Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-35067 State: PUBLISHED Published: 2022-09-19T21:24:09.000Z Last Updated: 2025-05-29T14:35:33.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/12PsreXrpGGy0Rx2URDd4XmlPPh5wVLmF/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35067.md
CVE ID: CVE-2022-35068 State: PUBLISHED Published: 2022-09-19T21:24:15.000Z Last Updated: 2025-05-29T14:34:03.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/193D7sPydmZiciaRD3r1UK_V3VT17GJFA/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35068.md
CVE ID: CVE-2022-35069 State: PUBLISHED Published: 2022-09-19T21:24:20 Last Updated: 2024-08-03T09:29:17.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b544e. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1MRrjkDzgaSXPuA994xggZcEAH-QfAvXK/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35069.md
CVE ID: CVE-2022-35070 State: PUBLISHED Published: 2022-09-19T21:24:25 Last Updated: 2024-08-03T09:29:17.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x65fc97. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/13_Iq4Uj3B4iz07N8qWYhx_bZd618F6YN/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35070.md
CVE ID: CVE-2022-35080 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:31:38.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/183 - https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35080.md
CVE ID: CVE-2022-35081 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:30:41.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/183 - https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35081.md
CVE ID: CVE-2022-35085 State: PUBLISHED Published: 2022-09-20T23:56:37.000Z Last Updated: 2025-05-27T18:18:36.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/181 - https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35085.md
CVE ID: CVE-2022-35086 State: PUBLISHED Published: 2022-09-20T23:56:32.000Z Last Updated: 2025-05-28T15:30:09.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/181 - https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35086.md
CVE ID: CVE-2022-35087 State: PUBLISHED Published: 2022-09-20T23:56:26.000Z Last Updated: 2025-05-28T15:24:32.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/181 - https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35087.md
CVE ID: CVE-2022-35088 State: PUBLISHED Published: 2022-09-20T23:56:19.000Z Last Updated: 2025-05-28T15:30:51.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/181 - https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35088.md
CVE ID: CVE-2022-35089 State: PUBLISHED Published: 2022-09-20T23:56:14.000Z Last Updated: 2025-05-28T15:31:35.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor at /home/bupt/Desktop/swftools/src/gif2swf. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/181 - https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35089.md
CVE ID: CVE-2022-35090 State: PUBLISHED Published: 2022-09-20T23:56:09.000Z Last Updated: 2025-05-28T15:45:31.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_memintrinsics.cpp:. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/181 - https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35090.md
CVE ID: CVE-2022-35091 State: PUBLISHED Published: 2022-09-23T17:10:52.000Z Last Updated: 2025-05-22T19:55:05.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow() Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35091.md
CVE ID: CVE-2022-35092 State: PUBLISHED Published: 2022-09-23T17:10:57.000Z Last Updated: 2025-05-22T19:54:17.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert_gfxline at /gfxpoly/convert.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35092.md
CVE ID: CVE-2022-35093 State: PUBLISHED Published: 2022-09-23T17:11:02.000Z Last Updated: 2025-05-23T14:52:26.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35093.md
CVE ID: CVE-2022-35094 State: PUBLISHED Published: 2022-09-23T17:11:09.000Z Last Updated: 2025-05-23T14:51:49.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35094.md
CVE ID: CVE-2022-35095 State: PUBLISHED Published: 2022-09-23T17:11:31.000Z Last Updated: 2025-05-23T14:50:56.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35095.md
CVE ID: CVE-2022-35096 State: PUBLISHED Published: 2022-09-23T17:11:36.000Z Last Updated: 2025-05-23T14:50:11.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35096.md
CVE ID: CVE-2022-35097 State: PUBLISHED Published: 2022-09-23T17:11:44.000Z Last Updated: 2025-05-22T20:18:33.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35097.md
CVE ID: CVE-2022-35098 State: PUBLISHED Published: 2022-09-23T17:11:51.000Z Last Updated: 2025-05-22T19:05:05.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColor(GfxColor*) at /xpdf/GfxState.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35098.md
CVE ID: CVE-2022-35099 State: PUBLISHED Published: 2022-09-23T17:11:58.000Z Last Updated: 2025-05-22T19:02:45.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixel(unsigned char*) at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/182 - https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35099.md
CVE ID: CVE-2022-35100 State: PUBLISHED Published: 2022-08-16T20:12:17 Last Updated: 2024-08-03T09:29:17.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxline_getbbox at /lib/gfxtools.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/182
CVE ID: CVE-2022-35101 State: PUBLISHED Published: 2022-08-16T20:12:17 Last Updated: 2024-08-03T09:29:17.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/182
CVE ID: CVE-2022-35104 State: PUBLISHED Published: 2022-08-16T20:12:19 Last Updated: 2024-08-03T09:29:17.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/182
CVE ID: CVE-2022-35105 State: PUBLISHED Published: 2022-08-16T20:12:20 Last Updated: 2024-08-03T09:29:17.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/183
CVE ID: CVE-2022-35106 State: PUBLISHED Published: 2022-08-16T20:12:20 Last Updated: 2024-08-03T09:29:17.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksum(unsigned char*, int) at /xpdf/FoFiTrueType.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/182
CVE ID: CVE-2022-35107 State: PUBLISHED Published: 2022-08-16T20:12:21 Last Updated: 2024-08-03T09:29:17.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/184
CVE ID: CVE-2022-35108 State: PUBLISHED Published: 2022-08-16T20:12:22 Last Updated: 2024-08-03T09:29:17.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/184
CVE ID: CVE-2022-35109 State: PUBLISHED Published: 2022-08-16T20:12:23 Last Updated: 2024-08-03T09:29:17.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/184
CVE ID: CVE-2022-35110 State: PUBLISHED Published: 2022-08-16T20:12:24 Last Updated: 2024-08-03T09:29:17.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/184
CVE ID: CVE-2022-35111 State: PUBLISHED Published: 2022-08-16T20:12:25 Last Updated: 2024-08-03T09:29:17.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at /sanitizer_common/sanitizer_stackdepot.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/184
CVE ID: CVE-2022-35113 State: PUBLISHED Published: 2022-08-16T20:12:27 Last Updated: 2024-08-03T09:29:17.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/185
CVE ID: CVE-2022-35114 State: PUBLISHED Published: 2022-08-16T20:12:28 Last Updated: 2024-08-03T09:29:17.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/185
CVE ID: CVE-2022-35115 State: PUBLISHED Published: 2022-08-23T17:36:40 Last Updated: 2024-08-03T09:29:17.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php. Additional Analyst Notes: - CVE Program Container: References: - https://support.icewarp.com/hc/en-us/community/posts/4419283857297-DC2-Update-2-Build-10-13-0-2-10- - https://veysel-xan.com/CVE-2022-35115.txt
CVE ID: CVE-2022-35117 State: PUBLISHED Published: 2022-08-17T17:35:56 Last Updated: 2024-08-03T09:29:17.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via update_medicine_details.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical Details module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangzhaoyuela/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/xss-1.md
CVE ID: CVE-2022-35118 State: PUBLISHED Published: 2022-08-01T19:24:40 Last Updated: 2024-08-03T09:29:17.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - http://pyrocms.com
CVE ID: CVE-2022-35120 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T18:29:35.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: IXPdata EasyInstall 6.6.14725 contains an access control issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://la.rsbir.ch/CVE-2022-35120.pdf
CVE ID: CVE-2022-35121 State: PUBLISHED Published: 2022-08-17T19:43:42 Last Updated: 2024-08-03T09:29:17.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/201206030/novel-plus/issues/92
CVE ID: CVE-2022-35122 State: PUBLISHED Published: 2022-08-17T20:27:15 Last Updated: 2024-08-03T09:29:17.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.pizzapower.me/2022/06/30/the-incredibly-insecure-weather-station/
CVE ID: CVE-2022-35131 State: PUBLISHED Published: 2022-07-25T20:30:45 Last Updated: 2024-08-03T09:29:17.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles. Additional Analyst Notes: - CVE Program Container: References: - http://joplin.com - https://github.com/ly1g3/Joplin-CVE-2022-35131 - https://github.com/laurent22/joplin/releases/tag/v2.9.1
CVE ID: CVE-2022-35132 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:39:45.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ly1g3/webmin-usermin-vulnerabilities - https://webmin.com/uchanges.html
CVE ID: CVE-2022-35133 State: PUBLISHED Published: 2022-08-17T20:38:00 Last Updated: 2024-08-03T09:29:17.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in CherryTree v0.99.30 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field when creating a node. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1Pidkh2MAQkue81dS7SI-d16Vun_s5tot/view?usp=sharing
CVE ID: CVE-2022-35134 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:29:44.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityblog101.blogspot.com/2022/10/cve-id-cve-2022-35134.html
CVE ID: CVE-2022-35135 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:28:51.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityblog101.blogspot.com/2022/10/cve-id-cve-2022-35135-cve-2022-35136.html
CVE ID: CVE-2022-35136 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:27:56.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityblog101.blogspot.com/2022/10/cve-id-cve-2022-35135-cve-2022-35136.html
CVE ID: CVE-2022-35137 State: PUBLISHED Published: 2022-09-29T18:20:41.000Z Last Updated: 2025-05-20T20:03:08.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: DGIOT Lightweight industrial IoT v4.5.4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html - https://securityblog101.blogspot.com/2022/09/cve-id-cve-2022-35137.html
CVE ID: CVE-2022-35142 State: PUBLISHED Published: 2022-08-04T19:37:12 Last Updated: 2024-08-03T09:29:17.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://raneto.com/ - https://github.com/gilbitron/Raneto/releases - https://cwe.mitre.org/data/definitions/703.html - https://gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/
CVE ID: CVE-2022-35143 State: PUBLISHED Published: 2022-08-04T19:37:10 Last Updated: 2024-08-03T09:29:17.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/521.html - http://raneto.com/ - https://github.com/gilbitron/Raneto/releases - https://gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/
CVE ID: CVE-2022-35144 State: PUBLISHED Published: 2022-08-04T19:36:56 Last Updated: 2024-08-03T09:29:17.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html - http://raneto.com/ - https://github.com/gilbitron/Raneto/releases - https://gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/
CVE ID: CVE-2022-35147 State: PUBLISHED Published: 2022-08-17T20:49:28 Last Updated: 2024-08-03T09:29:17.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doramart/DoraCMS/issues/256