Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28879 State: PUBLISHED Published: 2022-07-22T15:27:34 Last Updated: 2024-08-03T06:03:53.213Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: All F-Secure and WithSecure Endpoint Protection products for Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial-of-Service (DoS) Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the
overed in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28880 State: PUBLISHED Published: 2022-08-05T16:46:48 Last Updated: 2024-08-03T06:03:53.199Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: All F-Secure and WithSecure Endpoint Protection products for Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial-of-Service (DoS) Vulnerability Description: A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can
in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/expertise/people - https://www.f-secure.com/en/home/support/vulnerability-reward-program/hall-of-fame
CVE ID: CVE-2022-28881 State: PUBLISHED Published: 2022-08-10T16:03:24 Last Updated: 2024-08-03T06:03:53.155Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacke
nerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28882 State: PUBLISHED Published: 2022-08-23T15:54:02 Last Updated: 2024-08-03T06:03:53.163Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unp
nerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28883 State: PUBLISHED Published: 2022-08-23T15:54:14 Last Updated: 2024-08-03T06:03:53.181Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a p
ability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28884 State: PUBLISHED Published: 2022-09-06T17:19:04 Last Updated: 2024-08-03T06:03:53.214Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection products for Windows and Mac running 32 bit operating system. F-Secure Linux Security 32 F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE f
was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/expertise/people
CVE ID: CVE-2022-28885 State: PUBLISHED Published: 2022-09-06T17:18:51 Last Updated: 2024-08-03T06:10:56.760Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: WithSecure Products: F-Secure Linux Security 64 F-Secure Atlant Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing the scanning request. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/expertise/people
CVE ID: CVE-2022-28886 State: PUBLISHED Published: 2022-09-23T18:24:04.000Z Last Updated: 2025-05-22T18:15:13.487Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection products for Windows running 32 bit operating system. F-Secure Linux Security 32 F-Secure Internet Gatekeeper Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine Additional Analyst Notes: -
finite loop when unpacking PE files. It is possible that this can crash the scanning engine Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28887 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:26:27.910Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper Problem Types: Multiple Denial-of-Service (DoS) vulnerability Description: Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash. Addi
roducts whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28888 State: PUBLISHED Published: 2022-07-13T00:00:00.000Z Last Updated: 2025-02-13T16:32:39.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spryker Commerce OS 1.4.2 allows Remote Command Execution. Additional Analyst Notes: - CVE Program Container: References: - https://schutzwerk.com - https://www.schutzwerk.com/en/43/advisories/schutzwerk-sa-2022-003/ - http://seclists.org/fulldisclosure/2022/Jul/4 - http://packetstormsecurity.com/files/167765/Spryker-Commerce-OS-Remote-Command-Execution.html - http://seclists.org/fulldisclosure/2023/May/2 - http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html
CVE ID: CVE-2022-28889 State: PUBLISHED Published: 2022-07-07T18:35:22 Last Updated: 2024-08-03T06:10:56.784Z Vendors: Apache Software Foundation Products: Apache Druid Problem Types: CWE-1021 Description: In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/t3nsq4crdr8wqgmj721d2wg6pf26s5cw
CVE ID: CVE-2022-28890 State: PUBLISHED Published: 2022-05-05T08:40:09 Last Updated: 2024-08-03T06:10:56.881Z Vendors: Apache Software Foundation Products: Apache Jena Problem Types: XML External DTD vulnerability Description: A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
CVE ID: CVE-2022-28892 State: PUBLISHED Published: 2022-04-28T00:00:00 Last Updated: 2024-08-03T06:10:56.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1930171 - https://mahara.org/interaction/forum/topic.php?id=9094
CVE ID: CVE-2022-28893 State: PUBLISHED Published: 2022-04-11T04:15:06 Last Updated: 2024-08-03T06:10:56.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1a3b1bba7c7a5eb8a11513cf88427cb9d77bc60a - http://www.openwall.com/lists/oss-security/2022/04/11/4 - http://www.openwall.com/lists/oss-security/2022/04/11/3 - http://www.openwall.com/lists/oss-security/2022/04/11/5 - https://security.netapp.com/advisory/
-security/2022/04/11/3 - http://www.openwall.com/lists/oss-security/2022/04/11/5 - https://security.netapp.com/advisory/ntap-20220526-0002/ - https://www.debian.org/security/2022/dsa-5161
CVE ID: CVE-2022-28895 State: PUBLISHED Published: 2022-05-10T13:17:07 Last Updated: 2024-08-03T06:10:56.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/1
CVE ID: CVE-2022-28896 State: PUBLISHED Published: 2022-05-10T13:17:08 Last Updated: 2024-08-03T06:10:56.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/2
CVE ID: CVE-2022-28901 State: PUBLISHED Published: 2022-05-10T13:17:05 Last Updated: 2024-08-03T06:10:56.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/3
CVE ID: CVE-2022-28905 State: PUBLISHED Published: 2022-05-10T13:16:58 Last Updated: 2024-08-03T06:10:56.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/1
CVE ID: CVE-2022-28906 State: PUBLISHED Published: 2022-05-10T13:16:58 Last Updated: 2024-08-03T06:10:56.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/2
CVE ID: CVE-2022-28907 State: PUBLISHED Published: 2022-05-10T13:16:59 Last Updated: 2024-08-03T06:10:57.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/5
CVE ID: CVE-2022-28908 State: PUBLISHED Published: 2022-05-10T13:16:59 Last Updated: 2024-08-03T06:10:56.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDiagnosisCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/4
CVE ID: CVE-2022-28909 State: PUBLISHED Published: 2022-05-10T13:17:00 Last Updated: 2024-08-03T06:10:56.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/3
CVE ID: CVE-2022-28910 State: PUBLISHED Published: 2022-05-10T13:17:01 Last Updated: 2024-08-03T06:10:57.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/9
CVE ID: CVE-2022-28911 State: PUBLISHED Published: 2022-05-10T13:17:01 Last Updated: 2024-08-03T06:10:57.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/7
CVE ID: CVE-2022-28912 State: PUBLISHED Published: 2022-05-10T13:17:02 Last Updated: 2024-08-03T06:10:56.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/8
CVE ID: CVE-2022-28913 State: PUBLISHED Published: 2022-05-10T13:17:02 Last Updated: 2024-08-03T06:10:57.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/10
CVE ID: CVE-2022-28915 State: PUBLISHED Published: 2022-05-10T13:16:56 Last Updated: 2024-08-03T06:10:56.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/1
CVE ID: CVE-2022-28917 State: PUBLISHED Published: 2022-05-18T15:28:49 Last Updated: 2024-08-03T06:10:56.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NSSCYCTFER/SRC-CVE
CVE ID: CVE-2022-28918 State: PUBLISHED Published: 2022-04-26T20:29:32 Last Updated: 2024-08-03T06:10:57.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&plugin_name=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GreenCMS/GreenCMS/issues/116
CVE ID: CVE-2022-28919 State: PUBLISHED Published: 2022-05-12T15:43:08 Last Updated: 2024-08-03T06:10:57.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/splitbrain/dokuwiki/issues/3651 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFL5KMLTSWOHTDHURW5W6YP2DV67IQFP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DB7BXJKFALXHURED3OMJIQ4KEDGZOOWL/ - http
oraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DB7BXJKFALXHURED3OMJIQ4KEDGZOOWL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGKXK6TK27URC76FTX46Z6OLTKYIQK7E/
CVE ID: CVE-2022-28920 State: PUBLISHED Published: 2022-05-12T15:43:21 Last Updated: 2024-08-03T06:10:56.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MoeNetwork/Tieba-Cloud-Sign/issues/156
CVE ID: CVE-2022-28921 State: PUBLISHED Published: 2022-05-18T17:11:02 Last Updated: 2024-08-03T06:10:56.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server. Additional Analyst Notes: - CVE Program Container: References: - https://blogengine.io/ - https://www.0xlanks.me/blog/cve-2022-28921-advisory/
CVE ID: CVE-2022-28923 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:38:51.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
CVE ID: CVE-2022-28924 State: PUBLISHED Published: 2022-05-18T16:33:42 Last Updated: 2024-08-03T06:10:58.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/. Additional Analyst Notes: - CVE Program Container: References: - https://suumcuique.org/blog/posts/information-disclosure-vulnerability-universis
CVE ID: CVE-2022-28927 State: PUBLISHED Published: 2022-05-19T15:31:27 Last Updated: 2024-08-03T06:10:57.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url parameters. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CwithW/01a726e5af709655d6ee0b2067cdae03 - https://github.com/tindy2013/subconverter/commit/ce8d2bd0f13f05fcbd2ed90755d097f402393dd3
CVE ID: CVE-2022-28929 State: PUBLISHED Published: 2022-05-15T15:35:19 Last Updated: 2024-08-03T06:10:57.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cyberhomeless/vulnerabilitys/tree/main/HMS
CVE ID: CVE-2022-28930 State: PUBLISHED Published: 2022-05-15T16:17:03 Last Updated: 2024-08-03T06:10:57.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml.. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/doc_wei01/erp-pro/issues/I515R4
CVE ID: CVE-2022-28932 State: PUBLISHED Published: 2022-05-23T16:01:16 Last Updated: 2024-08-03T06:10:58.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dsl-g2452dg.com - https://github.com/1759134370/iot/blob/main/dsl