Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27942 State: PUBLISHED Published: 2022-03-26T00:00:00 Last Updated: 2024-08-03T05:41:11.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/719 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-anno
fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-27943 State: PUBLISHED Published: 2022-03-26T00:00:00 Last Updated: 2024-08-03T05:41:10.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=28995 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/
CVE ID: CVE-2022-27944 State: PUBLISHED Published: 2022-08-06T19:19:52 Last Updated: 2024-08-03T05:41:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://drive.google.com/file/d/1hNjladTTP3tq7TL2Au5pdMI4nfJkUEvU/view?usp=sharing
CVE ID: CVE-2022-27945 State: PUBLISHED Published: 2022-03-26T16:13:33 Last Updated: 2024-08-03T05:41:10.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/donothingme/VUL/blob/main/vul2/2.md
CVE ID: CVE-2022-27946 State: PUBLISHED Published: 2022-03-26T16:14:03 Last Updated: 2024-08-03T05:41:10.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/donothingme/VUL/blob/main/vul3/3.md
CVE ID: CVE-2022-27947 State: PUBLISHED Published: 2022-03-26T16:13:45 Last Updated: 2024-08-03T05:41:11.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/donothingme/VUL/blob/main/vul1/1.md
CVE ID: CVE-2022-27948 State: PUBLISHED Published: 2022-03-27T12:07:15 Last Updated: 2024-08-03T05:41:10.815Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AC:L/AV:N/A:L/C:N/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://twitter.com/IfNotPike/status/1507818836568858631 - https://twitter.com/IfNotPike/status/1507852693699661827 - https://git
witter.com/IfNotPike/status/1507818836568858631 - https://twitter.com/IfNotPike/status/1507852693699661827 - https://github.com/pompel123/Tesla-Charging-Port-Opener
CVE ID: CVE-2022-27949 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:44:13.705Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-200 Description: A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and previous instances of the task failed). This issue affects Apache Airflow prior to 2.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/22754 - https://lists.apache.org/thread/n38oc5obb48600fsvnbopxcs0jpbp65p
nces: - https://github.com/apache/airflow/pull/22754 - https://lists.apache.org/thread/n38oc5obb48600fsvnbopxcs0jpbp65p - http://www.openwall.com/lists/oss-security/2022/11/14/3
CVE ID: CVE-2022-27950 State: PUBLISHED Published: 2022-03-28T03:45:55 Last Updated: 2024-08-03T05:41:10.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/03/13/1 - https://github.com/torvalds/linux/commit/817b8b9c5396d2b2d92311b46719aad5d3339dbe - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=817b8b9c5396d2b2d92311b46719aad5d3339dbe - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.11
CVE ID: CVE-2022-27952 State: PUBLISHED Published: 2022-04-12T16:29:04 Last Updated: 2024-08-03T05:41:11.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/payloadcms/payload - https://www.youtube.com/watch?v=6CfhAxA3xdQ
CVE ID: CVE-2022-27958 State: PUBLISHED Published: 2022-04-10T21:01:38 Last Updated: 2024-08-03T05:41:11.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/afeng2016-s/CVE-Request/blob/main/febs-security/febs.md
CVE ID: CVE-2022-27960 State: PUBLISHED Published: 2022-04-10T21:01:39 Last Updated: 2024-08-03T05:41:11.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/oufu/ofcms/issues/I4Z8SS
CVE ID: CVE-2022-27961 State: PUBLISHED Published: 2022-04-10T21:01:40 Last Updated: 2024-08-03T05:41:11.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/oufu/ofcms/issues/I4Z8QU
CVE ID: CVE-2022-27962 State: PUBLISHED Published: 2022-05-03T17:00:38 Last Updated: 2024-08-03T05:41:10.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluecms 1.6 has a SQL injection vulnerability at cooike. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xunyang1/my-vulnerability/issues/1
CVE ID: CVE-2022-27963 State: PUBLISHED Published: 2022-03-31T22:11:35 Last Updated: 2024-08-03T05:41:11.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xftp-CreateProcessW-Misuse-Binary-Hijack - https://www.netsarang.com/en/xftp-update-history/
CVE ID: CVE-2022-27964 State: PUBLISHED Published: 2022-03-31T22:11:37 Last Updated: 2024-08-03T05:41:11.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/blob/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xmanager-CreateProcessW-Misuse-Binary-Hijack - https://www.netsarang.com/en/xmanager-update-history/
CVE ID: CVE-2022-27965 State: PUBLISHED Published: 2022-03-31T22:11:37 Last Updated: 2024-08-03T05:41:11.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xlpd-CreateProcessW-Misuse-Binary-Hijack - https://www.netsarang.com/en/xlpd-update-history/
CVE ID: CVE-2022-27966 State: PUBLISHED Published: 2022-03-31T22:11:38 Last Updated: 2024-08-03T05:41:10.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsarang.com/en/xshell-update-history/ - https://github.com/ycdxsb/Vuln/blob/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xshell-CreateProcessW-Misuse-Binary-Hijack
CVE ID: CVE-2022-27967 State: PUBLISHED Published: 2022-09-08T15:31:05 Last Updated: 2024-08-03T05:41:11.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET request sent to /WebApp/SettingsExclusion/GetExclusionsProfiles. Additional Analyst Notes: - CVE Program Container: References: - https://www.cynet.com/platform/ - https://www.srlabs.de/bites/edr-security
CVE ID: CVE-2022-27968 State: PUBLISHED Published: 2022-09-08T15:31:11 Last Updated: 2024-08-03T05:41:11.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET request sent to /WebApp/SettingsFileMonitor/GetFileMonitorProfiles. Additional Analyst Notes: - CVE Program Container: References: - https://www.cynet.com/platform/ - https://www.srlabs.de/bites/edr-security
CVE ID: CVE-2022-27969 State: PUBLISHED Published: 2022-09-08T15:31:17 Last Updated: 2024-08-03T05:41:11.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers. Additional Analyst Notes: - CVE Program Container: References: - https://www.cynet.com/platform/ - https://www.srlabs.de/bites/edr-security
CVE ID: CVE-2022-27978 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T18:36:54.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tooljet.com - https://github.com/fourcube/security-advisories/blob/main/security-advisories/20220320-tooljet.md
CVE ID: CVE-2022-27979 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:50:07.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tooljet.com - https://github.com/fourcube/security-advisories/blob/main/security-advisories/20220321-tooljet-xss.md
CVE ID: CVE-2022-27982 State: PUBLISHED Published: 2022-05-02T13:28:31 Last Updated: 2024-08-03T05:41:11.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution (RCE) vulnerability via the fileName parameter at /guest_auth/cfg/upLoadCfg.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.adminxe.com/3651.html
CVE ID: CVE-2022-27983 State: PUBLISHED Published: 2022-05-02T13:28:32 Last Updated: 2024-08-03T05:41:10.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.adminxe.com/3687.html
CVE ID: CVE-2022-27984 State: PUBLISHED Published: 2022-04-26T13:58:22 Last Updated: 2024-08-03T05:41:10.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php. Additional Analyst Notes: - CVE Program Container: References: - http://cuppa.com - https://github.com/CuppaCMS/CuppaCMS/issues/30
CVE ID: CVE-2022-27985 State: PUBLISHED Published: 2022-04-26T13:58:23 Last Updated: 2024-08-03T05:41:10.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php. Additional Analyst Notes: - CVE Program Container: References: - http://cuppa.com - https://github.com/CuppaCMS/CuppaCMS/issues/31
CVE ID: CVE-2022-27991 State: PUBLISHED Published: 2022-04-08T08:23:45 Last Updated: 2024-08-03T05:41:11.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via the Staff ID and Staff Password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Online-Banking_SQLI/POC.md
CVE ID: CVE-2022-27992 State: PUBLISHED Published: 2022-04-08T08:23:46 Last Updated: 2024-08-03T05:41:11.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20SQLI/POC.md - http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2022-28000 State: PUBLISHED Published: 2022-04-08T08:23:47 Last Updated: 2024-08-03T05:41:11.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental/booking.php via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20SQLI/POC.md - http://packetstormsecurity.com/files/166657/Car-Rental-System-1.0-SQL-Injection.html
CVE ID: CVE-2022-28001 State: PUBLISHED Published: 2022-04-08T08:23:48 Last Updated: 2024-08-03T05:41:11.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Movie%20Seat%20Reservation%20System%20SQLI/POC.md - http://packetstormsecurity.com/files/166658/Movie-Seat-Reservation-System-1.0-File-Disclosure-SQL-Injection.html
CVE ID: CVE-2022-28002 State: PUBLISHED Published: 2022-04-08T08:23:49 Last Updated: 2024-08-03T05:41:11.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Movie%20Seat%20Reservation%20System%20File%20Disclosure/POC.md - http://packetstormsecurity.com/files/166658/Movie-Seat-Reservation-System-1.0-File-Disclosure-SQL-Injection.html
CVE ID: CVE-2022-28005 State: PUBLISHED Published: 2022-05-06T00:00:00 Last Updated: 2024-08-03T05:41:11.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server (via /Electron/download directory traversal in conjunction with a path component that uses backslash characters), leading to cleartext credential disclosure. Afterwards, the authenticated attacker is able to upload a file that overwrites a 3CX service binary, leading to Remote Code Execution as NT AUTHORITY\SYSTEM on Windows in
pload a file that overwrites a 3CX service binary, leading to Remote Code Execution as NT AUTHORITY\SYSTEM on Windows installations. NOTE: this issue exists because of an incomplete fix for CVE-2022-48482. Additional Analyst Notes: - CVE Program Container: References: - https://www.3cx.com/blog/change-log/phone-system-change-log/ - https://www.3cx.com/blog/releases/v18-update-3-final/ - https://www.3cx.com/blog/releases/v18-security-hotfix/ - https://medium.com/%40frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
CVE ID: CVE-2022-28006 State: PUBLISHED Published: 2022-04-21T19:05:34 Last Updated: 2024-08-03T05:41:11.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/12268/attendance-and-payroll-system-using-php.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/apsystem.zip - https://github.com/k0xx11/bug_report/blob/main/bug_a/README.md
CVE ID: CVE-2022-28007 State: PUBLISHED Published: 2022-04-21T19:05:33 Last Updated: 2024-08-03T05:41:11.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_b/README.md
CVE ID: CVE-2022-28008 State: PUBLISHED Published: 2022-04-21T19:05:33 Last Updated: 2024-08-03T05:41:11.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_c/README.md
CVE ID: CVE-2022-28009 State: PUBLISHED Published: 2022-04-21T19:05:32 Last Updated: 2024-08-03T05:41:11.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_d/README.mde
CVE ID: CVE-2022-28010 State: PUBLISHED Published: 2022-04-21T19:05:32 Last Updated: 2024-08-03T05:41:11.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_e/README.md
CVE ID: CVE-2022-28011 State: PUBLISHED Published: 2022-04-21T19:05:31 Last Updated: 2024-08-03T05:41:11.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_f/README.md
CVE ID: CVE-2022-28012 State: PUBLISHED Published: 2022-04-21T19:05:29 Last Updated: 2024-08-03T05:41:11.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_g/README.md
CVE ID: CVE-2022-28013 State: PUBLISHED Published: 2022-04-21T19:05:28 Last Updated: 2024-08-03T05:41:11.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_employee_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_h/README.md
CVE ID: CVE-2022-28014 State: PUBLISHED Published: 2022-04-21T19:05:27 Last Updated: 2024-08-03T05:41:11.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_i/README.md
CVE ID: CVE-2022-28015 State: PUBLISHED Published: 2022-04-21T19:05:27 Last Updated: 2024-08-03T05:41:11.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_j/README.md
CVE ID: CVE-2022-28016 State: PUBLISHED Published: 2022-04-21T19:05:26 Last Updated: 2024-08-03T05:41:11.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deduction_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_k/README.md
CVE ID: CVE-2022-28017 State: PUBLISHED Published: 2022-04-21T19:05:25 Last Updated: 2024-08-03T05:41:11.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/bug_l/README.md