Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45990 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:40:17.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/winston-dsouza/ecommerce-website
CVE ID: CVE-2022-45995 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:45:43.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn. This vulnerability can cause the web service not to restart or even execute arbitrary code. It is a different vulnerability from CVE-2022-2414. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bugfinder0/public_bug/tree/main/tenda/ax12/1
CVE ID: CVE-2022-45996 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:48:23.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bugfinder0/public_bug/tree/main/tenda/w20e/2
CVE ID: CVE-2022-45997 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:44:44.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bugfinder0/public_bug/tree/main/tenda/w20e/1
CVE ID: CVE-2022-46020 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:36:09.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: WBCE CMS v1.5.4 can implement getshell by modifying the upload file type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/10vexh/Vulnerability/blob/main/WBCE%20CMS%20v1.5.4%20getshell.pdf
CVE ID: CVE-2022-46021 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-18T18:53:50.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Howard512966/x-man-injection/blob/main/README.md - https://github.com/Howard512966/x-man-injection
CVE ID: CVE-2022-46025 State: PUBLISHED Published: 2024-01-10T00:00:00 Last Updated: 2024-09-03T20:38:47.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers to obtain Wi-Fi system information, such as Wi-Fi SSID and Wi-Fi password, without logging into the management page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pastebin.com/aan5jT40
CVE ID: CVE-2022-46047 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:55:18.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/categories_delete_sql_injection/categories_delete_sql_injection.md
CVE ID: CVE-2022-46051 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:49:38.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/view_all_comments_update/view_all_comments_update.MD
CVE ID: CVE-2022-46058 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:45:15.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-XSS/add_post_post_content/add_post_post_content.md
CVE ID: CVE-2022-46059 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:41:40.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-CSRF/add_user_csrf/add_user_csrf.md
CVE ID: CVE-2022-46061 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:08:29.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 is vulnerable to ClickJacking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-ClickJacking/registration_ClickJacking/registration_ClickJacking.md
CVE ID: CVE-2022-46062 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:06:43.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/Gym%20Management%20System/CSRF/delete_user/delete_user.md
CVE ID: CVE-2022-46070 State: PUBLISHED Published: 2024-03-11T00:00:00.000Z Last Updated: 2025-04-16T15:48:41.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://s3.amazonaws.com/geovision_downloads/TechNotice/CyberSecurity/Security_Advistory_ASManager-ASM-2022-11.pdf
CVE ID: CVE-2022-46071 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:33:46.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=5wit1Arzwxs&feature=youtu.be - https://yuyudhn.github.io/CVE-2022-46071/
CVE ID: CVE-2022-46072 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:31:46.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=jBAVUSzBL_M&ab_channel=IkariShinji - https://yuyudhn.github.io/CVE-2022-46072/
CVE ID: CVE-2022-46073 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:28:44.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=jT09Uiwl0Jo&ab_channel=IkariShinji - https://yuyudhn.github.io/CVE-2022-46073/
CVE ID: CVE-2022-46074 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:26:16.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=5Q3vyTo02bc&ab_channel=IkariShinji - https://yuyudhn.github.io/CVE-2022-46074/
CVE ID: CVE-2022-46076 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:35:04.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-869
CVE ID: CVE-2022-46080 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T20:04:12.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nexxtsolutions.com - https://github.com/yerodin/CVE-2022-46080
CVE ID: CVE-2022-46081 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:28:17.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.samwallace.dev/research/Harvesting%20Emails%20with%20Expired%20Garmin%20LiveTrack%20Sessions
CVE ID: CVE-2022-46087 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T15:39:47.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hrshadhin/school-management-system - https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-46087/poc.md
CVE ID: CVE-2022-46088 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-10-29T15:32:42.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the feedback form. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com - https://github.com/ASR511-OO7/CVE-2022-46088/blob/main/CVE-36
CVE ID: CVE-2022-46089 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-16T16:59:24.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2022-46089/blob/main/CVE-35
CVE ID: CVE-2022-46091 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-05T16:00:40.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2022-46091/blob/main/CVE-34
CVE ID: CVE-2022-46093 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:08:30.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/Hospital-Management-System/Hospital-Management-System.md
CVE ID: CVE-2022-46095 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T17:30:26.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via verification.php because the program does not verify the txtvaccinationID parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15244/design-and-implementation-covid-19-directory-vacination.html - https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/covid-19-vaccination-poc/covid-19-vaccination.md
CVE ID: CVE-2022-46096 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T17:23:56.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone parameter to register.php without logging in. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/covid-19-vaccination-poc2/covid-19-vaccination2.md
CVE ID: CVE-2022-46101 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T15:00:20.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/loadream/AyaCMS/issues/6
CVE ID: CVE-2022-46102 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T14:59:17.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/loadream/AyaCMS/issues/7
CVE ID: CVE-2022-46109 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T17:48:32.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/tree/main/Tenda/AC10/formSetClientState
CVE ID: CVE-2022-46117 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:24:42.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-1.md
CVE ID: CVE-2022-46118 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:51:41.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand&bid=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-2.md
CVE ID: CVE-2022-46119 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:41:28.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-3.md
CVE ID: CVE-2022-46120 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:40:52.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-4.md
CVE ID: CVE-2022-46121 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:39:49.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-5.md
CVE ID: CVE-2022-46122 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:38:57.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/view_category.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-6.md
CVE ID: CVE-2022-46123 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:30:24.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-7.md
CVE ID: CVE-2022-46124 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:29:07.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-9.md
CVE ID: CVE-2022-46125 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:17:23.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-10.md
CVE ID: CVE-2022-46126 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:09:02.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-8.md
CVE ID: CVE-2022-46127 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T15:07:29.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-11.md
CVE ID: CVE-2022-46128 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:02:31.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/projects/Doctor-Appointment-System_PHP.zip - https://github.com/Rajeshwar40/CVE/blob/main/2022-46128
CVE ID: CVE-2022-46135 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T17:36:20.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MegaTKC/AeroCMS/issues/5
CVE ID: CVE-2022-46137 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T17:35:30.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MegaTKC/AeroCMS/issues/7
CVE ID: CVE-2022-46139 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:33:25.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HJH7LSZPj
CVE ID: CVE-2022-46140 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:43:14.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Siemens Products: RUGGEDCOM RM1224 LTE(4G) EU, RUGGEDCOM RM1224 LTE(4G) NAM, SCALANCE M804PB, SCALANCE M812-1 ADSL-Router, SCALANCE M816-1 ADSL-Router, SCALANCE M826-2 SHDSL-Router, SCALANCE M874-2, SCALANCE M874-3, SCALANCE M876-3, SCALANCE M876-3 (ROK), SCALANCE M876-4, SCALANCE M876-4 (EU), SCALANCE M876-4 (NAM), SCALANCE MUM853-1 (EU), SCALANCE MUM856-1 (EU), SCALANCE MUM856-1 (RoW), SCALANCE S615 EEC LAN-Router, SCALANCE S615 LAN-Router, SCALANCE SC622-2C, SCALANCE SC626-2C, SCALANCE SC632-2C,
(RoW), SCALANCE S615 EEC LAN-Router, SCALANCE S615 LAN-Router, SCALANCE SC622-2C, SCALANCE SC626-2C, SCALANCE SC632-2C, SCALANCE SC636-2C, SCALANCE SC642-2C, SCALANCE SC646-2C, SCALANCE W1748-1 M12, SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, SCALANCE W1788-2IA M12, SCALANCE W721-1 RJ45, SCALANCE W722-1 RJ45, SCALANCE W734-1 RJ45, SCALANCE W734-1 RJ45 (USA), SCALANCE W738-1 M12, SCALANCE W748-1 M12, SCALANCE W748-1 RJ45, SCALANCE W761-1 RJ45, SCALANCE W774-1 M12 EEC, SCALANCE W774-1 RJ45, SCALANCE W774-1 RJ45 (USA), SCALANCE W778-1 M12, SCALANCE W778-1 M12 EEC, SCALANCE W778-1 M12 EEC (USA), SCALANCE W786-1 RJ45, SCALANCE W786-2 RJ45, SCALANCE W786-2 SFP, SCALANCE