Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2615 State: PUBLISHED Published: 2022-08-12T19:36:59 Last Updated: 2024-08-03T00:46:03.077Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1268580 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD
8-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2616 State: PUBLISHED Published: 2022-08-12T19:37:07 Last Updated: 2024-08-03T00:46:03.109Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1302159 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/arch
top.html - https://crbug.com/1302159 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2617 State: PUBLISHED Published: 2022-08-12T19:37:12 Last Updated: 2024-08-03T00:46:03.031Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1292451 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2618 State: PUBLISHED Published: 2022-08-12T19:37:17 Last Updated: 2024-08-03T00:46:03.255Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file . Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1308422 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
curity.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2619 State: PUBLISHED Published: 2022-08-12T19:37:24 Last Updated: 2024-08-03T00:46:03.356Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1332881 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedor
l-update-for-desktop.html - https://crbug.com/1332881 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2620 State: PUBLISHED Published: 2022-08-12T19:37:31 Last Updated: 2024-08-03T00:46:03.329Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1337304 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-ann
bug.com/1337304 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2621 State: PUBLISHED Published: 2022-08-12T19:37:38 Last Updated: 2024-08-03T00:46:03.265Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1323449 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ps://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2622 State: PUBLISHED Published: 2022-08-12T19:37:44 Last Updated: 2024-08-03T00:46:03.426Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1332392 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fe
- https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2623 State: PUBLISHED Published: 2022-08-12T19:37:52 Last Updated: 2024-08-03T00:46:03.373Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1337798 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-ann
bug.com/1337798 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2624 State: PUBLISHED Published: 2022-08-12T19:37:59 Last Updated: 2024-08-03T00:46:03.203Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1339745 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40l
339745 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2625 State: PUBLISHED Published: 2022-08-18T00:00:00 Last Updated: 2024-08-03T00:46:03.361Z Vendors: n/a Products: postgresql Problem Types: CWE-915 Description: A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser. Additional Analyst Notes: - CVE Program
an attacker to run arbitrary code as the victim role, which may be a superuser. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2113825 - https://www.postgresql.org/about/news/postgresql-145-138-1212-1117-1022-and-15-beta-3-released-2496/ - https://security.gentoo.org/glsa/202211-04
CVE ID: CVE-2022-2626 State: PUBLISHED Published: 2022-08-05T08:15:16 Last Updated: 2024-08-03T00:46:03.222Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-266 Description: Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/704aacc9-edff-4da5-90a6-4adf8dbf36fe - https://github.com/hestiacp/hestiacp/commit/b178b9719bb2c98cf8a6db70065086f596afad81
CVE ID: CVE-2022-2627 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-08T19:09:27.046Z Vendors: Unknown Products: Newspaper Problem Types: CWE-79 Description: The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/038327d0-568f-4011-9b7e-3da39e8b6aea
CVE ID: CVE-2022-2628 State: PUBLISHED Published: 2022-10-03T13:45:22 Last Updated: 2024-08-03T00:46:03.288Z Vendors: Unknown Products: DSGVO All in one for WP Problem Types: CWE-79 Description: The DSGVO All in one for WP WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e712f83e-b437-4bc6-9511-2b0290ed315d
CVE ID: CVE-2022-2629 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T00:46:03.313Z Vendors: Unknown Products: Top Bar Problem Types: CWE-79 Description: The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in frontend pages, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/25a0d41f-3b6f-4d18-b4d5-767ac60ee8a8
CVE ID: CVE-2022-2630 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T19:13:05.848Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure of confidential information via the Incident timeline events. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/369429 - https://hackerone.com/reports/1652853 - https://gi
References: - https://gitlab.com/gitlab-org/gitlab/-/issues/369429 - https://hackerone.com/reports/1652853 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2630.json
CVE ID: CVE-2022-2631 State: PUBLISHED Published: 2022-08-02T16:05:57 Last Updated: 2024-08-03T00:46:03.083Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: tooljet Products: tooljet/tooljet Problem Types: CWE-284 Description: Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/86881f9e-ca48-49b5-9782-3c406316930c - https://github.com/tooljet/tooljet/commit/b9fa229bcae356cbb33300b31483e97e6ea140a7
CVE ID: CVE-2022-2633 State: PUBLISHED Published: 2022-09-06T17:18:59 Last Updated: 2024-11-20T14:56:44.283Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: plugins360 Products: All-in-One Video Gallery Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the ~/public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensitive files hosted on the affected server and forge requ
his makes it possible for unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/83b0534e-1b8d-46a8-9698-e7ca73e5ab57?source=cve - https://plugins.trac.wordpress.org/browser/all-in-one-video-gallery/trunk/public/video.php#L227 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2744708%40all-in-one-video-gallery&new=2744708%40all-in-one-video-gallery&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2633 - https://plugins.t
eo-gallery&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2633 - https://plugins.trac.wordpress.org/changeset/2768384/all-in-one-video-gallery/trunk/public/video.php
CVE ID: CVE-2022-2634 State: PUBLISHED Published: 2022-08-09T20:18:31.257Z Last Updated: 2025-04-16T16:13:37.837Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Digi Products: ConnectPort X2D Problem Types: CWE-250 Description: An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01
CVE ID: CVE-2022-2635 State: PUBLISHED Published: 2022-09-16T08:40:30 Last Updated: 2024-08-03T00:46:03.470Z Vendors: Unknown Products: Autoptimize Problem Types: CWE-79 Description: The Autoptimize WordPress plugin before 3.1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/219767a8-2427-42d5-8734-bd197d9ab46b
CVE ID: CVE-2022-2636 State: PUBLISHED Published: 2022-08-05T09:30:16 Last Updated: 2024-08-03T00:46:03.216Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hestiacp/hestiacp/commit/b178b9719bb2c98cf8a6db70065086f596afad81 - https://huntr.dev/bounties/357c0390-631c-4684-b6e1-a6d8b2453d66
CVE ID: CVE-2022-2637 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T00:46:03.300Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H) Vendors: Hitachi Products: Hitachi Storage Plug-in for VMware vCenter Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-131/index.htm
Container: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-131/index.html
CVE ID: CVE-2022-2638 State: PUBLISHED Published: 2022-08-29T17:15:37 Last Updated: 2024-08-03T00:46:03.231Z Vendors: Unknown Products: Export All URLs Problem Types: CWE-73 Description: The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/70840a72-ccdc-4eee-9ad2-874809e5de11
CVE ID: CVE-2022-2639 State: PUBLISHED Published: 2022-09-01T20:32:54 Last Updated: 2024-08-03T00:46:03.358Z Vendors: n/a Products: kernel Problem Types: CWE-192 Description: An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2084479 - htt
ditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2084479 - https://github.com/torvalds/linux/commit/cefa91b2332d7009bc0be5d951d6cbbf349f90f8
CVE ID: CVE-2022-2640 State: PUBLISHED Published: 2022-12-12T01:50:00.293Z Last Updated: 2025-04-16T16:05:18.798Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Horner Automation Products: Remote Compact Controller (RCC) 972 Problem Types: CWE-326 Description: The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This could allow an attacker to obtain credentials to run services such as File Transfer Protocol (FTP) and Hypertext Transfer Protocol (HTTP). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/u
(HTTP). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02
CVE ID: CVE-2022-2641 State: PUBLISHED Published: 2022-12-12T01:49:10.008Z Last Updated: 2025-04-16T16:05:26.323Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Remote Compact Controller (RCC) 972 Problem Types: CWE-321 Description: Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02
CVE ID: CVE-2022-2642 State: PUBLISHED Published: 2022-12-12T01:50:00.293Z Last Updated: 2025-04-16T16:05:11.014Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Horner Automation Products: Remote Compact Controller (RCC) 972 Problem Types: CWE-1108 Description: Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02
CVE ID: CVE-2022-2643 State: PUBLISHED Published: 2022-08-04T08:40:21.000Z Last Updated: 2025-04-15T14:01:41.851Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Admission System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability affects unknown code of the component POST Parameter Handler. The manipulation of the argument shift leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this entry is VDB-205564. Additional Analyst Notes: - CVE
een disclosed to the public and may be used. The identifier of this entry is VDB-205564. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/badboycxcc/Student-Admission-Sqlinjection - https://vuldb.com/?id.205564
CVE ID: CVE-2022-2644 State: PUBLISHED Published: 2022-08-04T08:40:30.000Z Last Updated: 2025-04-15T14:01:35.042Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Admission System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing of the component GET Parameter Handler. The manipulation of the argument eid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-205565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CIS
. The identifier VDB-205565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/badboycxcc/Student-Admission-Sqlinjection - https://vuldb.com/?id.205565
CVE ID: CVE-2022-2645 State: PUBLISHED Published: 2022-08-04T08:40:44.000Z Last Updated: 2025-04-15T14:01:27.431Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edituser.php. The manipulation of the argument id with the input 1\"><ScRiPt>alert(1)</sCrIpT> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-20