Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27050 State: PUBLISHED Published: 2022-03-31T22:11:33 Last Updated: 2024-08-03T05:18:39.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability which allows attackers to escalate privileges to the system level. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/tree/main/BitComet-Unquoted-Service-Path
CVE ID: CVE-2022-27052 State: PUBLISHED Published: 2022-03-31T22:11:34 Last Updated: 2024-08-03T05:18:39.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/tree/main/FreeFTPd-Unquoted-Service-Path
CVE ID: CVE-2022-27055 State: PUBLISHED Published: 2022-04-19T16:47:28 Last Updated: 2024-08-03T05:18:39.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: ecjia-daojia 1.38.1-20210202629 is vulnerable to information leakage via content/apps/installer/classes/Helper.php. When the web program is installed, a new environment file is created, and the database information is recorded, including the database record password. NOTE: the vendor disputes this because the environment file is in the data directory, which is not intended for access by website visitors (only the statics directory can be accessed by website visitors) Additional Analyst Notes: - CVE Program Container: Referenc
y the statics directory can be accessed by website visitors) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ecjia/ecjia-daojia/issues/20 - https://github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Controllers/IndexController.php#L74-L78 - https://github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Helper.php#L312-L318
CVE ID: CVE-2022-27061 State: PUBLISHED Published: 2022-04-08T08:23:33 Last Updated: 2024-08-03T05:18:39.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/AeroCMS-Unrestricted-File-Upload-POC - https://drive.google.com/file/d/1PdF7gTUt_QuU2ObS9YUVew6orHaho-QF/view?usp=sharing - http://packetstormsecurity.com/files/166659/AeroCMS-0.0.1-Shell-Upload.html
CVE ID: CVE-2022-27062 State: PUBLISHED Published: 2022-04-08T08:23:34 Last Updated: 2024-08-03T05:18:39.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/AeroCMS-Add_Posts-Stored_XSS-Poc - https://drive.google.com/file/d/1kMGPBLKgefvKZj34QxDlPTxXdcT0kRR_/view?usp=sharing - http://packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site
kMGPBLKgefvKZj34QxDlPTxXdcT0kRR_/view?usp=sharing - http://packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.html
CVE ID: CVE-2022-27063 State: PUBLISHED Published: 2022-04-08T08:23:35 Last Updated: 2024-08-03T05:18:39.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/AeroCMS-Comment-Stored_XSS-Poc - https://drive.google.com/file/d/1GxOyX1JkG0trfdaCLfe06TR6WLIGoUXE/view?usp=sharing - http://packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross
e/d/1GxOyX1JkG0trfdaCLfe06TR6WLIGoUXE/view?usp=sharing - http://packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.html
CVE ID: CVE-2022-27064 State: PUBLISHED Published: 2022-04-08T08:23:35 Last Updated: 2024-08-03T05:18:39.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploaded_songs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/Musical-World-Unrestricted-File-Upload-RCE-POC - https://drive.google.com/file/d/1j5xDRpkYL7IeHYdUm34YX9iupvVEVa9D/view?usp=sharing - http://packetstormsecurity.com/files/166653/Musical-World-1-Shell-Upload.html
CVE ID: CVE-2022-27076 State: PUBLISHED Published: 2022-03-23T23:25:00 Last Updated: 2024-08-03T05:18:39.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_delAd/M3_delAd.md
CVE ID: CVE-2022-27077 State: PUBLISHED Published: 2022-03-23T23:25:00 Last Updated: 2024-08-03T05:18:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_uploadWeiXinPic/M3_uploadWeiXinPic.md
CVE ID: CVE-2022-27078 State: PUBLISHED Published: 2022-03-23T23:25:01 Last Updated: 2024-08-03T05:18:39.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_setAdInfoDetail/M3_setAdInfoDetail.md
CVE ID: CVE-2022-27079 State: PUBLISHED Published: 2022-03-23T23:25:02 Last Updated: 2024-08-03T05:18:39.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_setPicListItem/M3_setPicListItem.md
CVE ID: CVE-2022-27080 State: PUBLISHED Published: 2022-03-23T23:25:03 Last Updated: 2024-08-03T05:18:39.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_setWorkmode/M3_setWorkmode.md
CVE ID: CVE-2022-27081 State: PUBLISHED Published: 2022-03-23T23:25:04 Last Updated: 2024-08-03T05:18:39.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_SetLanInfo/M3_SetLanInfo.md
CVE ID: CVE-2022-27082 State: PUBLISHED Published: 2022-03-23T23:25:04 Last Updated: 2024-08-03T05:18:39.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_SetInternetLanInfo/M3_SetInternetLanInfo.md
CVE ID: CVE-2022-27083 State: PUBLISHED Published: 2022-03-23T23:25:05 Last Updated: 2024-08-03T05:18:39.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tenda_M3_uploadAccessCodePic/M3_uploadAccessCodePic.md
CVE ID: CVE-2022-27088 State: PUBLISHED Published: 2022-04-11T13:59:44 Last Updated: 2024-08-03T05:18:39.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://hansesecure.de/2022/03/schwachstelle-in-dsm-remote/
CVE ID: CVE-2022-27089 State: PUBLISHED Published: 2022-04-11T13:57:41 Last Updated: 2024-08-03T05:18:39.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to potentially escalate privileges to system level. Additional Analyst Notes: - CVE Program Container: References: - https://hansesecure.de/2022/03/schwachstelle-in-fujitsu-plugfree-network/
CVE ID: CVE-2022-27090 State: PUBLISHED Published: 2022-03-21T21:05:26 Last Updated: 2024-08-03T05:18:39.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/shenshaoqing/cms/issues/I4X3F9
CVE ID: CVE-2022-27092 State: REJECTED Published: 2022-05-20T12:48:00 Last Updated: 2022-06-26T12:45:37 Description: No description available.
CVE ID: CVE-2022-27094 State: PUBLISHED Published: 2022-05-20T12:48:01 Last Updated: 2024-08-03T05:18:39.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50817
CVE ID: CVE-2022-27095 State: PUBLISHED Published: 2022-05-20T12:48:13 Last Updated: 2024-08-03T05:18:39.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: BattlEye v0.9 contains an unquoted service path which allows attackers to escalate privileges to the system level. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50815
CVE ID: CVE-2022-27103 State: PUBLISHED Published: 2022-04-25T12:11:09 Last Updated: 2024-08-03T05:18:39.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/element-plus/element-plus/issues/6514 - https://github.com/asjdf/element-table-xss-test/ - https://github.com/asjdf/element-table-xss-test/issues/1
CVE ID: CVE-2022-27104 State: PUBLISHED Published: 2022-04-19T16:59:36 Last Updated: 2024-08-03T05:18:39.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.swascan.com/it/security-blog/ - https://www.formalms.org/download.html - https://www.swascan.com/security-advisory-forma-lms/
CVE ID: CVE-2022-27105 State: PUBLISHED Published: 2022-07-26T21:08:13 Last Updated: 2024-11-01T16:46:34.932912 Vendors: n/a Products: n/a Problem Types: n/a Description: InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users. Additional Analyst Notes: - CVE Program Container: References: - http://www.inmailx.com/products/inmailx - https://gist.github.com/0xVavaldi/9b7afbfe56938294480f7613805d3b7f
CVE ID: CVE-2022-27107 State: PUBLISHED Published: 2022-04-06T14:39:35 Last Updated: 2024-08-03T05:18:39.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orangehrm/orangehrm/issues/1176
CVE ID: CVE-2022-27108 State: PUBLISHED Published: 2022-04-06T14:40:43 Last Updated: 2024-08-03T05:18:39.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet`. Any user can create a timesheet in another user's account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orangehrm/orangehrm/issues/1173
CVE ID: CVE-2022-27109 State: PUBLISHED Published: 2022-04-06T14:42:10 Last Updated: 2024-08-03T05:18:39.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orangehrm/orangehrm/issues/1174
CVE ID: CVE-2022-27110 State: PUBLISHED Published: 2022-04-06T14:43:52 Last Updated: 2024-08-03T05:18:39.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orangehrm/orangehrm/issues/1175
CVE ID: CVE-2022-27111 State: PUBLISHED Published: 2022-04-11T14:43:27 Last Updated: 2024-08-03T05:18:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/32
CVE ID: CVE-2022-27114 State: PUBLISHED Published: 2022-05-09T16:52:39 Last Updated: 2024-08-03T05:18:39.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/commit/31f780487e5ddc426888638786cdc47631687275 - https://github.c
eferences: - https://github.com/michaelrsweet/htmldoc/commit/31f780487e5ddc426888638786cdc47631687275 - https://github.com/michaelrsweet/htmldoc/issues/471 - https://lists.debian.org/debian-lts-announce/2022/05/msg00014.html
CVE ID: CVE-2022-27115 State: PUBLISHED Published: 2022-04-11T14:19:31 Last Updated: 2024-08-03T05:18:39.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Studio-42/elFinder/issues/3458
CVE ID: CVE-2022-27123 State: PUBLISHED Published: 2022-04-05T19:03:01 Last Updated: 2024-08-03T05:18:39.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Employee-Performance-Evaluation
CVE ID: CVE-2022-27124 State: PUBLISHED Published: 2022-04-05T19:03:02 Last Updated: 2024-08-03T05:18:39.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/itsourcecode.com/Insurance-Management-System
CVE ID: CVE-2022-27125 State: PUBLISHED Published: 2022-04-10T20:24:10 Last Updated: 2024-08-03T05:18:39.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27126 State: PUBLISHED Published: 2022-04-10T20:24:09 Last Updated: 2024-08-03T05:18:39.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27127 State: PUBLISHED Published: 2022-04-10T20:24:08 Last Updated: 2024-08-03T05:18:39.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27128 State: PUBLISHED Published: 2022-04-10T20:24:08 Last Updated: 2024-08-03T05:18:39.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27129 State: PUBLISHED Published: 2022-04-10T20:24:06 Last Updated: 2024-08-03T05:18:39.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27131 State: PUBLISHED Published: 2022-04-10T20:24:03 Last Updated: 2024-08-03T05:18:39.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27133 State: PUBLISHED Published: 2022-04-10T20:24:01 Last Updated: 2024-08-03T05:18:39.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/My_CMSHunter/blob/main/zbzcms%20v1.0%20vulnerabilities.pdf
CVE ID: CVE-2022-27134 State: PUBLISHED Published: 2022-05-12T22:56:03 Last Updated: 2024-08-03T05:18:39.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attackers to win the cryptocurrency without paying ticket fee via the `std::string memo` parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kenun99/CVE-batdappboomx
CVE ID: CVE-2022-27135 State: PUBLISHED Published: 2022-04-25T12:48:10 Last Updated: 2024-08-03T05:18:39.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verf1sh/Poc/blob/master/pic_ppm.png - https://github.com/verf1sh/Poc/blob/master/poc_ppm - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42232
CVE ID: CVE-2022-27139 State: PUBLISHED Published: 2022-04-12T16:28:58 Last Updated: 2024-08-03T05:18:39.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploading of SVG files to Ghost does not represent a remote code execution vulnerability. SVGs are not executable on the server, and may only execute javascript in a client's browser - this is expected and intentional functionality Additional
erver, and may only execute javascript in a client's browser - this is expected and intentional functionality Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://youtu.be/FCqWEvir2wE - http://ghost.org/docs/security/#privilege-escalation-attacks
CVE ID: CVE-2022-27140 State: PUBLISHED Published: 2022-04-12T00:00:00 Last Updated: 2024-08-03T05:18:39.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file. NOTE: the vendor's position is that the observed behavior can only occur with "intentional misusing of the API": the express-fileupload middleware is not responsible for an application's business logic (e.g., determining whether or how a file should be renamed). Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=4XpofFi84KI
e renamed). Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=4XpofFi84KI - https://github.com/richardgirges/express-fileupload/issues/329#issuecomment-1387288644 - https://github.com/richardgirges/express-fileupload/issues/312#issuecomment-1134912967
CVE ID: CVE-2022-27145 State: PUBLISHED Published: 2022-04-08T00:00:00 Last Updated: 2024-08-03T05:18:39.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2108 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-27146 State: PUBLISHED Published: 2022-04-08T15:30:32 Last Updated: 2024-08-03T05:18:39.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2120
CVE ID: CVE-2022-27147 State: PUBLISHED Published: 2022-04-08T00:00:00 Last Updated: 2024-08-03T05:18:39.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2109 - https://www.debian.org/security/2023/dsa-5411