Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E - https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md
CVE ID: CVE-2022-38555 State: PUBLISHED Published: 2022-08-28T16:17:46 Last Updated: 2024-08-03T10:54:03.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name. Additional Analyst Notes: - CVE Program Container: References: - http://linksys.com - https://github.com/xxy1126/Vuln/tree/main/1
CVE ID: CVE-2022-38556 State: PUBLISHED Published: 2022-08-28T15:52:57 Last Updated: 2024-08-03T10:54:03.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/2
CVE ID: CVE-2022-38557 State: PUBLISHED Published: 2022-08-28T15:49:36 Last Updated: 2024-08-03T10:54:04.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/xxy1126/Vuln/tree/main/3
CVE ID: CVE-2022-38562 State: PUBLISHED Published: 2022-08-28T16:50:17 Last Updated: 2024-08-03T10:54:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the lan parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetFixTools_lan
CVE ID: CVE-2022-38563 State: PUBLISHED Published: 2022-08-28T16:44:28 Last Updated: 2024-08-03T10:54:03.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the MACAddr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetFixTools_Mac
CVE ID: CVE-2022-38564 State: PUBLISHED Published: 2022-08-28T16:49:16 Last Updated: 2024-08-03T10:54:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adItemUID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetPicListItem
CVE ID: CVE-2022-38565 State: PUBLISHED Published: 2022-08-28T16:48:04 Last Updated: 2024-08-03T10:54:03.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailpwd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formEmailTest-mailpwd
CVE ID: CVE-2022-38566 State: PUBLISHED Published: 2022-08-28T16:47:13 Last Updated: 2024-08-03T11:02:13.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formEmailTest-mailname
CVE ID: CVE-2022-38567 State: PUBLISHED Published: 2022-08-28T16:46:04 Last Updated: 2024-08-03T11:02:14.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetAdConfigInfo_
CVE ID: CVE-2022-38568 State: PUBLISHED Published: 2022-08-28T16:43:16 Last Updated: 2024-08-03T11:02:13.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the hostname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetFixTools_hostname
CVE ID: CVE-2022-38569 State: PUBLISHED Published: 2022-08-28T16:41:09 Last Updated: 2024-08-03T11:02:13.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formDelAd
CVE ID: CVE-2022-38570 State: PUBLISHED Published: 2022-08-28T16:37:21 Last Updated: 2024-08-03T11:02:14.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adPushUID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formDelPushedAd
CVE ID: CVE-2022-38571 State: PUBLISHED Published: 2022-08-28T16:39:52 Last Updated: 2024-08-03T11:02:13.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetGuideListItem
CVE ID: CVE-2022-38573 State: PUBLISHED Published: 2022-09-22T23:16:36.000Z Last Updated: 2025-05-27T15:24:05.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: 10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com - https://packetstormsecurity.com/files/168133/10-Strike-Network-Inventory-Explorer-9.3-Buffer-Overflow.html
CVE ID: CVE-2022-38576 State: PUBLISHED Published: 2022-09-19T18:39:34 Last Updated: 2024-08-03T11:02:13.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gith-boot/bug_report/blob/main/vendors/janobe/interview-management-system/SQLi-1.md
CVE ID: CVE-2022-38577 State: PUBLISHED Published: 2022-09-19T15:45:54.000Z Last Updated: 2025-06-03T18:18:18.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://processmaker.com - https://drive.google.com/file/d/1iP9NYUkYEy_FGMpcnTkUWn8nGcqDT02_/view?usp=sharing - http://packetstormsecurity.com/files/168427/ProcessMaker-Privilege-Escalation.html
CVE ID: CVE-2022-38580 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T14:24:29.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://skipper.com - http://zalando.com - https://pastebin.com/dXxpgPAK - https://gist.github.com/Fadavvi/9fffcfa4aaa9e25b77cfe7b3044b2857#file-cve-2022-38580 - http://packetstormsecurity.com/files/171546/X-Skipper-Proxy-0.13.237-Server-Side-Request-Forgery.html
CVE ID: CVE-2022-38582 State: PUBLISHED Published: 2022-11-04T00:00:00.000Z Last Updated: 2025-05-02T18:54:16.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/420SmokeBigWeedHackBadDrivers/53de9ff97d95fc3e79307345fddb0a30
CVE ID: CVE-2022-38583 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T17:55:22.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configuration, a low-privileged Sage 300 workstation user could abuse their access to the "SharedData" folder on the connected Sage 300 server to view and/or modify the credentials associated with Sage 300 users and SQL accounts to impersonate users and/or access the SQL database as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be poss
abase as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be possible to create, update, and delete all records associated with the program and, depending on the configuration, execute code on the underlying database server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sage.com - https://www.controlgap.com/blog/sage-300-case-study
CVE ID: CVE-2022-38594 State: PUBLISHED Published: 2022-09-15T01:12:59 Last Updated: 2024-08-03T11:02:14.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Estbonxby/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-1.md
CVE ID: CVE-2022-38595 State: PUBLISHED Published: 2022-09-15T01:13:00 Last Updated: 2024-08-03T11:02:14.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Estbonxby/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-2.md
CVE ID: CVE-2022-38599 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:51:59.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://teleport.com - https://gist.github.com/arleyna/20d858e11c48984d00926fa8cc0c2722
CVE ID: CVE-2022-38600 State: PUBLISHED Published: 2022-09-15T15:07:09 Last Updated: 2024-08-03T11:02:13.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c. Additional Analyst Notes: - CVE Program Container: References: - https://trac.mplayerhq.hu/ticket/2390#comment:2
CVE ID: CVE-2022-38604 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T20:58:07.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lucabarile.github.io/Blog/blog.html - https://lucabarile.github.io/Blog/CVE-2022-38604/index.html - https://github.com/LucaBarile/CVE-2022-38604
CVE ID: CVE-2022-38605 State: PUBLISHED Published: 2022-09-12T20:04:29 Last Updated: 2024-08-03T11:02:13.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sunaono1/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-1.md
CVE ID: CVE-2022-38606 State: PUBLISHED Published: 2022-09-12T20:04:31 Last Updated: 2024-08-03T11:02:14.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editcategory.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sunaono1/bug_report/blob/main/vendors/mayuri_k/garage-management-system/SQLi-1.md
CVE ID: CVE-2022-38610 State: PUBLISHED Published: 2022-09-12T20:04:31 Last Updated: 2024-08-03T11:02:14.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sunaono1/bug_report/blob/main/vendors/mayuri_k/garage-management-system/SQLi-2.md
CVE ID: CVE-2022-38611 State: PUBLISHED Published: 2022-09-16T19:17:35 Last Updated: 2024-08-03T11:02:14.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/dru1d-foofus/835423de77c3522d53b9e7bdf5a28dfe
CVE ID: CVE-2022-38613 State: PUBLISHED Published: 2022-09-09T15:40:44 Last Updated: 2024-08-03T11:02:13.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system. Additional Analyst Notes: - CVE Program Container: References: - http://bpcbt.com - http://smartvista.com - https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/path-traversal-in-smartvista-cardgen-version-3.28.0-cve-2022-38613
CVE ID: CVE-2022-38614 State: PUBLISHED Published: 2022-09-09T16:29:01 Last Updated: 2024-08-03T11:02:13.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bpcbt.com - http://smartvista.com - https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/list-all-files-in-arbitrary-folder-in-smartvista-cardgen-version-3.28.0-cve-2022-38614
CVE ID: CVE-2022-38615 State: PUBLISHED Published: 2022-09-09T16:22:17 Last Updated: 2024-08-03T11:02:13.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_group.jsf. Additional Analyst Notes: - CVE Program Container: References: - http://bpcbt.com - http://smartvista.com - https://tf1t.gitbook.io/mycve/smartvista/smartvista-svfe2/sql-injection-in-service-group-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38615
CVE ID: CVE-2022-38616 State: PUBLISHED Published: 2022-09-13T11:12:40 Last Updated: 2024-08-03T11:02:14.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.jsf. Additional Analyst Notes: - CVE Program Container: References: - http://bpcbt.com - http://smartvista.com - https://tf1t.gitbook.io/mycve/smartvista/smartvista-svfe2/sql-injection-in-terminal-tariff-group-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38616
CVE ID: CVE-2022-38617 State: PUBLISHED Published: 2022-09-19T12:32:50 Last Updated: 2024-08-03T11:02:14.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:j_id97 parameter at /SVFE2/pages/audit/voiceaudit.jsf. Additional Analyst Notes: - CVE Program Container: References: - http://bpcbt.com - http://smartvista.com - https://dtro.gitbook.io/note_cve/sql-injection-in-terminal-voice-audit-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38617
CVE ID: CVE-2022-38618 State: PUBLISHED Published: 2022-09-19T15:22:10 Last Updated: 2024-08-03T11:02:14.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/country_group.jsf. Additional Analyst Notes: - CVE Program Container: References: - http://bpcbt.com - http://smartvista.com - https://dtro.gitbook.io/note_cve/sql-injection-in-terminal-tariff-group-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38618
CVE ID: CVE-2022-38619 State: PUBLISHED Published: 2022-09-20T23:59:47.000Z Last Updated: 2025-05-28T15:29:23.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /SVFE2/pages/feegroups/mcc_group.jsf. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bpcbt.com - http://smartvista.com - https://dtro.gitbook.io/note_cve/sql-injection-in-terminal-mcc-group-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38619
CVE ID: CVE-2022-38621 State: PUBLISHED Published: 2022-09-16T18:36:25 Last Updated: 2024-08-03T11:02:14.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Doufox/Doufox/issues/7
CVE ID: CVE-2022-38625 State: PUBLISHED Published: 2022-08-29T22:46:15 Last Updated: 2024-08-03T11:02:14.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position is that this is a design choice, not a vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.patlite.com/network-products/lineup/nh-fb.html - https://gist.github.com/Nwqda/d
am Container: References: - https://www.patlite.com/network-products/lineup/nh-fb.html - https://gist.github.com/Nwqda/dfad4e11b545dd40aebca6031d202f66 - https://www.youtube.com/watch?v=4r9FH6U2VR8
CVE ID: CVE-2022-38627 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T15:55:19.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/omarhashem123/Security-Research/blob/main/CVE-2022-38627/CVE-2022-38627.yaml - https://github.com/omarhashem123/Security-Research/blob/main/CVE-2022-38627/CVE-2022-38627.txt
CVE ID: CVE-2022-38628 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T15:38:50.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/omarhashem123/Security-Research/blob/main/CVE-2022-38628/CVE-2022-38628.txt
CVE ID: CVE-2022-38633 State: PUBLISHED Published: 2022-09-13T21:30:23 Last Updated: 2024-08-03T11:02:14.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute arbitrary code via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SaumyajeetDas/Vulnerability/blob/main/Genymotion/GenymotionDesktop.md
CVE ID: CVE-2022-38636 State: REJECTED Published: N/A Last Updated: 2023-09-15T15:27:32.835393 Description: No description available.
CVE ID: CVE-2022-38637 State: PUBLISHED Published: 2022-09-13T20:36:28 Last Updated: 2024-08-03T11:02:14.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/www-community/attacks/SQL_Injection - https://www.youtube.com/watch?v=m8nW0p69UHU
CVE ID: CVE-2022-38638 State: PUBLISHED Published: 2022-09-09T19:40:29 Last Updated: 2024-08-03T11:02:14.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/casdoor/casdoor/issues/1035
CVE ID: CVE-2022-38639 State: PUBLISHED Published: 2022-09-09T18:49:10 Last Updated: 2024-08-03T11:02:13.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mdnice/markdown-nice/issues/327
CVE ID: CVE-2022-38648 State: PUBLISHED Published: 2022-09-22T00:00:00.000Z Last Updated: 2025-11-03T19:27:25.993Z Vendors: Apache Software Foundation Products: Apache XML Graphics Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/gfsktxvj7jtwyovmhhbrw0bs13wfjd7b - https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html - https://security.gentoo.org/glsa/202401-11