Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-10018 State: PUBLISHED Published: 2023-01-06T12:33:34.030Z Last Updated: 2024-08-06T08:58:24.673Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: DBRisinajumi Products: d2files Problem Types: CWE-89 Description: A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUpload/actionDownloadFile of the file controllers/D2filesController.php. The manipulation leads to sql injection. Upgrading to version 1.0.0 is able to address this issue. The identifier of the patch is b5767f2ec9d0f3cbfda7f13c84740e2179c90574. It is recommended to upgrade the affected component. The
ifier of the patch is b5767f2ec9d0f3cbfda7f13c84740e2179c90574. It is recommended to upgrade the affected component. The identifier VDB-217561 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217561 - https://vuldb.com/?ctiid.217561 - https://github.com/DBRisinajumi/d2files/commit/b5767f2ec9d0f3cbfda7f13c84740e2179c90574 - https://github.com/DBRisinajumi/d2files/releases/tag/1.0.0
CVE ID: CVE-2015-10019 State: PUBLISHED Published: 2023-01-07T08:48:03.997Z Last Updated: 2025-04-10T13:18:54.912Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: foxoverflow Products: MySimplifiedSQL Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown processing of the file MySimplifiedSQL_Examples.php. The manipulation of the argument FirstName/LastName leads to cross site scripting. The attack may be initiated remotely. The patch is named 3b7481c72786f88041b7c2d83bb4f219f77f1293. It is recommended to apply a patch to fix this issue. The associated identifier of th
72786f88041b7c2d83bb4f219f77f1293. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217595. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217595 - https://vuldb.com/?ctiid.217595 - https://github.com/foxoverflow/MySimplifiedSQL/commit/3b7481c72786f88041b7c2d83bb4f219f77f1293
CVE ID: CVE-2015-10020 State: PUBLISHED Published: 2023-01-14T20:15:30.605Z Last Updated: 2024-08-06T08:58:25.975Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ssn2013 Products: cis450Project Problem Types: CWE-89 Description: A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the patch is 39b495011437a105c7670e17e071f99195b4922e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218380. Additional Analyst N
recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218380. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218380 - https://vuldb.com/?ctiid.218380 - https://github.com/ssn2013/cis450Project/commit/39b495011437a105c7670e17e071f99195b4922e
CVE ID: CVE-2015-10021 State: PUBLISHED Published: 2023-01-07T11:19:58.558Z Last Updated: 2024-08-06T08:58:24.668Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ritterim Products: definely Problem Types: CWE-79 Description: A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/database.js. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is b31a022ba4d8d17148445a13ebb5a42ad593dbaa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217608. Additional Analyst Notes: - CVE Program Containe
to fix this issue. The identifier of this vulnerability is VDB-217608. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217608 - https://vuldb.com/?ctiid.217608 - https://github.com/ritterim/definely/pull/51 - https://github.com/ritterim/definely/commit/b31a022ba4d8d17148445a13ebb5a42ad593dbaa
CVE ID: CVE-2015-10022 State: PUBLISHED Published: 2023-01-07T11:23:43.686Z Last Updated: 2024-08-06T08:58:24.628Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IISH Products: nlgis2 Problem Types: CWE-89 Description: A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/custom_import.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is recommended to apply a patch to fix this issue. The identifier VDB-217609 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
to fix this issue. The identifier VDB-217609 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217609 - https://vuldb.com/?ctiid.217609 - https://github.com/IISH/nlgis2/commit/8bdb6fcf7209584eaf1232437f0f53e735b2b34c
CVE ID: CVE-2015-10023 State: PUBLISHED Published: 2023-01-07T11:31:46.264Z Last Updated: 2024-11-25T17:10:09.392Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Fumon Products: trello-octometric Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217611. Additional Analyst Notes: - CVE Program Cont
this issue. The associated identifier of this vulnerability is VDB-217611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217611 - https://vuldb.com/?ctiid.217611 - https://github.com/Fumon/trello-octometric/commit/a1f1754933fbf21e2221fbc671c81a47de6a04ef
CVE ID: CVE-2015-10024 State: PUBLISHED Published: 2023-01-07T12:39:47.568Z Last Updated: 2025-04-09T19:28:07.945Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: hoffie Products: larasync Problem Types: CWE-22 Description: A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/file_storage.go. The manipulation leads to path traversal. The name of the patch is 776bad422f4bd4930d09491711246bbeb1be9ba5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217612. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
e identifier of this vulnerability is VDB-217612. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217612 - https://vuldb.com/?ctiid.217612 - https://github.com/hoffie/larasync/commit/776bad422f4bd4930d09491711246bbeb1be9ba5
CVE ID: CVE-2015-10025 State: PUBLISHED Published: 2023-01-07T12:48:30.453Z Last Updated: 2025-05-28T13:32:35.948Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: luelista Products: miniConf Problem Types: CWE-404 Description: A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and 1.8.0 is able to address this issue. The patch is named c06c2e5116c306e4e1bc79779f0eda2d1182f655. It is recommended to upgrade the affected compo
this issue. The patch is named c06c2e5116c306e4e1bc79779f0eda2d1182f655. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217615. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217615 - https://vuldb.com/?ctiid.217615 - https://github.com/luelista/miniConf/commit/c06c2e5116c306e4e1bc79779f0eda2d1182f655
CVE ID: CVE-2015-10026 State: PUBLISHED Published: 2023-01-07T12:57:25.062Z Last Updated: 2024-08-06T08:58:26.113Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: tiredtyrant Products: flairbot Problem Types: CWE-89 Description: A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file flair.py. The manipulation leads to sql injection. The patch is identified as 5e112b68c6faad1d4699d02c1ebbb7daf48ef8fb. It is recommended to apply a patch to fix this issue. VDB-217618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
7618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217618 - https://vuldb.com/?ctiid.217618 - https://github.com/tiredtyrant/flairbot/commit/5e112b68c6faad1d4699d02c1ebbb7daf48ef8fb
CVE ID: CVE-2015-10027 State: PUBLISHED Published: 2023-01-07T16:42:32.233Z Last Updated: 2024-08-06T08:58:26.394Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: hydrian Products: TTRSS-Auth-LDAP Problem Types: CWE-90 Description: A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown functionality of the component Username Handler. The manipulation leads to ldap injection. Upgrading to version 2.0b1 is able to address this issue. The patch is identified as a7f7a5a82d9202a5c40d606a5c519ba61b224eb8. It is recommended to upgrade the affected component. VDB-217622 is the identifie
f7a5a82d9202a5c40d606a5c519ba61b224eb8. It is recommended to upgrade the affected component. VDB-217622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217622 - https://vuldb.com/?ctiid.217622 - https://github.com/hydrian/TTRSS-Auth-LDAP/pull/14 - https://github.com/hydrian/TTRSS-Auth-LDAP/commit/a7f7a5a82d9202a5c40d606a5c519ba61b224eb8 - https://github.com/hydrian/TTRSS-Auth-LDAP/releases/tag/2.0b1
CVE ID: CVE-2015-10028 State: PUBLISHED Published: 2023-01-07T18:35:42.542Z Last Updated: 2024-11-25T17:09:13.161Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: ss15-this-is-sparta Problem Types: CWE-79 Description: A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is ba2f71ad3a46e5949ee0c510b544fa4ea973baaa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217624. Additional Anal
t is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217624. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217624 - https://vuldb.com/?ctiid.217624 - https://github.com/mauriciosoares/ss15-this-is-sparta/pull/1 - https://github.com/mauriciosoares/ss15-this-is-sparta/commit/ba2f71ad3a46e5949ee0c510b544fa4ea973baaa
CVE ID: CVE-2015-10029 State: PUBLISHED Published: 2023-01-07T19:36:40.427Z Last Updated: 2025-04-09T14:46:17.975Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: kelvinmo Products: simplexrd Problem Types: CWE-611 Description: A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is identified as 4c9f2e028523ed705b555eca2c18c64e71f1a35d. It is recommended to upgrade the affected component. VDB-217630 is the identifier as
028523ed705b555eca2c18c64e71f1a35d. It is recommended to upgrade the affected component. VDB-217630 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217630 - https://vuldb.com/?ctiid.217630 - https://github.com/kelvinmo/simplexrd/commit/4c9f2e028523ed705b555eca2c18c64e71f1a35d - https://github.com/kelvinmo/simplexrd/releases/tag/v3.1.1
CVE ID: CVE-2015-10030 State: PUBLISHED Published: 2023-01-08T09:27:12.135Z Last Updated: 2025-04-09T14:42:24.082Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SUKOHI Products: Surpass Problem Types: CWE-21 Description: A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigne
2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217642 - https://vuldb.com/?ctiid.217642 - https://github.com/SUKOHI/Surpass/commit/d22337d453a2a14194cdb02bf12cdf9d9f827aa7 - https://github.com/SUKOHI/Surpass/releases/tag/1.0.0
CVE ID: CVE-2015-10031 State: PUBLISHED Published: 2023-01-08T16:16:01.361Z Last Updated: 2024-08-06T08:58:25.984Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: purpleparrots Products: 491-Project Problem Types: CWE-89 Description: A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component Highscore Handler. The manipulation leads to sql injection. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217648. Additional Analyst Notes: - CISA ADP Vul
a patch to fix this issue. The identifier of this vulnerability is VDB-217648. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217648 - https://vuldb.com/?ctiid.217648 - https://github.com/purpleparrots/491-Project/commit/a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab
CVE ID: CVE-2015-10032 State: PUBLISHED Published: 2023-01-09T08:45:10.725Z Last Updated: 2025-04-09T19:27:26.144Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: HealthMateWeb Problem Types: CWE-79 Description: A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file createaccount.php. The manipulation of the argument username/password/first_name/last_name/company/phone leads to cross site scripting. The attack can be launched remotely. The patch is named 472776c25b1046ecaf962c46fed7c713c72c28e3. It is recommended to apply a patch to fix this issue. The associated identifi
472776c25b1046ecaf962c46fed7c713c72c28e3. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217663. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217663 - https://vuldb.com/?ctiid.217663 - https://github.com/StevenElberger/HealthMateWeb/commit/472776c25b1046ecaf962c46fed7c713c72c28e3
CVE ID: CVE-2015-10033 State: PUBLISHED Published: 2023-01-09T20:36:58.458Z Last Updated: 2024-08-06T08:58:26.490Z Severity: N/A (CVSS 3.7 AV:A/AC:L/Au:M/C:N/I:P/A:P) Vendors: jvvlee Products: MerlinsBoard Problem Types: CWE-285 Description: A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to apply a patch to fix this issue. The identifier VDB-217713 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https
er VDB-217713 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217713 - https://vuldb.com/?ctiid.217713 - https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5
CVE ID: CVE-2015-10034 State: PUBLISHED Published: 2023-01-09T20:41:48.289Z Last Updated: 2024-08-06T08:58:26.054Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: j-nowak Products: workout-organizer Problem Types: CWE-89 Description: A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to apply a patch to fix this issue. VDB-217714 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb
dentifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217714 - https://vuldb.com/?ctiid.217714 - https://github.com/j-nowak/workout-organizer/commit/13cd6c3d1210640bfdb39872b2bb3597aa991279
CVE ID: CVE-2015-10035 State: PUBLISHED Published: 2023-01-09T20:43:55.327Z Last Updated: 2024-08-06T08:58:25.549Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: gperson Products: angular-test-reporter Problem Types: CWE-89 Description: A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae121b46ebfa96a55a9106466ab2ef166ae. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217715. Additional Analyst Notes:
pply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217715. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217715 - https://vuldb.com/?ctiid.217715 - https://github.com/gperson/angular-test-reporter/commit/a29d8ae121b46ebfa96a55a9106466ab2ef166ae
CVE ID: CVE-2015-10036 State: PUBLISHED Published: 2023-01-11T06:23:07.383Z Last Updated: 2025-04-08T15:50:20.758Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: kylebebak Products: dronfelipe Problem Types: CWE-89 Description: A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 87405b74fe651892d79d0dff62ed17a7eaef6a60. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217951. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
dentifier of this vulnerability is VDB-217951. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217951 - https://vuldb.com/?ctiid.217951 - https://github.com/kylebebak/dronfelipe/commit/87405b74fe651892d79d0dff62ed17a7eaef6a60
CVE ID: CVE-2015-10037 State: PUBLISHED Published: 2023-01-11T06:36:02.340Z Last Updated: 2024-08-06T08:58:25.986Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: ACI_Escola Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 34eed1f7b9295d1424912f79989d8aba5de41e9f. It is recommended to apply a patch to fix this issue. The identifier VDB-217965 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217965 - https://vul
lnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217965 - https://vuldb.com/?ctiid.217965 - https://github.com/marinaguimaraes/ACI_Escola/commit/34eed1f7b9295d1424912f79989d8aba5de41e9f
CVE ID: CVE-2015-10038 State: PUBLISHED Published: 2023-01-11T18:21:54.555Z Last Updated: 2025-04-09T13:41:24.986Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: nym3r0s Products: pplv2 Problem Types: CWE-89 Description: A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 28f8b0550104044da09f04659797487c59f85b00. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
his vulnerability is VDB-218023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218023 - https://vuldb.com/?ctiid.218023 - https://github.com/nym3r0s/pplv2/commit/28f8b0550104044da09f04659797487c59f85b00
CVE ID: CVE-2015-10039 State: PUBLISHED Published: 2023-01-11T18:24:50.028Z Last Updated: 2024-08-06T08:58:26.422Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: dobos Products: domino Problem Types: CWE-89 Description: A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection. Upgrading to version 0.1.5524.38553 is able to address this issue. The name of the patch is 16f039073709a21a76526110d773a6cce0ce753a. It is recommended to upgrade the affected component. The identifier of this vulnera
9073709a21a76526110d773a6cce0ce753a. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218024. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218024 - https://vuldb.com/?ctiid.218024 - https://github.com/dobos/domino/commit/16f039073709a21a76526110d773a6cce0ce753a - https://github.com/dobos/domino/releases/tag/v0.1.5524.38553
CVE ID: CVE-2015-10040 State: PUBLISHED Published: 2023-01-13T19:22:05.152Z Last Updated: 2024-08-06T08:58:26.147Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: n/a Products: gitlearn Problem Types: CWE-74 Description: A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is identified as 3faa5deaa509012069afe75cd03c21bda5050a64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability. A
64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218302 - https://vuldb.com/?ctiid.218302 - https://github.com/mikeizbicki/gitlearn/pull/31 - https://github.com/mikeizbicki/gitlearn/commit/3faa5deaa509012069afe75cd03c21bda5050a64