Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/78.html - https://support.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-PSS-IS-2022-050316-Security-Notice-SF.pdf - https://research.nccgroup.com/2022/05/27/technical-advisory-fujitsu-centricstor-control-center-v8-1-unauthenticated-command-injection/
CVE ID: CVE-2022-31796 State: PUBLISHED Published: 2022-05-29T16:37:32 Last Updated: 2024-08-03T07:26:01.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/71 - https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d
CVE ID: CVE-2022-31798 State: PUBLISHED Published: 2022-08-25T22:15:45 Last Updated: 2024-08-03T07:26:01.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account. Additional Analyst Notes: - CVE Program Container: References: - https://eg.linkedin.com/in/omar-1-hashem - http://packetstormsecurity.com/files/167992/Nortek-Linear-eMerge-E3-Series-Account-Takeover.html - https://gist.github.com/omarhashem123/bccdcec70ab7e8f00519d56ea2e3fd79
CVE ID: CVE-2022-31799 State: PUBLISHED Published: 2022-05-29T21:25:44 Last Updated: 2024-08-03T07:26:01.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bottle before 0.12.20 mishandles errors during early request binding. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00 - https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c - https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20 - https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html - https://www.debian.org/security/2022/dsa-5159 - https://lists.fedoraproject.org/archives/list/
e/2022/06/msg00010.html - https://www.debian.org/security/2022/dsa-5159 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/
CVE ID: CVE-2022-31800 State: PUBLISHED Published: 2022-06-21T08:00:19.264808Z Last Updated: 2024-09-16T16:54:13.463Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, FC 350 PCI ETH Problem Types: CWE-345 Description: An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. Additional Analyst Notes: - CVE Program
s based on ProConOS/ProConOS eCLR in order to gain full control over the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-025/
CVE ID: CVE-2022-31801 State: PUBLISHED Published: 2022-06-21T08:00:31.688772Z Last Updated: 2024-09-16T18:50:12.497Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: MULTIPROG, ProConOS, ProConOS eCLR Problem Types: CWE-345 Description: An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-026/
CVE ID: CVE-2022-31802 State: PUBLISHED Published: 2022-06-24T07:46:09.625943Z Last Updated: 2024-09-17T00:32:18.904Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Gateway Server V2 Problem Types: CWE-187 Description: In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=
password. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=
CVE ID: CVE-2022-31803 State: PUBLISHED Published: 2022-06-24T07:46:11.188713Z Last Updated: 2024-09-16T20:01:21.315Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: CODESYS Products: CODESYS Gateway Server V2 Problem Types: CWE-400 Description: In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact. Additional Analyst Notes: - CVE Program Container: References: - https://c
are not affected and therefore remain intact. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=
CVE ID: CVE-2022-31804 State: PUBLISHED Published: 2022-06-24T07:46:13.080219Z Last Updated: 2024-09-16T20:16:34.660Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Gateway Server V2 Problem Types: CWE-789 Description: The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7
ferences: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=
CVE ID: CVE-2022-31805 State: PUBLISHED Published: 2022-06-24T07:46:15.076016Z Last Updated: 2024-09-16T18:55:26.939Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CODESYS Products: CODESYS Development System, CODESYS Gateway Client, CODESYS Gateway Server, CODESYS Web server, CODESYS SP Realtime NT, CODESYS PLCWinNT, CODESYS Runtime Toolkit 32 bit full, CODESYS Edge Gateway for Windows, CODESYS HMI (SL), CODESYS OPC DA Server SL, CODESYS PLCHandler, CODESYS Gateway Problem Types: CWE-523 Description: In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected
ple components in multiple versions transmit the passwords for the communication between clients and servers unprotected. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=
CVE ID: CVE-2022-31806 State: PUBLISHED Published: 2022-06-24T07:46:17.024144Z Last Updated: 2024-09-17T03:27:59.221Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS PLCWinNT, CODESYS Runtime Toolkit 32 bit full Problem Types: CWE-1188 Description: In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c
s: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=
CVE ID: CVE-2022-31807 State: PUBLISHED Published: 2025-05-23T15:03:38.535Z Last Updated: 2025-05-23T17:01:40.402Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Siemens Products: SiPass integrated AC5102 (ACC-G2), SiPass integrated ACC-AP Problem Types: CWE-347 Description: A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions), SiPass integrated ACC-AP (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid fir
d firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-367714.html
CVE ID: CVE-2022-31808 State: PUBLISHED Published: 2023-02-14T10:36:07.859Z Last Updated: 2025-03-20T20:14:08.699Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Siemens Products: SiPass integrated AC5102 (ACC-G2), SiPass integrated ACC-AP Problem Types: CWE-20 Description: A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges. Additi
authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-658793.pdf
CVE ID: CVE-2022-31810 State: PUBLISHED Published: 2023-07-11T09:07:03.150Z Last Updated: 2025-03-05T18:54:24.241Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SiPass integrated Problem Types: CWE-20 Description: A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition. Additional Analyst Notes: - CVE Program Container: - CI
the server application, creating a denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-924149.pdf
CVE ID: CVE-2022-31812 State: PUBLISHED Published: 2025-05-23T15:03:39.864Z Last Updated: 2025-05-23T17:01:19.066Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: SiPass integrated Problem Types: CWE-125 Description: A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/
condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-041082.html
CVE ID: CVE-2022-31813 State: PUBLISHED Published: 2022-06-08T10:00:57 Last Updated: 2024-08-03T07:26:01.124Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-348 Description: Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/8 - https://security.netapp.com/advisory/ntap-20220624-0005/ - htt
http://www.openwall.com/lists/oss-security/2022/06/08/8 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-31814 State: PUBLISHED Published: 2022-09-05T00:00:00 Last Updated: 2024-08-03T07:26:01.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html - https://www.ihteam.net/advisory/pfblockerng-unauth-rce-vulnerability/ - http://packetstormsecurity.com/files/168743/pfSense-pfBlockerNG-2.1.4_26-Shell-Upload.html - http://packetstormsecurity.com
p://packetstormsecurity.com/files/168743/pfSense-pfBlockerNG-2.1.4_26-Shell-Upload.html - http://packetstormsecurity.com/files/171123/pfBlockerNG-2.1.4_26-Remote-Code-Execution.html - https://github.com/pfsense/FreeBSD-ports/pull/1169 - https://github.com/pfsense/FreeBSD-ports/pull/1169/commits/071bdcf2d918c3e51cde11cf81fbd9b6f0379d7e
CVE ID: CVE-2022-31827 State: PUBLISHED Published: 2022-06-09T13:35:03 Last Updated: 2024-08-03T07:26:01.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zer0yu/CVE_Request/blob/master/MonstaFTP/MonstaFTP_v2_10_3_SSRF.md
CVE ID: CVE-2022-31830 State: PUBLISHED Published: 2022-06-09T13:35:02 Last Updated: 2024-08-03T07:26:01.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fex-team/kityminder/issues/345
CVE ID: CVE-2022-31836 State: PUBLISHED Published: 2022-07-05T00:00:00 Last Updated: 2024-08-03T07:26:01.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/beego/beego/issues/4961 - https://github.com/advisories/GHSA-95f9-94vc-665h
CVE ID: CVE-2022-31845 State: PUBLISHED Published: 2022-06-14T13:09:56 Last Updated: 2024-08-03T07:26:01.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN535%20G3__check_live.md - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30489
CVE ID: CVE-2022-31846 State: PUBLISHED Published: 2022-06-14T13:09:57 Last Updated: 2024-08-03T07:26:01.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function. Additional Analyst Notes: - CVE Program Container: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30489 - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN535%20G3__live_mfg.md
CVE ID: CVE-2022-31847 State: PUBLISHED Published: 2022-06-14T13:09:58 Last Updated: 2024-08-03T07:26:01.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__Sensitive%20information%20leakage.md
CVE ID: CVE-2022-31849 State: PUBLISHED Published: 2022-06-16T14:53:21 Last Updated: 2024-08-03T07:26:01.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skyedai910/Vuln/tree/master/MERCURY_MIPC451-4/command_execution_0
CVE ID: CVE-2022-31854 State: PUBLISHED Published: 2022-07-07T12:54:56 Last Updated: 2024-08-03T07:26:01.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://codoforum.com - https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc - https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py - http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
CVE ID: CVE-2022-31856 State: PUBLISHED Published: 2022-07-05T19:27:17 Last Updated: 2024-08-03T07:26:01.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50942
CVE ID: CVE-2022-31860 State: PUBLISHED Published: 2022-09-06T17:50:24.000Z Last Updated: 2025-06-12T13:54:37.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openremote/openremote/ - https://stackoverflow.com/questions/159148/groovy-executing-shell-commands - https://stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices - https://securityblog101.blogspot.com/2022/09/cve-2022-31860.html
CVE ID: CVE-2022-31861 State: PUBLISHED Published: 2022-09-13T21:51:06 Last Updated: 2024-08-03T07:26:01.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs. Additional Analyst Notes: - CVE Program Container: References: - https://securityblog101.blogspot.com/2022/09/cve-2022-31861.html
CVE ID: CVE-2022-31873 State: PUBLISHED Published: 2022-06-17T19:26:06 Last Updated: 2024-08-03T07:26:01.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jayus0821/uai-poc/blob/main/Trendnet/IP-110wn/xss2.md
CVE ID: CVE-2022-31874 State: PUBLISHED Published: 2022-06-17T19:29:02 Last Updated: 2024-08-03T07:26:01.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jayus0821/uai-poc/blob/main/ASUS/RT-N53/command%20injection.md
CVE ID: CVE-2022-31875 State: PUBLISHED Published: 2022-06-17T19:24:48 Last Updated: 2024-08-03T07:26:01.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jayus0821/uai-poc/blob/main/Trendnet/IP-110wn/xss1.md
CVE ID: CVE-2022-31876 State: PUBLISHED Published: 2022-06-17T19:15:37 Last Updated: 2024-08-03T07:26:01.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - https://github.com/jayus0821/uai-poc/blob/main/Netgear/WNAP320/unauth.md
CVE ID: CVE-2022-31877 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-25T19:24:33.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://msi.com - https://patsch.dev/2022/07/08/cve-2022-31877-privilege-escalation-in-msi-centers-msi-terminalserver-exe/
CVE ID: CVE-2022-31879 State: PUBLISHED Published: 2022-07-26T12:57:11 Last Updated: 2024-08-03T07:26:01.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Fire-Reporting
CVE ID: CVE-2022-31883 State: PUBLISHED Published: 2022-06-28T20:58:26 Last Updated: 2024-08-03T07:26:01.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/17Q8ItseCzj5W7wlD6ZFqL0y1N5Emxz4_?usp=sharing - https://marvalglobal.com/ - https://cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/idor-leads-to-unauthorized-access-to-api-keys
CVE ID: CVE-2022-31884 State: PUBLISHED Published: 2022-06-28T21:04:49 Last Updated: 2024-08-03T07:26:01.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys including high privilege and the Administrator users API Keys. Additional Analyst Notes: - CVE Program Container: References: - https://marvalglobal.com/ - https://drive.google.com/drive/folders/1lFM9cVUqTlKyDI2azmI1rIF4HoZBt_4i?usp=sharing - https://cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/unauthorized-delete-add-api-users-api-keys