISHED Published: 2022-06-06T22:17:40 Last Updated: 2024-08-03T05:41:11.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/seeddms/code/ci/6fc17be5d95e8f00fbe5c124c4acd377fa2ce69d/ - https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/blob/main/CVE-2022-28051/README.md - https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-202
lob/main/CVE-2022-28051/README.md - https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-2022-28051
CVE ID: CVE-2022-28052 State: PUBLISHED Published: 2022-04-13T14:17:10 Last Updated: 2024-08-03T05:41:11.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/miansen/Roothub/tree/v2.6 - https://github.com/Hyperkopite/Roothub_vulns/blob/main/arbitrary%20file%20upload.md
CVE ID: CVE-2022-28053 State: PUBLISHED Published: 2022-04-25T12:43:11 Last Updated: 2024-08-03T05:41:11.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/typemill/typemill/issues/325
CVE ID: CVE-2022-28054 State: PUBLISHED Published: 2022-05-02T13:33:57 Last Updated: 2024-08-03T05:41:11.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value. Additional Analyst Notes: - CVE Program Container: References: - https://www.vandyke.com/support/advisory/2022/02/remote-execution-via-triggers.html
CVE ID: CVE-2022-28055 State: PUBLISHED Published: 2022-05-04T02:49:36 Last Updated: 2024-08-03T05:41:11.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/4e260b170e17705c4c9ccf787be7711b63a40868
CVE ID: CVE-2022-28056 State: PUBLISHED Published: 2022-05-02T13:36:20 Last Updated: 2024-08-03T05:41:11.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gongfuxiang/shopxo/issues/66
CVE ID: CVE-2022-28058 State: PUBLISHED Published: 2022-04-26T20:29:27 Last Updated: 2024-08-03T05:41:11.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Verytops/verydows/issues/20 - https://github.com/zhendezuile/bug_report/blob/main/bug_c
CVE ID: CVE-2022-28059 State: PUBLISHED Published: 2022-04-26T20:29:27 Last Updated: 2024-08-03T05:41:11.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Verytops/verydows/issues/21 - https://github.com/zhendezuile/bug_report/blob/main/bug_d
CVE ID: CVE-2022-28060 State: PUBLISHED Published: 2022-04-28T19:35:07 Last Updated: 2024-08-03T05:41:11.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JiuBanSec/CVE/blob/main/VictorCMS%20SQL.md - https://github.com/VictorAlagwu/CMSsite - https://github.com/JiuBanSec/CVE_LIST/blob/main/CVE-2022-28060/CVE-2022-28060.pdf
CVE ID: CVE-2022-28062 State: PUBLISHED Published: 2022-04-04T13:18:00 Last Updated: 2024-08-03T05:41:11.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20Upload%20%2B%20RCE/POC.md - https://hackmd.io/DUiTnVpLSVKihcyPloLdPg
CVE ID: CVE-2022-28063 State: PUBLISHED Published: 2022-04-04T13:18:00 Last Updated: 2024-08-03T05:41:11.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Simple%20Bakery%20Shop%20Management%20System%20File%20Disclosure/POC.md - https://hackmd.io/yCbEEV9QSHC9pIc75LziNQ
CVE ID: CVE-2022-28066 State: REJECTED Published: 2022-05-04T13:22:40 Last Updated: 2022-06-13T17:30:06 Description: No description available.
CVE ID: CVE-2022-28067 State: PUBLISHED Published: 2022-05-04T13:21:24 Last Updated: 2024-08-03T05:41:11.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service (DoS) in the Sandbox via a crafted executable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandboxie-plus/Sandboxie/issues/1714
CVE ID: CVE-2022-28068 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:57:20.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/commit/637f4bd1af6752e28e0a9998e954e2e9ce6fa992
CVE ID: CVE-2022-28069 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:24:22.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/commit/49b0cebfdf0db9704e36f8a5533f1df6d3e2ed3a
CVE ID: CVE-2022-28070 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:33:56.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/commit/4aff1bb00224de4f5bc118f987dfd5d2fe3450d0
CVE ID: CVE-2022-28071 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:37:46.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/commit/65448811e5b9582a19cf631e03cfcaa025a92ef5
CVE ID: CVE-2022-28072 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:38:27.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/commit/027cd9b7274988bb1af866539ba6c2fa2ff63e45
CVE ID: CVE-2022-28073 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:37:10.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053
CVE ID: CVE-2022-28074 State: PUBLISHED Published: 2022-04-22T13:33:49 Last Updated: 2024-08-03T05:41:11.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/1769
CVE ID: CVE-2022-28076 State: PUBLISHED Published: 2022-05-04T13:18:30 Last Updated: 2024-08-03T05:41:11.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/likCodinG/seacms_vul/issues/1
CVE ID: CVE-2022-28077 State: PUBLISHED Published: 2022-05-11T13:53:41 Last Updated: 2024-08-03T05:41:11.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://home.com - https://github.com/bigzooooz/CVE-2022-28077
CVE ID: CVE-2022-28078 State: PUBLISHED Published: 2022-05-11T13:56:52 Last Updated: 2024-08-03T05:41:11.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://home.com - https://github.com/bigzooooz/CVE-2022-28078
CVE ID: CVE-2022-28079 State: PUBLISHED Published: 2022-05-05T15:31:57 Last Updated: 2024-08-03T05:41:11.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://code-projects.org/college-management-system-in-php-with-source-code/ - https://github.com/erengozaydin/College-Management-System-course_code-SQL-Injection-Authenticated - https://www.nu11secur1ty.com/2022/05/cve-2022-28079.html - http://packetstormsecurity.com/files/167131/College-Management-System-1.0-SQL-Injection.html