Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44552 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:36:27.948Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44553 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:03:48.410Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-00000014
pport/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44554 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:01:14.802Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification vulnerability Description: The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44555 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T13:59:37.193Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Service hijacking vulnerability Description: The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44556 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:05:30.614Z Vendors: n/a Products: EMUI, HarmonyOS Problem Types: Incorrect Type Conversion or Cast Description: Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-44557 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T13:56:40.744Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification vulnerability Description: The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44558 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T13:54:32.124Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Serialization/deserialization mismatch vulnerability Description: The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44559 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T13:52:06.669Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Serialization/deserialization mismatch vulnerability Description: The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44560 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T13:49:32.389Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Intent redirection vulnerability Description: The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44561 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T13:47:21.176Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification vulnerability Description: The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44562 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:34:10.551Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Serialization/deserialization mismatch vulnerability Description: The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44563 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:32:09.385Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Race condition vulnerability Description: There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44564 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-11T16:10:39.909Z Vendors: Huawei Products: Aslan-AL10 Problem Types: Path Traversal Description: Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20221102-01-d002dd8e-en
CVE ID: CVE-2022-44565 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T14:20:27.057Z Vendors: n/a Products: UISP Wireless Problem Types: CWE-284 Description: An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-027-027/123e4577-9f00-4777-abe1-64a1d56fee05
CVE ID: CVE-2022-44566 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:43:54.894Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-400 Description: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.rub
f Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119 - https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html
CVE ID: CVE-2022-44567 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T14:19:24.783Z Vendors: n/a Products: Rocket.chat - Electron Desktop Problem Types: CWE-78 Description: A command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal(), which may lead to remote code execution (internalVideoChatWindow.ts#L17). To exploit the vulnerability, the internal video chat window must be disabled or a Mac App Store build must be used (internalVideoChatWindow.ts#L14). The vulnerability may be exploited by an XSS attack because the function openInternalVideoC
rnalVideoChatWindow.ts#L14). The vulnerability may be exploited by an XSS attack because the function openInternalVideoChatWindow is exposed in the Rocket.Chat-Desktop-API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1781102
CVE ID: CVE-2022-44569 State: PUBLISHED Published: 2023-11-03T18:13:19.892Z Last Updated: 2024-09-05T19:11:56.731Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Automation Description: A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.ivanti.com/res/help/en_US/IA/2023/Admin/Content/relnotes.htm
CVE ID: CVE-2022-44570 State: PUBLISHED Published: 2023-02-09T00:00:00 Last Updated: 2024-08-03T13:54:03.858Z Vendors: n/a Products: https://github.com/rack/rack Problem Types: CWE-400 Description: A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.rubyonrails.org/t/cve-2022
be impacted. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.rubyonrails.org/t/cve-2022-44570-possible-denial-of-service-vulnerability-in-racks-range-header-parsing/82125 - https://www.debian.org/security/2023/dsa-5530 - https://security.netapp.com/advisory/ntap-20231208-0010/
CVE ID: CVE-2022-44571 State: PUBLISHED Published: 2023-02-09T00:00:00 Last Updated: 2024-08-03T13:54:03.839Z Vendors: n/a Products: https://github.com/rack/rack Problem Types: CWE-400 Description: There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an attacker to craft an input that can cause Content-Disposition header parsing in Rackto take an unexpected amount of time, possibly resulting in a denial ofservice attack vector. This header is used typically used in multipartparsing. Any applications that parse multipart posts using Rack (virtuallyall Rails applications) are impacted. Addit
artparsing. Any applications that parse multipart posts using Rack (virtuallyall Rails applications) are impacted. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.rubyonrails.org/t/cve-2022-44571-possible-denial-of-service-vulnerability-in-rack-content-disposition-parsing/82126 - https://www.debian.org/security/2023/dsa-5530 - https://security.netapp.com/advisory/ntap-20231208-0013/
CVE ID: CVE-2022-44572 State: PUBLISHED Published: 2023-02-09T00:00:00 Last Updated: 2024-08-03T13:54:03.874Z Vendors: n/a Products: https://github.com/rack/rack Problem Types: CWE-400 Description: A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.
ll Rails applications) are impacted. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1639882 - https://www.debian.org/security/2023/dsa-5530 - https://security.netapp.com/advisory/ntap-20231208-0014/
CVE ID: CVE-2022-44574 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T17:07:14.895Z Vendors: n/a Products: Ivanti Avalanche Problem Types: CWE-287 Description: An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-ZDI-CAN-19513-Security-Advisory?language=en_US
CVE ID: CVE-2022-44575 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:25:24.922Z Vendors: Siemens Products: PLM Help Server V4.2 Problem Types: CWE-79 Description: A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf
CVE ID: CVE-2022-44576 State: PUBLISHED Published: 2022-11-02T21:05:55.815Z Last Updated: 2025-02-20T19:57:28.729Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: AgentEasy Products: AgentEasy Properties (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in AgentEasy Properties plugin <= 1.0.4 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/agenteasy-properties/wordpress-agenteasy-properties-plugin-1-0-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugi
teasy-properties-plugin-1-0-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/agenteasy-properties/
CVE ID: CVE-2022-44577 State: REJECTED Published: N/A Last Updated: 2022-12-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-44578 State: PUBLISHED Published: 2024-12-13T14:23:06.753Z Last Updated: 2024-12-13T21:20:19.831Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Pierre JEHAN Products: Owl Carousel Problem Types: CWE-862 Description: Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Owl Carousel: from n/a through 0.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/owl-carousel/vulnerability/wordpress-owl-carousel-plugin-0-5-3-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-44580 State: PUBLISHED Published: 2023-03-15T14:37:16.009Z Last Updated: 2025-01-13T15:51:45.998Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: RichPlugins Products: Plugin for Google Reviews Problem Types: CWE-89 Description: SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/widget-google-reviews/wordpress-plugin-for-google-reviews-plugin-2-2-3-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2022-44581 State: PUBLISHED Published: 2024-05-17T06:27:07.688Z Last Updated: 2024-08-03T13:54:03.943Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: WPMU DEV Products: Defender Security Problem Types: CWE-922 Description: Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-3-3-2-broken-authentication-vulnerabi
ck.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-3-3-2-broken-authentication-vulnerability?_s_id=cve
CVE ID: CVE-2022-44582 State: PUBLISHED Published: 2023-04-23T08:55:26.874Z Last Updated: 2025-01-10T18:48:52.146Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Apptivo Products: Apptivo Business Site CRM Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= 3.0.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/apptivo-business-site/wordpress-apptivo-business-site-crm-plugin-3-0-12-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-44583 State: PUBLISHED Published: 2022-11-18T22:02:16.165Z Last Updated: 2025-02-20T14:19:49.365Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: WhatArmy Products: WatchTowerHQ (WordPress plugin) Problem Types: Arbitrary File Download Description: Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/watchtowerhq/#developers - https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2022-44584 State: PUBLISHED Published: 2022-11-18T22:01:01.983Z Last Updated: 2025-02-20T19:51:27.485Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: WhatArmy Products: WatchTowerHQ (WordPress plugin) Problem Types: Arbitrary File Deletion Description: Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-deletion-vulnerability?_s_id=cve - https://wordpress.org/plugins/watchtowerhq/#developers
CVE ID: CVE-2022-44585 State: PUBLISHED Published: 2023-02-02T15:52:02.903Z Last Updated: 2025-01-13T15:58:38.942Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Magneticlab Sàrl Products: Homepage Pop-up Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/homepage-pop-up/wordpress-homepage-popup-plugin-1-2-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-44586 State: PUBLISHED Published: 2022-11-02T21:13:33.068Z Last Updated: 2025-02-20T19:57:18.855Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Ayoub Media Products: AM-HiLi (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/am-hili-affiliate-manager-for-publishers/wordpress-am-hili-plugin-1-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/am-hili-affiliate-ma
in-1-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/am-hili-affiliate-manager-for-publishers/
CVE ID: CVE-2022-44587 State: PUBLISHED Published: 2024-06-21T15:54:52.534Z Last Updated: 2024-08-03T13:54:03.888Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Products: WP 2FA Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-2fa/wordpress-wp-2fa-plugin-2-6-3-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2022-44588 State: PUBLISHED Published: 2022-12-15T13:21:40.384Z Last Updated: 2025-02-20T19:47:52.648Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Blocksera Products: Cryptocurrency Widgets Pack Problem Types: CWE-89 Description: Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cryptocurrency-widgets-pack/wordpress-cryptocurrency-widgets-pack-plugin-1-8-1-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2022-44589 State: PUBLISHED Published: 2023-12-29T09:40:07.425Z Last Updated: 2025-04-17T20:20:11.972Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: miniOrange Products: miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login.This issue affects miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA ,