Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26971 State: PUBLISHED Published: 2022-06-01T11:34:37 Last Updated: 2024-08-03T05:18:39.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12681
CVE ID: CVE-2022-26972 State: PUBLISHED Published: 2022-06-01T11:34:42 Last Updated: 2024-08-03T05:18:38.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12685
CVE ID: CVE-2022-26973 State: PUBLISHED Published: 2022-06-01T11:34:48 Last Updated: 2024-08-03T05:18:39.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12678
CVE ID: CVE-2022-26974 State: PUBLISHED Published: 2022-06-01T11:34:54 Last Updated: 2024-08-03T05:18:39.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12684
CVE ID: CVE-2022-26975 State: PUBLISHED Published: 2022-06-01T11:34:59 Last Updated: 2024-08-03T05:18:39.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12677
CVE ID: CVE-2022-26976 State: PUBLISHED Published: 2022-06-01T11:35:06 Last Updated: 2024-08-03T05:18:39.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12682
CVE ID: CVE-2022-26977 State: PUBLISHED Published: 2022-06-01T11:35:16 Last Updated: 2024-08-03T05:18:39.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is leads to stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12683
CVE ID: CVE-2022-26978 State: PUBLISHED Published: 2022-06-01T11:35:22 Last Updated: 2024-08-03T05:18:39.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/transform-n-management-server - https://www.barco.com/en/support/knowledge-base/KB12686
CVE ID: CVE-2022-26979 State: PUBLISHED Published: 2022-08-06T20:45:01 Last Updated: 2024-08-03T05:18:39.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.addStateModel, because this.Span.text can be NULL. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://drive.google.com/file/d/1WpwDgVRU-Mb792z6dgDoWMXDRSeB8ZLU/view?usp=sharing
CVE ID: CVE-2022-26980 State: PUBLISHED Published: 2022-03-28T18:00:20 Last Updated: 2024-08-03T05:18:38.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nilsteampassnet/TeamPass/commits/teampass_2 - https://gist.github.com/RNPG/6919286e0daebce7634d0a744e060dca
CVE ID: CVE-2022-26981 State: PUBLISHED Published: 2022-03-13T00:00:00 Last Updated: 2024-08-03T05:18:39.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liblouis/liblouis/issues/1171 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFD2KIHESDUCNWTEW3USFB5GKTWT624L/ - https://support.apple.com/kb/HT213340 - https://support.apple.com/kb/HT213345 - https://support.apple.com/kb/HT213342 - https://support.a
pple.com/kb/HT213340 - https://support.apple.com/kb/HT213345 - https://support.apple.com/kb/HT213342 - https://support.apple.com/kb/HT213346 - http://seclists.org/fulldisclosure/2022/Jul/15 - http://seclists.org/fulldisclosure/2022/Jul/18 - http://seclists.org/fulldisclosure/2022/Jul/12 - http://seclists.org/fulldisclosure/2022/Jul/16 - https://security.gentoo.org/glsa/202301-06
CVE ID: CVE-2022-26982 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:18:39.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting a vulnerable php code because the themes can be modified by an administrator. NOTE: the vendor's position is that administrators are intended to have the ability to modify themes, and can thus choose any PHP code that they wish to have executed on the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sartlabs/0days/blob/main/SimpleMachinesForum/Exploit.txt - http://p
Program Container: References: - https://github.com/sartlabs/0days/blob/main/SimpleMachinesForum/Exploit.txt - http://packetstormsecurity.com/files/171486/SimpleMachinesForum-2.1.1-Remote-Code-Execution.html
CVE ID: CVE-2022-26986 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:18:39.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can even upload a malicious web shell to compromise the entire system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sartlabs/0days/blob/main/ImpressCMS1.4.3/Exploit.txt - http://packetstormsecurity.com/files/171485/ImpressCMS-1.4.3-SQL-I
artlabs/0days/blob/main/ImpressCMS1.4.3/Exploit.txt - http://packetstormsecurity.com/files/171485/ImpressCMS-1.4.3-SQL-Injection.html
CVE ID: CVE-2022-26987 State: PUBLISHED Published: 2022-05-10T14:22:14 Last Updated: 2024-08-03T05:18:39.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - https://drive.google.com/file/d/1SnNoqRlJiBD673UROLwdgg_roMOneVR9/view?usp=sharing - https://github.com/GANGE666
CVE ID: CVE-2022-26988 State: PUBLISHED Published: 2022-05-10T14:26:42 Last Updated: 2024-08-03T05:18:39.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - https://github.com/GANGE666 - https://drive.google.com/file/d/1J1KzojrMCq-MrV0HqkWiu17MIXGhRuUH/view?usp=sharing
CVE ID: CVE-2022-26990 State: PUBLISHED Published: 2022-03-15T21:56:25 Last Updated: 2024-08-03T05:18:39.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_2/2.md
CVE ID: CVE-2022-26991 State: PUBLISHED Published: 2022-03-15T21:56:25 Last Updated: 2024-08-03T05:18:39.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_6/6.md
CVE ID: CVE-2022-26992 State: PUBLISHED Published: 2022-03-15T21:56:26 Last Updated: 2024-08-03T05:18:39.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_3/3.md
CVE ID: CVE-2022-26993 State: PUBLISHED Published: 2022-03-15T21:56:27 Last Updated: 2024-08-03T05:18:39.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the pppoeUserName, pppoePassword, and pppoe_Service parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_4/4.md
CVE ID: CVE-2022-26994 State: PUBLISHED Published: 2022-03-15T21:56:27 Last Updated: 2024-08-03T05:18:39.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the pptpUserName and pptpPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_5/5.md
CVE ID: CVE-2022-26995 State: PUBLISHED Published: 2022-03-15T21:56:28 Last Updated: 2024-08-03T05:18:39.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_14/14.md
CVE ID: CVE-2022-26996 State: PUBLISHED Published: 2022-03-15T21:56:29 Last Updated: 2024-08-03T05:18:39.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd, and pppoe_servicename parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_13/13.md
CVE ID: CVE-2022-26997 State: PUBLISHED Published: 2022-03-15T21:56:29 Last Updated: 2024-08-03T05:18:39.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_9/9.md
CVE ID: CVE-2022-26998 State: PUBLISHED Published: 2022-03-15T21:56:30 Last Updated: 2024-08-03T05:18:39.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_11/11.md
CVE ID: CVE-2022-26999 State: PUBLISHED Published: 2022-03-15T21:56:31 Last Updated: 2024-08-03T05:18:39.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_stat, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_8/8.md
CVE ID: CVE-2022-27000 State: PUBLISHED Published: 2022-03-15T21:56:31 Last Updated: 2024-08-03T05:18:39.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_12/12.md
CVE ID: CVE-2022-27001 State: PUBLISHED Published: 2022-03-15T21:56:32 Last Updated: 2024-08-03T05:18:39.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_7/7.md
CVE ID: CVE-2022-27002 State: PUBLISHED Published: 2022-03-15T21:56:33 Last Updated: 2024-08-03T05:18:39.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wudipjq/my_vuln/blob/main/ARRIS/vuln_10/10.md
CVE ID: CVE-2022-27003 State: PUBLISHED Published: 2022-03-15T21:56:33 Last Updated: 2024-09-12T12:53:11.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wudipjq/my_vuln/blob/main/totolink/vuln_32/32.md
CVE ID: CVE-2022-27004 State: PUBLISHED Published: 2022-03-15T21:56:36 Last Updated: 2024-09-12T12:52:08.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wudipjq/my_vuln/blob/main/totolink/vuln_31/31.md
CVE ID: CVE-2022-27005 State: PUBLISHED Published: 2022-03-15T21:56:35 Last Updated: 2024-09-12T12:52:50.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wudipjq/my_vuln/blob/main/totolink/vuln_30/30.md
CVE ID: CVE-2022-27007 State: PUBLISHED Published: 2022-04-14T14:08:19 Last Updated: 2024-08-03T05:18:39.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/469 - https://github.com/nginx/njs/commit/ad48705bf1f04b4221a5f5b07715ac48b3160d53 - https://security.netapp.com/advisory/ntap-20220519-0008/
CVE ID: CVE-2022-27008 State: PUBLISHED Published: 2022-04-14T14:04:56 Last Updated: 2024-08-03T05:18:39.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/471 - https://github.com/nginx/njs/commit/e673ae41a998d1391bd562edb2ed6d49db7cc716 - https://security.netapp.com/advisory/ntap-20220519-0008/
CVE ID: CVE-2022-27016 State: PUBLISHED Published: 2022-04-07T14:20:03 Last Updated: 2024-08-03T05:18:39.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/10
CVE ID: CVE-2022-27022 State: PUBLISHED Published: 2022-04-07T15:02:46 Last Updated: 2024-08-03T05:18:39.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root shell through a constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/14
CVE ID: CVE-2022-27041 State: PUBLISHED Published: 2022-04-11T13:36:03 Last Updated: 2024-08-03T05:18:39.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OS4ED/openSIS-Classic/issues/248
CVE ID: CVE-2022-27043 State: PUBLISHED Published: 2022-04-15T14:08:36 Last Updated: 2024-08-03T05:18:39.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0day1/g1ory
CVE ID: CVE-2022-27044 State: PUBLISHED Published: 2022-04-08T14:58:03 Last Updated: 2024-08-03T05:18:39.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/156
CVE ID: CVE-2022-27046 State: PUBLISHED Published: 2022-04-08T14:51:00 Last Updated: 2024-08-03T05:18:39.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/157
CVE ID: CVE-2022-27047 State: PUBLISHED Published: 2022-04-08T15:42:13 Last Updated: 2024-08-03T05:18:39.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: mogu_blog_cms 5.2 suffers from upload arbitrary files without any limitation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moxi624/mogu_blog_v2/issues/62
CVE ID: CVE-2022-27048 State: PUBLISHED Published: 2022-04-15T18:10:41 Last Updated: 2024-08-03T05:18:39.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-pr
er: References: - https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability
CVE ID: CVE-2022-27049 State: PUBLISHED Published: 2022-03-31T22:11:33 Last Updated: 2024-08-03T05:18:39.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raidrive before v2021.12.35 allows attackers to arbitrarily move log files by pre-creating a mountpoint and log files before Raidrive is installed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/blob/main/RaiDrive-Arbitrary-File-Move/Raidrive%20Setup%20Arbitrary%20File%20Move.md