Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34006 State: PUBLISHED Published: 2022-06-19T20:25:49 Last Updated: 2024-08-03T08:16:16.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT AUTHORITY\SYSTEM, aka NX-I674 (sub-issue 2). NOTE: as of 2022-06-21, the 1.2.1050 release corrects this vulnerability in a new installation, but not in an upgrade installation. Additional Analyst Notes: - CVE Program Container: References: - ht
ew installation, but not in an upgrade installation. Additional Analyst Notes: - CVE Program Container: References: - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf
CVE ID: CVE-2022-34007 State: PUBLISHED Published: 2022-07-07T11:14:54 Last Updated: 2024-08-03T08:16:16.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry. Additional Analyst Notes: - CVE Program Container: References: - https://eusanctions.integrityline.com - https://www.integrityline.com/ - https://www.ush.it/team/ush/advisory-eqs-integrity-line/eqs_integrity_line.txt - https://seclists.org/fulldisclosure/2022/Jul/1 - https://packetstormsecurity.com/files/167706/EQS-Integrity-Line-Cross-Site-Scripting-Information-Disclosure.html - https://whistleblowingnetwork.org/Our-Work
/167706/EQS-Integrity-Line-Cross-Site-Scripting-Information-Disclosure.html - https://whistleblowingnetwork.org/Our-Work/Spotlight/Stories/The-Pitfalls-of-Closed-Source-Whistleblowing-Softw
CVE ID: CVE-2022-34008 State: PUBLISHED Published: 2022-06-21T14:20:23 Last Updated: 2024-08-03T08:16:16.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder. Additional Analyst Notes: - CVE Program Container: References: - https://antivirus.comodo.com/ - https://r0h1rr1m.medium.com/comodo-antivirus-local-privilege-escalation-through-insecure-file-move-476a4601d9b8
CVE ID: CVE-2022-34009 State: PUBLISHED Published: 2022-07-27T23:23:51 Last Updated: 2024-08-03T08:16:16.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware. Additional Analyst Notes: - CVE Program Container: References: - https://fossil-scm.org/home/doc/trunk/www/changes.wiki - https://gainsec.com/2022/07/27/cve-2022-34009/
CVE ID: CVE-2022-34011 State: PUBLISHED Published: 2022-06-23T12:45:01 Last Updated: 2024-08-03T08:16:16.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the parameter entryUrls. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I5CB2A
CVE ID: CVE-2022-34012 State: PUBLISHED Published: 2022-06-23T12:45:01 Last Updated: 2024-08-03T08:16:16.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I5CB2O
CVE ID: CVE-2022-34013 State: PUBLISHED Published: 2022-06-23T12:45:02 Last Updated: 2024-08-03T08:16:16.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Logo parameter under the Link module. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I5CB2A
CVE ID: CVE-2022-34020 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-16T13:41:06.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html - https://securityblog101.blogspot.com/2022/09/cve-2022-34020.html
CVE ID: CVE-2022-34021 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-16T13:40:10.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityblog101.blogspot.com/2022/09/cve-id-cve-2022-34021.html
CVE ID: CVE-2022-34022 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:32:49.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDBActive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityblog101.blogspot.com/2022/09/cve-id-cve-2022-34022.html
CVE ID: CVE-2022-34023 State: PUBLISHED Published: 2022-07-19T16:49:12 Last Updated: 2024-08-03T08:16:16.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /officials/officials.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.github.com
CVE ID: CVE-2022-34024 State: PUBLISHED Published: 2022-07-19T17:18:15 Last Updated: 2024-08-03T08:16:16.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sorabug/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/RCE-1.md
CVE ID: CVE-2022-34025 State: PUBLISHED Published: 2022-07-19T18:20:00 Last Updated: 2024-08-03T08:16:16.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/serghey-rodin/vesta/issues/2252
CVE ID: CVE-2022-34026 State: PUBLISHED Published: 2022-09-22T17:01:47.000Z Last Updated: 2025-05-27T15:05:06.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICEcoder v8.1 allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/icecoder/ICEcoder - http://icecoder.com - https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php - https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php - https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
CVE ID: CVE-2022-34027 State: PUBLISHED Published: 2022-07-18T20:14:12 Last Updated: 2024-08-03T08:16:16.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njs_value_property at njs_value.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/504
CVE ID: CVE-2022-34028 State: PUBLISHED Published: 2022-07-18T20:14:13 Last Updated: 2024-08-03T08:16:16.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/522
CVE ID: CVE-2022-34029 State: PUBLISHED Published: 2022-07-18T20:14:14 Last Updated: 2024-08-03T08:16:16.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/506
CVE ID: CVE-2022-34030 State: PUBLISHED Published: 2022-07-18T20:14:15 Last Updated: 2024-08-03T08:16:17.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_djb_hash at src/njs_djb_hash.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/540
CVE ID: CVE-2022-34031 State: PUBLISHED Published: 2022-07-18T20:14:16 Last Updated: 2024-08-03T08:16:16.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_value_to_number at src/njs_value_conversion.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/523
CVE ID: CVE-2022-34032 State: PUBLISHED Published: 2022-07-18T20:14:17 Last Updated: 2024-08-03T08:16:17.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/524
CVE ID: CVE-2022-34033 State: PUBLISHED Published: 2022-07-18T20:14:18 Last Updated: 2024-08-03T08:16:16.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/425 - https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3 - https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e
CVE ID: CVE-2022-34035 State: PUBLISHED Published: 2022-07-18T20:14:20 Last Updated: 2024-08-03T08:16:16.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/426 - https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3 - https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e
CVE ID: CVE-2022-34037 State: PUBLISHED Published: 2022-07-22T00:00:00 Last Updated: 2024-08-03T08:16:17.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note: This has been disputed as a bug, not a security vulnerability, in the Caddy web server that emerged when an administrator's bad configuration containing a malformed request URI caused the server to return an empty reply instead of a valid HTTP response to the client. Additional Analyst Notes: - CVE Program Container: References: - https://github.com
a valid HTTP response to the client. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caddyserver/caddy/issues/4775 - https://github.com/caddyserver/caddy/issues/4775#issuecomment-1203388116
CVE ID: CVE-2022-34038 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:40:18.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/etcd-io/etcd/pull/14022 - https://github.com/etcd-io/etcd/pull/14452 - https://github.com/golang/vulndb/issues/2016#issuecomment-1698677762 - https://go-review.googlesource.com/c/vulndb/+/524456 - https://go-review.googlesource.com/c/vulndb/+/5
ment-1698677762 - https://go-review.googlesource.com/c/vulndb/+/524456 - https://go-review.googlesource.com/c/vulndb/+/524456/2/data/excluded/GO-2023-2016.yaml
CVE ID: CVE-2022-34042 State: PUBLISHED Published: 2022-07-20T16:06:22 Last Updated: 2024-08-03T08:16:16.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tianqi5432/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/SQLi-1.md
CVE ID: CVE-2022-34043 State: PUBLISHED Published: 2022-06-29T12:25:32 Last Updated: 2024-08-03T08:16:16.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/tree/main/Nomachine-Incorrect-Folder-Permission
CVE ID: CVE-2022-34045 State: PUBLISHED Published: 2022-07-20T16:50:09 Last Updated: 2024-08-03T08:16:16.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1s5uZGC_iSzfCJt9BJ8h-P24vmsrmttrf/view?usp=sharing
CVE ID: CVE-2022-34046 State: PUBLISHED Published: 2022-07-20T16:50:17 Last Updated: 2024-08-03T08:16:16.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);]. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/18ECQEqZ296LDzZ0wErgqnNfen1jCn0mG/view?usp=sharing - http://packetstormsecurity.com/files/167890/Wavlink-WN533A8-Password-Disclosure.html
CVE ID: CVE-2022-34047 State: PUBLISHED Published: 2022-07-20T16:50:11 Last Updated: 2024-08-03T08:16:16.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd]. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1sTQdUc12aZvJRFeb5wp8AfPdUEkkU9Sy/view?usp=sharing - http://packetstormsecurity.com/files/167891/Wavlink-WN530HG4-Password-Disclosure.html
CVE ID: CVE-2022-34048 State: PUBLISHED Published: 2022-07-20T16:50:11 Last Updated: 2024-08-03T08:16:17.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1xznFhH3w3TDN2RCdX62_ebylR4yaKmzf/view?usp=sharing - https://drive.google.com/file/d/1NI3-k3AGIsSe2zjeigl1GVyU1VpG1SV3/view?usp=sharing
CVE ID: CVE-2022-34049 State: PUBLISHED Published: 2022-07-20T16:50:12 Last Updated: 2024-08-03T08:16:16.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1ZeSwqu04OghLQXeG7emU-w-Amgadafqx/view?usp=sharing - https://drive.google.com/file/d/1-eNgq6IS609bq2vB93c_N8jnZrJ2dgNF/view?usp=sharing
CVE ID: CVE-2022-34053 State: PUBLISHED Published: 2022-06-24T20:39:47 Last Updated: 2024-08-03T08:16:16.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/dr-web-engine/ - https://github.com/ylliprifti/dr-web-engine/issues/4
CVE ID: CVE-2022-34054 State: PUBLISHED Published: 2022-06-24T20:39:48 Last Updated: 2024-08-03T08:16:16.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/perdido/ - https://github.com/ludovicmoncla/perdido/issues/1
CVE ID: CVE-2022-34055 State: PUBLISHED Published: 2022-06-24T20:39:48 Last Updated: 2024-08-03T08:16:16.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/drxhello/ - https://github.com/drewxa/summer-tasks/issues/4
CVE ID: CVE-2022-34056 State: PUBLISHED Published: 2022-06-24T20:39:49 Last Updated: 2024-08-03T08:16:16.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/watertools/ - https://github.com/TimHessels/watertools/issues/1
CVE ID: CVE-2022-34057 State: PUBLISHED Published: 2022-06-24T20:39:49 Last Updated: 2024-08-03T08:16:16.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/scoptrial/
CVE ID: CVE-2022-34059 State: PUBLISHED Published: 2022-06-24T20:39:52 Last Updated: 2024-08-03T08:16:16.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/sixfab-tool/ - https://github.com/sixfab/setup-and-diagnostic-tool/issues/7
CVE ID: CVE-2022-34060 State: PUBLISHED Published: 2022-06-24T20:39:53 Last Updated: 2024-08-03T08:16:16.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/togglee/ - https://github.com/togglee/togglee-python/issues/2
CVE ID: CVE-2022-34061 State: PUBLISHED Published: 2022-06-24T20:39:54 Last Updated: 2024-08-03T08:16:16.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/catly-translate/ - https://github.com/CatNeverCodes/catly_translate/issues/1
CVE ID: CVE-2022-34064 State: PUBLISHED Published: 2022-06-24T20:39:54 Last Updated: 2024-08-03T08:16:16.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/zibal/
CVE ID: CVE-2022-34065 State: PUBLISHED Published: 2022-06-24T20:39:55 Last Updated: 2024-08-03T08:16:16.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/rondolu-yt-concate/ - https://github.com/rondolu/project-yt-concate/issues/1
CVE ID: CVE-2022-34066 State: PUBLISHED Published: 2022-06-24T20:39:56 Last Updated: 2024-08-03T08:16:16.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/texercise/ - https://github.com/rasmushaugaard/texercise-cli/issues/1
CVE ID: CVE-2022-34067 State: PUBLISHED Published: 2022-07-26T12:57:12 Last Updated: 2024-08-03T08:16:16.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Warehouse-Management-System