Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42160 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-16T13:23:35.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf
CVE ID: CVE-2022-42161 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T17:46:32.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf
CVE ID: CVE-2022-42163 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T16:10:21.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/fromNatStaticSetting/readme.md
CVE ID: CVE-2022-42164 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T16:09:39.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetClientState/readme.md
CVE ID: CVE-2022-42165 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T15:02:03.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetDeviceName/readme.md
CVE ID: CVE-2022-42166 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T15:23:35.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetSpeedWan/readme.md
CVE ID: CVE-2022-42167 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T16:08:36.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetFirewallCfg/readme.md
CVE ID: CVE-2022-42168 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T15:40:48.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/fromSetIpMacBind/readme.md
CVE ID: CVE-2022-42169 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T15:39:43.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/addWifiMacFilter/readme.md
CVE ID: CVE-2022-42170 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T15:38:52.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formWifiWpsStart/readme.md
CVE ID: CVE-2022-42171 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T15:38:01.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/saveParentControlInfo/readme.md
CVE ID: CVE-2022-42175 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-26T18:42:24.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://soluslabs.com - http://solusvm.com - https://gist.github.com/mr404ntf/9c8728ee8f35d9744feec3828df1085d
CVE ID: CVE-2022-42176 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:41:23.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/soy-oreocato/CVE-Advisories/tree/main/PapiQuieroPollo00 - https://github.com/soy-oreocato/CVE-2022-42176
CVE ID: CVE-2022-42182 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T14:37:19.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.precisely.com/docs/sftw/spectrum/release-notes/spectrum-2020-1-S56-release-notes.pdf - https://zxsecurity.co.nz/research/advisories/precisely-spectrum-spatial-analyst-20-1
CVE ID: CVE-2022-42183 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:52:21.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.precisely.com/docs/sftw/spectrum/release-notes/spectrum-2020-1-S56-release-notes.pdf - https://zxsecurity.co.nz/research/advisories/precisely-spectrum-spatial-analyst-20-1
CVE ID: CVE-2022-42187 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T20:28:27.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zhblue/hustoj/issues/866
CVE ID: CVE-2022-42188 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:37:23.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/LavaLite
CVE ID: CVE-2022-42189 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T14:34:19.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wszdhf/cms_vul/blob/main/emlog_pro_1.6.0_rce.md
CVE ID: CVE-2022-42197 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:39:12.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html - https://github.com/ciph0x01/Simple-Exam-Reviewer-Management-System-CVE/blob/main/CVE-2022-42197.md
CVE ID: CVE-2022-42198 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:36:15.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html - https://github.com/ciph0x01/Simple-Exam-Reviewer-Management-System-CVE/blob/main/CVE-2022-42198.md
CVE ID: CVE-2022-42199 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:35:01.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Exam List. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html - https://github.com/ciph0x01/poc/blob/main/poc.html - https://github.com/ciph0x01/Simple-Exam-Reviewer-Management-System-CVE/blob/main/CVE-2022-42199.md
CVE ID: CVE-2022-42200 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:33:52.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS) via the Exam List. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html - https://github.com/ciph0x01/Simple-Exam-Reviewer-Management-System-CVE/blob/main/CVE-2022-42200.md
CVE ID: CVE-2022-42201 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T14:04:12.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html - https://github.com/ciph0x01/Simple-Exam-Reviewer-Management-System-CVE/blob/main/CVE-2022-42201.md
CVE ID: CVE-2022-42202 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:35:56.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/docs/share/b85b8c6f-60ea-4d5c-acc5-3c4285806328
CVE ID: CVE-2022-42205 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-08T14:56:15.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-hms2/
CVE ID: CVE-2022-42206 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-08T14:11:32.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-hms3/
CVE ID: CVE-2022-42218 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:24:07.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CNchenjiabao/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-1.md
CVE ID: CVE-2022-42221 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-15T15:36:56.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/Cj775995/CVE_Report/tree/main/Netgear/R6220
CVE ID: CVE-2022-42225 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-17T15:17:16.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jumpserver 2.10.0 <= version <= 2.26.0 contains multiple stored XSS vulnerabilities because of improper filtering of user input, which can execute any javascript under admin's permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/lina/blob/v2.10.0/src/views/settings/SystemMessageSubscription/SelectDialog.vue#L43 - https://github.com/jumpserver/lina/blob/v2.11.0/src/layout/components/NavHeader/SiteMessages.vue#L40 - https://github.com/jumpserver/lina
m/jumpserver/lina/blob/v2.11.0/src/layout/components/NavHeader/SiteMessages.vue#L40 - https://github.com/jumpserver/lina/blob/v2.26.0/src/views/tickets/components/Comments.vue#L16 - https://gist.github.com/bybit-sec/eb750c1d906c89e97092b29015472738 - https://github.com/jumpserver/lina/pull/2264
CVE ID: CVE-2022-42227 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T20:00:48.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: jsonlint 1.0 is vulnerable to heap-buffer-overflow via /home/hjsz/jsonlint/src/lexer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/p-ranav/jsonlint/issues/2 - https://github.com/yangfar/CVE/blob/main/CVE-2022-42227.md
CVE ID: CVE-2022-42229 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:30:39.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0ee/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md
CVE ID: CVE-2022-42230 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:28:39.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tr0ee/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE ID: CVE-2022-42232 State: PUBLISHED Published: 2022-10-14T00:00:00 Last Updated: 2024-08-03T13:03:45.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE ID: CVE-2022-42233 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T13:51:18.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/D0ngsec/vulns/blob/main/Tenda/Tenda_11N_Authentication_Bypass.md
CVE ID: CVE-2022-42234 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:26:05.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a file inclusion vulnerability in the template management module in UCMS 1.6 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luoyangchangan/bug/issues/1
CVE ID: CVE-2022-42235 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:26:26.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registration form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/draco1725/Stored-XSS/blob/main/poc
CVE ID: CVE-2022-42236 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T13:28:09.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/draco1725/vloggers/blob/main/poc
CVE ID: CVE-2022-42237 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-10T03:08:07.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/draco1725/sqlinj/blob/main/poc
CVE ID: CVE-2022-42238 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T13:26:29.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/draco1725/localpriv/blob/main/poc
CVE ID: CVE-2022-42241 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T13:03:45.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-3.md
CVE ID: CVE-2022-42242 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T13:03:45.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md
CVE ID: CVE-2022-42243 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T13:03:45.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE ID: CVE-2022-42245 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T20:24:37.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS 4.0.01 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/isoftforce/dreamer_cms/issues/I5U408 - https://packetstormsecurity.com/files/171585/Dreamer-CMS-4.0.0-SQL-Injection.html
CVE ID: CVE-2022-42246 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T20:23:11.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/farliy-hacker/Doufoxcms/issues/1
CVE ID: CVE-2022-42247 State: PUBLISHED Published: 2022-10-03T15:31:48 Last Updated: 2024-08-03T13:03:45.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a file name. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/enferas/b4ca7a4fb52e1b5e698f87e4d655a70a - https://github.com/pfsense/pfsense/commit/73ca6743954ac9f35ca293e3f2af63eac20cf32e
CVE ID: CVE-2022-42248 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T17:05:21.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://qlikview.com - https://github.com/Ozozuz/Qlik-View-Stored-XSS
CVE ID: CVE-2022-42249 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-10-15T15:27:58.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fateroot/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md
CVE ID: CVE-2022-42250 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T13:03:45.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fateroot/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE ID: CVE-2022-42252 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:09:20.374Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-444 Description: If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header. Additional Analyst Notes: - CVE Program Contai