Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3097 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:13:11.951Z Vendors: Unknown Products: Plugin LBstopattack Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin's protections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9ebb8318-ebaf-4de7-b337-c91327685a43
CVE ID: CVE-2022-3098 State: PUBLISHED Published: 2022-09-26T12:35:43.000Z Last Updated: 2025-05-22T14:27:22.999Z Vendors: Unknown Products: Login Block IPs Problem Types: CWE-352 Description: The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f4fcf41b-c05d-4236-8e67-a52d0f94c80a
CVE ID: CVE-2022-3099 State: PUBLISHED Published: 2022-09-03T00:00:00.000Z Last Updated: 2025-11-03T20:34:51.636Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0360. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/403210c7-6cc7-4874-8934-b57f88bd4f5e - https://github.com/vim/vim/commit/35d21c6830fc2d68aca838424a0e786821c5891c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DVWBI4BVTBUMNW4NMB3WZZDQJBKIGXI3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LLK2RMZEECKKWUQK7J46D2FQZOXFQLTC/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3100 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-03T19:26:10.275Z Vendors: n/a Products: Red Hat OpenStack Platform Problem Types: CWE-305 Description: A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-3100
CVE ID: CVE-2022-3101 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:42:13.130Z Vendors: n/a Products: tripleo-ansible Problem Types: CWE-22 Description: A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-3101
CVE ID: CVE-2022-3103 State: PUBLISHED Published: 2022-09-26T14:51:24.000Z Last Updated: 2025-05-21T19:13:39.742Z Vendors: n/a Products: Linux Problem Types: CWE-193 Description: off-by-one in io_uring module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/releases/tag/v6.0-rc3
CVE ID: CVE-2022-3104 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:59:16.005Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=4a9800c81d2f34afb66b4b42e0330ae8298019a2 - https://bugzilla.redhat.com/show_bug.cgi?id=2153062
CVE ID: CVE-2022-3105 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T14:19:54.518Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=7694a7de22c53a312ea98960fcafc6ec62046531 - https://bugzilla.redhat.com/show_bug.cgi?id=2153067
CVE ID: CVE-2022-3106 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:42:23.466Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=407ecd1bd726f240123f704620d46e285ff30dd9 - https://bugzilla.redhat.com/show_bug.cgi?id=2153066
CVE ID: CVE-2022-3107 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T14:19:06.758Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=886e44c9298a6b428ae046e2fa092ca52e822e6a - https://bugzilla.redhat.com/show_bug.cgi?id=2153060
CVE ID: CVE-2022-3108 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T14:18:18.113Z Vendors: n/a Products: Kernel Problem Types: CWE-252 Description: An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=abfaf0eee97925905e742aa3b0b72e04a918fa9e - https://bugzilla.redhat.com/show_bug.cgi?id=2153052
CVE ID: CVE-2022-3109 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-16T14:45:10.879Z Vendors: n/a Products: FFmpeg Problem Types: CWE-476 Description: An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FFmpeg/FFmpeg/commit/656cb0450aeb73b25d7d26980af342b37ac4c568 - https://bugzilla.redhat.com/show_bug.cgi?id=2153551 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
.com/show_bug.cgi?id=2153551 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOMB6WRUC55VWV25IKJTV22KARBUGWGQ/ - https://www.debian.org/security/2023/dsa-5394 - https://lists.debian.org/debian-lts-announce/2023/06/msg00016.html
CVE ID: CVE-2022-3110 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T14:12:32.598Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of the return value of rtw_alloc_hwxmits() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=f94b47c6bde624d6c07f43054087607c52054a95 - https://bugzilla.redhat.com/show_bug.cgi?id=2153055
CVE ID: CVE-2022-3111 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T14:11:40.074Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=6dee930f6f6776d1e5a7edf542c6863b47d9f078 - https://bugzilla.redhat.com/show_bug.cgi?id=2153059
CVE ID: CVE-2022-3112 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T14:10:40.153Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=c8c80c996182239ff9b05eda4db50184cf3b2e99 - https://bugzilla.redhat.com/show_bug.cgi?id=2153068
CVE ID: CVE-2022-3113 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:56:46.160Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=e25a89f743b18c029bfbe5e1663ae0c7190912b0 - https://bugzilla.redhat.com/show_bug.cgi?id=2153053
CVE ID: CVE-2022-3114 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:55:33.529Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=ed713e2bc093239ccd380c2ce8ae9e4162f5c037 - https://bugzilla.redhat.com/show_bug.cgi?id=2153054
CVE ID: CVE-2022-3115 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:54:25.930Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc() and will cause the null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=73c3ed7495c67b8fbdc31cf58e6ca8757df31a33 - https://bugzilla.redhat.com/show_bug.cgi?id=2153058
CVE ID: CVE-2022-3116 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T19:11:43.894Z Vendors: n/a Products: Heimdal Software Kerberos Problem Types: CWE-476 Description: The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/730793 - https://security.netapp.com/advisory/ntap-20230505-0010/
CVE ID: CVE-2022-3117 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2022-3118 State: PUBLISHED Published: 2022-09-04T08:50:10.000Z Last Updated: 2025-04-14T15:59:11.307Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Sourcecodehero Products: ERP System Project Problem Types: CWE-89 Description: A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-207845 was assigned to this vulnerability. Additional Analyst Notes: -
o the public and may be used. The identifier VDB-207845 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s2.loli.net/2022/09/02/N4FESXldmKWvQOw.png - https://vuldb.com/?id.207845
CVE ID: CVE-2022-3119 State: PUBLISHED Published: 2022-09-26T12:35:44.000Z Last Updated: 2025-05-21T19:16:49.270Z Vendors: Unknown Products: OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) Problem Types: CWE-287, CWE-352 Description: The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could allow unauthenticated attackers to update them and change the OAuth endpoints to ones they controls, allowing them to then be authenticated as admin if they know the correct email address Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/55b8
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/55b83cee-a8a5-4f9d-a976-a3eed9a558e5
CVE ID: CVE-2022-3120 State: PUBLISHED Published: 2022-09-05T06:45:12.000Z Last Updated: 2025-04-14T15:58:59.565Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument user_name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulne
launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-207847. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joinia/webray.com.cn/blob/main/Clinic%27s-Patient-Management-System/cpms.md - https://vuldb.com/?id.207847
CVE ID: CVE-2022-3121 State: PUBLISHED Published: 2022-09-05T13:50:11.000Z Last Updated: 2025-04-15T13:47:38.493Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Online Employee Leave Management System Problem Types: CWE-352 Description: A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The identifier VDB-207853 was assigned to this vulnerability. Additional Analyst Notes: - C
ck can be launched remotely. The identifier VDB-207853 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.207853
CVE ID: CVE-2022-3122 State: PUBLISHED Published: 2022-09-05T13:50:12.000Z Last Updated: 2025-04-15T13:47:30.021Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicine_details.php. The manipulation of the argument medicine leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207854 is the identifier assigned to thi
hed remotely. The exploit has been disclosed to the public and may be used. VDB-207854 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joinia/webray.com.cn/blob/main/Clinic%27s-Patient-Management-System/cpmssql.md - https://vuldb.com/?id.207854
CVE ID: CVE-2022-3123 State: PUBLISHED Published: 2022-09-05T10:10:09 Last Updated: 2024-08-03T01:00:10.525Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: splitbrain Products: splitbrain/dokuwiki Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d72a979b-57db-4201-9500-66b49a5c1345 - https://github.com/splitbrain/dokuwiki/commit/63e9a247c072008a031f9db39fa496f6aca489b6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LLNV7GYZPGLIKB
a489b6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LLNV7GYZPGLIKBLISVQUREQXE3WHI5R2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XIWZXLDU7SUS2FANXQRCHJY3F3SWT27E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZQTVHRBEVMSKQESNFLU7MAUAB3R3PG2/
CVE ID: CVE-2022-3124 State: PUBLISHED Published: 2022-10-03T13:45:25 Last Updated: 2024-08-03T01:00:10.519Z Vendors: Unknown Products: Frontend File Manager Plugin Problem Types: CWE-862 Description: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608
CVE ID: CVE-2022-3125 State: PUBLISHED Published: 2022-10-03T13:45:26 Last Updated: 2024-08-03T01:00:10.419Z Vendors: Unknown Products: Frontend File Manager Plugin Problem Types: CWE-434 Description: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d3d9dc9a-226b-4f76-995e-e2af1dd6b17e
CVE ID: CVE-2022-3126 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T15:34:28.120Z Vendors: Unknown Products: Frontend File Manager Plugin Problem Types: CWE-352 Description: The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7db363bf-7bef-4d47-9963-c30d6fdd2fb8
CVE ID: CVE-2022-3127 State: PUBLISHED Published: 2022-09-05T12:50:09 Last Updated: 2024-08-03T01:00:10.534Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da - https://huntr.dev/bounties/6cea89d1-39dc-4023-82fa-821f566b841a
CVE ID: CVE-2022-3128 State: PUBLISHED Published: 2022-10-03T13:45:27 Last Updated: 2024-08-03T01:00:10.523Z Vendors: Unknown Products: Donation Thermometer Problem Types: CWE-79 Description: The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/97201998-1859-4428-9b81-9c2748806cf4
CVE ID: CVE-2022-3129 State: PUBLISHED Published: 2022-09-07T19:50:12.000Z Last Updated: 2025-04-15T13:47:22.638Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: codeprojects Products: Online Driving School Problem Types: CWE-434 Description: A vulnerability was found in codeprojects Online Driving School. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registration.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-207872. Additional Analyst Notes: - CVE Program Conta
ublic and may be used. The identifier of this vulnerability is VDB-207872. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KingBridgeSS/Online_Driving_School_Project_In_PHP_With_Source_Code_Vulnerabilities/blob/main/arbitrary_file_upload.md - https://vuldb.com/?id.207872
CVE ID: CVE-2022-3130 State: PUBLISHED Published: 2022-09-07T19:50:13.000Z Last Updated: 2025-04-14T15:58:51.548Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: codeprojects Products: Online Driving School Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-207873 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Co
nd may be used. The identifier VDB-207873 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KingBridgeSS/Online_Driving_School_Project_In_PHP_With_Source_Code_Vulnerabilities/blob/main/sql_injection.md - https://vuldb.com/?id.207873
CVE ID: CVE-2022-3131 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T15:47:31.963Z Vendors: Unknown Products: Search Logger – Know What Your Visitors Search Problem Types: CWE-89 Description: The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b6c62e53-ae49-4fe0-aed9-0c493fc4442d