Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s://lists.debian.org/debian-lts-announce/2023/06/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3VVCHEKBF6C/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKFNVNFRGPFYU/
CVE ID: CVE-2022-47016 State: REJECTED Published: N/A Last Updated: 2023-02-13T00:00:00 Description: No description available.
CVE ID: CVE-2022-47021 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:53:17.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiph/opusfile/issues/36 - https://github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ED4CWL
e41a4b92caddf5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ED4CWLBR2WQ2IXXTHZ24UYZBRNCLMJXH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LIKBLOE433RA44YTYUZLED4IOWJG5DV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYPAQANM2ZNPXRBFOS5NFXNJ7O4Q3OBD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ODIA6QRIRBNF2HRXOE5VCZ2AFP4ZB4R/
CVE ID: CVE-2022-47022 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:12:08.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/open-mpi/hwloc/issues/544
CVE ID: CVE-2022-47024 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:48:40.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vim/vim/commit/a63ad78ed31e36dbdf3a9cd28071dcdbefce7d19 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/ - https://lists.fedorapr
hives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-47027 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-13T16:33:59.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corporate.timmystudios.com/ - https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.timssfasttypingkeyboard - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2022-47027/CVE%20detail.md
CVE ID: CVE-2022-47028 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T18:27:36.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary data injection to function insert. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47028/CVE%20detailed.md
CVE ID: CVE-2022-47029 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T17:06:23.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47029/CVE%20detailed.md
CVE ID: CVE-2022-47034 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:23:41.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/playsms/playsms/commit/dd23673a00c052e113c6d44eb629dc355d3c0605 - https://gist.github.com/tonino-25/d2316094cc751cc7a8e2c1ae6dbecfe9
CVE ID: CVE-2022-47035 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:26:29.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10314
CVE ID: CVE-2022-47036 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-08-27T16:18:46.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware, which would typically be used with firmware 2.1.1 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semaja2.net/2023/06/11/siklu-tg-auth-bypass.html
CVE ID: CVE-2022-47037 State: PUBLISHED Published: 2024-03-18T00:00:00.000Z Last Updated: 2025-04-10T20:26:36.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semaja2.net/2023/06/11/siklu-tg-auth-bypass.html
CVE ID: CVE-2022-47040 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T14:55:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leoservalli/Privilege-escalation-ASKEY
CVE ID: CVE-2022-47042 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:19:32.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/mingSoft/MCMS/issues/I6592F
CVE ID: CVE-2022-47052 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:16:32.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflected XSS and HTML Injection. A malicious unauthenticated attacker can exploit this vulnerability using a specially crafted URL. This affects firmware versions: V1.1.0.112_1.0.1, V1.1.0.114_1.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dest-3/NETGEAR/tree/main/CVE-2022-47052
CVE ID: CVE-2022-47053 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-10T16:43:34.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dnnsoftware.com/community/security/security-center - https://www.dnnsoftware.com/community/security/security-center#:~:text=XSS%20in%20Digital%20Asset%20Manager
CVE ID: CVE-2022-47065 State: PUBLISHED Published: 2023-01-23T00:00:00 Last Updated: 2024-08-03T14:47:28.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/01/README.md
CVE ID: CVE-2022-47069 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-20T15:27:23.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/p7zip/bugs/241/
CVE ID: CVE-2022-47070 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:41:36.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the server twice. In the second package, the server will return the correct password information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Sylon001/NVS365/tree/main/NVS-365-V01%E6%91%84%E5%83%8F%E5%A4%B4%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E5%AF%86%E7%A0%81 - https://github.com/Sylon001/NVS-365-Camera/tree/master/NVS365%20Network%20Vide
%83%E8%AE%BF%E9%97%AE%E5%AF%86%E7%A0%81 - https://github.com/Sylon001/NVS-365-Camera/tree/master/NVS365%20Network%20Video%20Server%20Password%20Information%20Unauthorized%20Access%20Vulnerability
CVE ID: CVE-2022-47071 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:46:37.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NVS365 V01, the background network test function can trigger command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Sylon001/NVS365/tree/main/NVS-365-V01%E6%91%84%E5%83%8F%E5%A4%B4%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C - https://github.com/Sylon001/NVS-365-Camera/tree/master/NVS-365-V01%20camera%20command%20execution
CVE ID: CVE-2022-47072 State: PUBLISHED Published: 2024-01-31T00:00:00.000Z Last Updated: 2025-06-17T14:58:17.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DojoSecurity/Enterprise-Architect-SQL-Injection
CVE ID: CVE-2022-47073 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:13:34.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com - https://medium.com/%40shiva.infocop/stored-xss-found-in-small-crm-phpgurukul-7890ea3c04df
CVE ID: CVE-2022-47075 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:11:16.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cvewalkthrough.com/smart-office-suite-unauthenticated-data-ex/ - https://youtu.be/D42upepxzwM - https://cvewalkthrough.com/smart-office-suite-cve-2022-47076-cve-2022-47075/ - http://packetstormsecurity.com/files/173093
tps://cvewalkthrough.com/smart-office-suite-cve-2022-47076-cve-2022-47075/ - http://packetstormsecurity.com/files/173093/Smart-Office-Web-20.28-Information-Disclosure-Insecure-Direct-Object-Reference.html
CVE ID: CVE-2022-47076 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:13:00.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via DisplayParallelLogData.aspx. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cvewalkthrough.com/smart-office-suite-unauthenticated-data-ex/ - https://youtu.be/D42upepxzwM - https://cvewalkthrough.com/smart-office-suite-cve-2022-47076-cve-2022-47075/ - http://packetstormsecurity.com/files/173093/Smart-Office-Web-20.28-Information-Disclosure-Insecure-Direct-Objec
47075/ - http://packetstormsecurity.com/files/173093/Smart-Office-Web-20.28-Information-Disclosure-Insecure-Direct-Object-Reference.html
CVE ID: CVE-2022-47083 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2024-08-03T14:47:28.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5720.php
CVE ID: CVE-2022-47085 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-08-03T14:47:28.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ostreedev/ostree/issues/2775 - https://doc.rust-lang.org/std/macro.eprintln.html
CVE ID: CVE-2022-47086 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:42:49.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2337 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47087 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:41:44.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2339
CVE ID: CVE-2022-47088 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:40:10.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2340
CVE ID: CVE-2022-47089 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T13:37:50.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2338
CVE ID: CVE-2022-47090 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-01-24T15:03:32.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_tile_columns Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2341 - https://github.com/gpac/gpac/commit/48760768611f6766bf9e7378bb7cc66cebd6e49d
CVE ID: CVE-2022-47091 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T13:36:20.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2343 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47092 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T13:34:06.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8316 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2347
CVE ID: CVE-2022-47093 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:38:53.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2344
CVE ID: CVE-2022-47094 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:37:47.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2345 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47095 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-09T20:49:42.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2346 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47100 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:18:28.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iot-sec23/IoT-CVE/blob/main/Sengled%20Smart%20Bulb%20Vulnerability%20Report.pdf
CVE ID: CVE-2022-47102 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T13:54:46.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sudoninja-noob/CVE-2022-47102/blob/main/CVE-2022-47102
CVE ID: CVE-2022-47105 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T18:04:07.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/4393
CVE ID: CVE-2022-47111 State: PUBLISHED Published: 2025-04-19T00:00:00.000Z Last Updated: 2025-04-21T15:11:24.867Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: 7-Zip Products: 7-Zip Problem Types: CWE-754 Description: 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/boofish/semantic-bugs/
CVE ID: CVE-2022-47112 State: PUBLISHED Published: 2025-04-19T00:00:00.000Z Last Updated: 2025-04-21T15:10:27.078Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: 7-Zip Products: 7-Zip Problem Types: CWE-754 Description: 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/boofish/semantic-bugs/
CVE ID: CVE-2022-47115 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:02:25.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul5-A15-bof-WifiBasicSet-wepauth-e1b6244caaf44f1a940b7aa861859828
CVE ID: CVE-2022-47116 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T17:48:29.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul1-A15-bof-SysToolChangePwd-6a66d9f7a7e748deb8ebed544931bd29