Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4583 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:01:15.249Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: jLEMS Problem Types: CWE-22 Description: A vulnerability was found in jLEMS. It has been declared as critical. Affected by this vulnerability is the function unpackJar of the file src/main/java/org/lemsml/jlems/io/util/JUtil.java. The manipulation leads to path traversal. The attack can be launched remotely. The name of the patch is 8c224637d7d561076364a9e3c2c375daeaf463dc. It is recommended to apply a patch to fix this issue. The identifier VDB-216169 was assigned to this vuln
375daeaf463dc. It is recommended to apply a patch to fix this issue. The identifier VDB-216169 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LEMS/jLEMS/pull/103 - https://github.com/LEMS/jLEMS/commit/8c224637d7d561076364a9e3c2c375daeaf463dc - https://vuldb.com/?id.216169
CVE ID: CVE-2022-4584 State: PUBLISHED Published: 2022-12-17T00:00:00 Last Updated: 2024-08-03T01:41:45.795Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-122 Description: A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-216170 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.c
ntifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216170 - https://vuldb.com/?ctiid.216170 - https://github.com/axiomatic-systems/Bento4/issues/818 - https://github.com/axiomatic-systems/Bento4/files/10095915/POC2.tar.gz
CVE ID: CVE-2022-4585 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:01:09.650Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Opencaching Deutschland Products: oc-server3 Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is c720f2777a452186c67ef30db3679dd409556544. It is recommended to appl
itiate the attack remotely. The name of the patch is c720f2777a452186c67ef30db3679dd409556544. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216171. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpencachingDeutschland/oc-server3/pull/894 - https://github.com/OpencachingDeutschland/oc-server3/commit/c720f2777a452186c67ef30db3679dd409556544 - https://vuldb.com/?id.216171
CVE ID: CVE-2022-4586 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:01:02.628Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Opencaching Deutschland Products: oc-server3 Problem Types: CWE-707 Description: A vulnerability classified as problematic was found in Opencaching Deutschland oc-server3. This vulnerability affects unknown code of the file htdocs/templates2/ocstyle/cachelists.tpl of the component Cachelist Handler. The manipulation of the argument name_filter/by_filter leads to cross site scripting. The attack can be initiated remotely. The name of the patch is a9f79c7da78cd24a7ef1d298e6bc86006972ea73. It is recommend
The attack can be initiated remotely. The name of the patch is a9f79c7da78cd24a7ef1d298e6bc86006972ea73. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216172. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpencachingDeutschland/oc-server3/pull/894 - https://github.com/OpencachingDeutschland/oc-server3/commit/a9f79c7da78cd24a7ef1d298e6bc86006972ea73 - https://vuldb.com/?id.216172
CVE ID: CVE-2022-4587 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:00:54.665Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Opencaching Deutschland Products: oc-server3 Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 3296ebd61e7fe49e93b5755d5d7766d6e94a7667. It is recommended
e attack may be initiated remotely. The name of the patch is 3296ebd61e7fe49e93b5755d5d7766d6e94a7667. It is recommended to apply a patch to fix this issue. The identifier VDB-216173 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpencachingDeutschland/oc-server3/pull/893 - https://github.com/OpencachingDeutschland/oc-server3/commit/3296ebd61e7fe49e93b5755d5d7766d6e94a7667 - https://vuldb.com/?id.216173
CVE ID: CVE-2022-4588 State: PUBLISHED Published: 2022-12-17T00:00:00 Last Updated: 2024-11-19T20:32:21.453Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: Boston Sleep Products: slice Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Boston Sleep slice up to 84.1.x. Affected is an unknown function of the component Layout Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 84.2.0 is able to address this issue. The name of the patch is 6523bb17d889e2ab13d767f38afefdb37083f1d0. It is recommended to upgrade the affected component. VDB-216174
f the patch is 6523bb17d889e2ab13d767f38afefdb37083f1d0. It is recommended to upgrade the affected component. VDB-216174 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216174 - https://github.com/sleepepi/slice/commit/6523bb17d889e2ab13d767f38afefdb37083f1d0 - https://github.com/sleepepi/slice/releases/tag/v84.2.0
CVE ID: CVE-2022-4589 State: PUBLISHED Published: 2022-12-17T00:00:00 Last Updated: 2024-08-03T01:41:45.810Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: cyface Products: Terms and Conditions Module Problem Types: CWE-601 Description: A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 2.0.10 is able to address this issue. The name of the patch is 03396a1c2e0af95e12a45c5faef7e47a4b513e1a. It is recommend
2.0.10 is able to address this issue. The name of the patch is 03396a1c2e0af95e12a45c5faef7e47a4b513e1a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216175. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216175 - https://github.com/cyface/django-termsandconditions/pull/239 - https://github.com/cyface/django-termsandconditions/commit/03396a1c2e0af95e12a45c5faef7e47a4b513e1a - https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.10
CVE ID: CVE-2022-4590 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:00:48.398Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: mschaef Products: toto Problem Types: CWE-707 Description: A vulnerability was found in mschaef toto up to 1.4.20. It has been classified as problematic. This affects an unknown part of the component Todo List Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.21 is able to address this issue. The name of the patch is fdc825ac5249f40683377e8a526a06cdc6870125. It is recommended to upgrade the affected component. The identifie
he patch is fdc825ac5249f40683377e8a526a06cdc6870125. It is recommended to upgrade the affected component. The identifier VDB-216177 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mschaef/toto/commit/fdc825ac5249f40683377e8a526a06cdc6870125 - https://github.com/mschaef/toto/releases/tag/1.4.21 - https://vuldb.com/?id.216177
CVE ID: CVE-2022-4591 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:00:40.801Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: mschaef Products: toto Problem Types: CWE-707 Description: A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able to address this issue. The name of the patch is 1f27f37c1a06f54a76971f70eaa6139dc139bdf9. It is recommended to upgrade the affected component. VDB-2161
of the patch is 1f27f37c1a06f54a76971f70eaa6139dc139bdf9. It is recommended to upgrade the affected component. VDB-216178 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mschaef/toto/releases/tag/1.4.21 - https://github.com/mschaef/toto/commit/1f27f37c1a06f54a76971f70eaa6139dc139bdf9 - https://vuldb.com/?id.216178
CVE ID: CVE-2022-4592 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:59:13.379Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: luckyshot Products: CRMx Problem Types: CWE-707 Description: A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index.php. The manipulation leads to sql injection. The attack may be initiated remotely. The name of the patch is 8c62d274986137d6a1d06958a6f75c3553f45f8f. It is recommended to apply a patch to fix this issue. The identifier VDB-216185 was assigned to this vulnerability. Additional Analy
ended to apply a patch to fix this issue. The identifier VDB-216185 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luckyshot/CRMx/commit/8c62d274986137d6a1d06958a6f75c3553f45f8f - https://vuldb.com/?id.216185
CVE ID: CVE-2022-4593 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:59:05.719Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: retra-system Problem Types: CWE-707 Description: A vulnerability was found in retra-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a6d94ab88f4a6f631a14c59b72461140fb57ae1f. It is recommended to apply a patch to fix this issue. VDB-216186 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Conta
x this issue. VDB-216186 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/retra/retra-system/commit/a6d94ab88f4a6f631a14c59b72461140fb57ae1f - https://vuldb.com/?id.216186
CVE ID: CVE-2022-4594 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:58.283Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: drogatkin Products: TJWS2 Problem Types: CWE-22 Description: A vulnerability was found in drogatkin TJWS2. It has been declared as critical. Affected by this vulnerability is the function deployWar of the file 1.x/src/rogatkin/web/WarRoller.java. The manipulation leads to path traversal. The attack can be launched remotely. The name of the patch is 1bac15c496ec54efe21ad7fab4e17633778582fc. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-21
78582fc. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216187. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/drogatkin/TJWS2/commit/1bac15c496ec54efe21ad7fab4e17633778582fc - https://vuldb.com/?id.216187
CVE ID: CVE-2022-4595 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:49.975Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: django-openipam Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposed_hosts.html. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is a6223a1150d60cd036106ba6a8e676c1bfc3cc85. It is recommended to apply a patch to fix this issue. The identifier VD
tch is a6223a1150d60cd036106ba6a8e676c1bfc3cc85. It is recommended to apply a patch to fix this issue. The identifier VDB-216189 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openipam/django-openipam/pull/205 - https://github.com/openipam/django-openipam/commit/a6223a1150d60cd036106ba6a8e676c1bfc3cc85 - https://vuldb.com/?id.216189
CVE ID: CVE-2022-4596 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:41.152Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Shoplazza Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-21619
e exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-216191. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216191
CVE ID: CVE-2022-4597 State: PUBLISHED Published: 2022-12-18T00:00:00 Last Updated: 2024-08-03T01:41:45.616Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Shoplazza Products: LifeStyle Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in Shoplazza LifeStyle 1.1. Affected is an unknown function of the file /admin/api/admin/v2_products of the component Create Product Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216192. Additional Analyst Notes: - CVE
osed to the public and may be used. The identifier of this vulnerability is VDB-216192. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216192
CVE ID: CVE-2022-4598 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:33.692Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Shoplazza Products: LifeStyle Problem Types: CWE-707 Description: A vulnerability has been found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/api/theme-edit/ of the component Announcement Handler. The manipulation of the argument Text/Mobile Text leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-216193 was assigned
launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-216193 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216193
CVE ID: CVE-2022-4599 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:16.984Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Shoplazza Products: LifeStyle Problem Types: CWE-707 Description: A vulnerability was found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/api/theme-edit/ of the component Product Handler. The manipulation of the argument Subheading/Heading/Text/Button Text/Label leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-216194 is the identifier a
k may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-216194 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216194
CVE ID: CVE-2022-4600 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:09.641Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Shoplazza Products: LifeStyle Problem Types: CWE-707 Description: A vulnerability was found in Shoplazza LifeStyle 1.1. It has been classified as problematic. This affects an unknown part of the file /admin/api/theme-edit/ of the component Product Carousel Handler. The manipulation of the argument Heading/Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability
remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-216195. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216195
CVE ID: CVE-2022-4601 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:58:01.947Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Shoplazza Products: LifeStyle Problem Types: CWE-707 Description: A vulnerability was found in Shoplazza LifeStyle 1.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/api/theme-edit/ of the component Shipping/Member Discount/Icon. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216196. Additional Analyst Notes: -
disclosed to the public and may be used. The identifier of this vulnerability is VDB-216196. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216196
CVE ID: CVE-2022-4602 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T12:57:53.719Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Shoplazza Products: LifeStyle Problem Types: CWE-707 Description: A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-216197 was assigned to this vulnerability. Addit
it has been disclosed to the public and may be used. The identifier VDB-216197 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2022/Dec/11 - https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt - https://vuldb.com/?id.216197
CVE ID: CVE-2022-4603 State: PUBLISHED Published: 2022-12-18T00:00:00 Last Updated: 2024-08-03T01:41:45.809Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: ppp Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is still doubted at the moment. The name of the patch is a75fb7b198eed50d769c80c36629f38346882cbf. It is recommended to apply a patch to fix this issue. VDB
name of the patch is a75fb7b198eed50d769c80c36629f38346882cbf. It is recommended to apply a patch to fix this issue. VDB-216198 is the identifier assigned to this vulnerability. NOTE: pppdump is not used in normal process of setting up a PPP connection, is not installed setuid-root, and is not invoked automatically in any scenario. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ppp-project/ppp/commit/a75fb7b198eed50d769c80c36629f38346882cbf - https://vuldb.com/?id.216198 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J43NP7ABHOCIWOFHWCH6ZCZOYKZH6723/
CVE ID: CVE-2022-4604 State: PUBLISHED Published: 2022-12-18T00:00:00 Last Updated: 2024-08-03T01:41:45.723Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: wp-english-wp-admin Plugin Problem Types: CWE-352 Description: A vulnerability classified as problematic was found in wp-english-wp-admin Plugin up to 1.5.1. Affected by this vulnerability is the function register_endpoints of the file english-wp-admin.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.5.2 is able to address this issue. The name of the patch is ad4ba171c974c65c3456e7c6228f59f40783b33d. It is recommended to