Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the Language-parameter
versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the Language-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
CVE ID: CVE-2022-43440 State: PUBLISHED Published: 2023-02-09T08:30:42.285Z Last Updated: 2025-03-24T15:15:20.026Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-427 Description: Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/14087
CVE ID: CVE-2022-43441 State: PUBLISHED Published: 2023-03-16T20:14:14.090Z Last Updated: 2024-08-03T13:32:59.404Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ghost Foundation Products: node-sqlite3 Problem Types: CWE-915 Description: A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1645 - https:
ner: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1645 - https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74
CVE ID: CVE-2022-43442 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:17:55.944Z Vendors: FUJI SOFT INCORPORATED Products: +F FS040U software Problem Types: Plaintext Storage of a Password Description: Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fsi.co.jp/mobile/plusF/news/22102801.html - https://www.fsi.co.jp/mobile/plusF/news/22102802.html - https://www.fsi.co.jp/mobile/plusF/news/22102803.h
102801.html - https://www.fsi.co.jp/mobile/plusF/news/22102802.html - https://www.fsi.co.jp/mobile/plusF/news/22102803.html - https://www.fsi.co.jp/mobile/plusF/news/22102804.html - https://jvn.jp/en/jp/JVN74285622/index.html
CVE ID: CVE-2022-43443 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:54:48.368Z Vendors: BUFFALO INC. Products: WXR-11000XE12, WXR-5700AX7S, WXR-5700AX7B, WSR-3200AX4S, WSR-3200AX4B, WSR-2533DHP, WSR-2533DHP2, WSR-A2533DHP2, WSR-2533DHP3, WSR-A2533DHP3, WSR-2533DHPL, WSR-2533DHPL2, WSR-2533DHPLS, WSR-2533DHPLB, WSR-1166DHP, WSR-1166DHP2, WCR-1166DS Problem Types: OS command injection Description: OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ly crafted request is sent to the management page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20240131-01.html - https://jvn.jp/en/vu/JVNVU97099584/
CVE ID: CVE-2022-43444 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:08.101Z Description: No description available.
CVE ID: CVE-2022-43446 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:09.505Z Description: No description available.
CVE ID: CVE-2022-43447 State: PUBLISHED Published: 2022-11-17T22:45:54.530Z Last Updated: 2025-04-16T17:43:04.159Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-43448 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T17:51:08.171Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: V-SFT and TELLUS Problem Types: Out-of-bounds Write Description: Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/index.php - https://jvn.jp/en/vu/JVNVU90679513/index.html
CVE ID: CVE-2022-43449 State: PUBLISHED Published: 2022-11-03T19:15:14.052Z Last Updated: 2025-05-02T18:49:44.928Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-dis
ram Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-11.md
CVE ID: CVE-2022-43450 State: PUBLISHED Published: 2023-12-19T21:24:05.517Z Last Updated: 2024-08-03T13:32:59.243Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: XWP Products: Stream Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/stream/wordpress-stream-plugin-3-9-2-auth-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2022-43451 State: PUBLISHED Published: 2022-11-03T19:15:11.485048Z Last Updated: 2024-08-03T13:32:58.754Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-287 Description: OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape application sandbox.If chained with other vulnerabilities it would allow an unprivileged process to gain full root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security
nal Analyst Notes: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-11.md
CVE ID: CVE-2022-43452 State: PUBLISHED Published: 2022-11-17T22:45:55.011Z Last Updated: 2025-04-16T17:42:54.049Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-43453 State: PUBLISHED Published: 2024-06-21T13:33:30.896Z Last Updated: 2024-08-03T13:32:59.411Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bill Minozzi Products: WP Tools Problem Types: CWE-862 Description: Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wptools/wordpress-wp-tools-plugin-2-51-3-41-auth-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-43454 State: PUBLISHED Published: 2025-03-10T19:37:48.138Z Last Updated: 2025-03-11T03:55:18.491Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/102808 - https://support.apple.com/en-us/102741 - https://support.apple.com/en-us/102807 - https://su
rt.apple.com/en-us/102808 - https://support.apple.com/en-us/102741 - https://support.apple.com/en-us/102807 - https://support.apple.com/en-us/102836
CVE ID: CVE-2022-43455 State: PUBLISHED Published: 2023-01-18T00:32:37.327Z Last Updated: 2025-01-16T22:00:25.829Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: Sewio Products: RTLS Studio Problem Types: CWE-20 Description: Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to the service_start, service_stop, and service_restart modules of the software. This could allow an attacker to start, stop, or restart arbitrary services running on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.g
the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01
CVE ID: CVE-2022-43456 State: PUBLISHED Published: 2023-08-11T02:36:57.929Z Last Updated: 2024-10-10T15:43:21.154Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) RST software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00795.html
CVE ID: CVE-2022-43457 State: PUBLISHED Published: 2022-11-17T22:45:54.782994Z Last Updated: 2024-10-15T18:34:46.178Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-43458 State: PUBLISHED Published: 2023-04-16T08:29:22.281Z Last Updated: 2025-01-10T18:53:14.598Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Code Tides Products: Advanced Floating Content Problem Types: CWE-79 Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Code Tides Advanced Floating Content plugin <= 1.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-floating-content-lite/wordpress-advanced-floating-content-plugin-1-2-1-multiple-auth-cross-site-scripting-xss-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-43459 State: PUBLISHED Published: 2023-02-28T13:29:59.633Z Last Updated: 2025-01-13T15:56:13.497Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Captainform Products: Forms by CaptainForm – Form Builder for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/captainform/wordpress-forms-by-captainform-2-5-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-43460 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:34:23.542Z Vendors: FUJIFILM Business Innovation Corp. Products: Driver Distributor Problem Types: Storing passwords in a recoverable format Description: Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html - https://jvn.jp/en/jp/JVN
ferences: - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html - https://jvn.jp/en/jp/JVN22830348/
CVE ID: CVE-2022-43461 State: PUBLISHED Published: 2023-03-17T13:25:43.922Z Last Updated: 2025-01-13T15:50:54.223Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: John West Products: Slideshow SE Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/slideshow-se/wordpress-slideshow-se-plugin-2-5-5-auth-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-43462 State: PUBLISHED Published: 2023-01-17T04:41:37.864Z Last Updated: 2025-01-08T22:09:21.595Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adeel Ahmed Products: IP Blacklist Cloud Problem Types: CWE-89 Description: Auth. SQL Injection (SQLi) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ip-blacklist-cloud/wordpress-ip-blacklist-cloud-plugin-5-00-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2022-43463 State: PUBLISHED Published: 2022-11-18T18:51:39.803143Z Last Updated: 2024-09-17T02:36:35.858Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: YIKES, Inc. Products: Custom Product Tabs for WooCommerce (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/yikes-inc-easy-custom-woocommerce-product-tabs/wordpress-custom-product-tabs-for-woocommerce-plugin-1-7-9-auth-stored-cross-site-scripting-xss-vu
commerce-product-tabs/wordpress-custom-product-tabs-for-woocommerce-plugin-1-7-9-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-43464 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:20:29.023Z Vendors: UNIMO Technology Co., Ltd Products: UDR-JA1604/UDR-JA1608/UDR-JA1616 Problem Types: Hidden Functionality Description: Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.unimo.co.jp/table_notice/index.php?act=1&resid=1666831567-004418 - https://jvn.jp/en/vu/JVNVU94514762/index.html
CVE ID: CVE-2022-43465 State: PUBLISHED Published: 2023-05-10T13:17:21.364Z Last Updated: 2025-01-27T17:59:13.551Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) SCS software Problem Types: denial of service, CWE-285 Description: Improper authorization in the Intel(R) SCS software all versions may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00796.html
CVE ID: CVE-2022-43466 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:36:40.144Z Vendors: BUFFALO INC. Products: WXR-5700AX7S, WXR-5700AX7B, WSR-3200AX4S, WSR-3200AX4B, WSR-2533DHP2, WSR-A2533DHP2, WSR-2533DHP3, WSR-A2533DHP3, WSR-2533DHPL2, WSR-2533DHPLS, WSR-2533DHPLB, WEX-1800AX4, WEX-1800AX4EA Problem Types: OS command injection Description: OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
sent to a specific CGI program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20240131-01.html - https://jvn.jp/en/vu/JVNVU97099584/
CVE ID: CVE-2022-43467 State: PUBLISHED Published: 2023-07-21T20:25:39.044Z Last Updated: 2024-08-03T13:32:58.825Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-
rogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1671
CVE ID: CVE-2022-43468 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T18:15:21.717Z Vendors: Hector Cabrera Products: WordPress Popular Posts Problem Types: External Initialization of Trusted Variables or Data Stores Description: External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal variables. As a result, the number of views for an article may be manipulated through a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plu
put. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wordpress-popular-posts/ - https://github.com/cabrerahector/wordpress-popular-posts/ - https://jvn.jp/en/jp/JVN13927745/index.html
CVE ID: CVE-2022-43469 State: PUBLISHED Published: 2023-02-14T05:20:02.407Z Last Updated: 2025-01-13T15:57:25.302Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Orchestrated Products: Corona Virus (COVID-19) Banner & Live Data Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Orchestrated Corona Virus (COVID-19) Banner & Live Data plugin <= 1.7.0.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/corona-virus-covid-19-banner/wordpress-corona-virus-covid-19-banner-live-data-plugin-1-7-0-6-cross-site-request-forgery-csrf-vulne
us-covid-19-banner/wordpress-corona-virus-covid-19-banner-live-data-plugin-1-7-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-43470 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:16:21.169Z Vendors: FUJI SOFT INCORPORATED Products: +F FS040U, +F FS020W, +F FS030W, and +F FS040W Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software versions v1.4.1 and earlier allows an adjacent attacker to hijack the authentication of an administrator and user's unintended operations such as to reboot the product and/or reset the configuration to the initial set-up ma
r and user's unintended operations such as to reboot the product and/or reset the configuration to the initial set-up may be performed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fsi.co.jp/mobile/plusF/news/22102801.html - https://www.fsi.co.jp/mobile/plusF/news/22102802.html - https://www.fsi.co.jp/mobile/plusF/news/22102803.html - https://www.fsi.co.jp/mobile/plusF/news/22102804.html - https://jvn.jp/en/jp/JVN74285622/index.html
CVE ID: CVE-2022-43472 State: PUBLISHED Published: 2024-12-13T14:21:59.704Z Last Updated: 2024-12-23T18:07:04.600Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: StylemixThemes Products: eRoom – Zoom Meetings & Webinar Problem Types: CWE-862 Description: Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eroom-zoom-meetings-webinar/vulnerability/wordpress-eroom-plug
ences: - https://patchstack.com/database/wordpress/plugin/eroom-zoom-meetings-webinar/vulnerability/wordpress-eroom-plugin-1-4-6-broken-access-control-vulnerability?_s_id=cve