Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30360 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T19:34:34.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone parameters. Authentication is required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cve.offsecguy.com/ovaledge/vulnerabilities/stored-xss#cve-2022-30360
CVE ID: CVE-2022-30361 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T19:36:05.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cve.offsecguy.com/ovaledge/vulnerabilities/sensitive-data-exposure#cve-2022-30361
CVE ID: CVE-2022-30367 State: PUBLISHED Published: 2022-05-13T13:16:35 Last Updated: 2024-08-03T06:48:36.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/air-cargo-management-system/delet-file-1.md
CVE ID: CVE-2022-30370 State: PUBLISHED Published: 2022-05-13T12:46:57 Last Updated: 2024-08-03T06:48:35.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/air-cargo-management-system/SQLi-1.md
CVE ID: CVE-2022-30371 State: PUBLISHED Published: 2022-05-13T12:45:43 Last Updated: 2024-08-03T06:48:35.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/air-cargo-management-system/SQLi-3.md
CVE ID: CVE-2022-30372 State: PUBLISHED Published: 2022-05-13T12:44:12 Last Updated: 2024-08-03T06:48:35.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/air-cargo-management-system/SQLi-2.md
CVE ID: CVE-2022-30373 State: PUBLISHED Published: 2022-05-13T12:42:51 Last Updated: 2024-08-03T06:48:35.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/air-cargo-management-system/SQLi-4.md
CVE ID: CVE-2022-30374 State: PUBLISHED Published: 2022-05-13T12:41:38 Last Updated: 2024-08-03T06:48:35.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/manage_transaction&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/air-cargo-management-system/SQLi-5.md
CVE ID: CVE-2022-30375 State: PUBLISHED Published: 2022-05-13T13:28:57 Last Updated: 2024-08-03T06:48:35.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-social-networking-site/delet-file-1.md
CVE ID: CVE-2022-30376 State: PUBLISHED Published: 2022-05-13T13:27:38 Last Updated: 2024-08-03T06:48:35.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-social-networking-site/SQLi-1.md
CVE ID: CVE-2022-30378 State: PUBLISHED Published: 2022-05-13T13:24:08 Last Updated: 2024-08-03T06:48:36.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-social-networking-site/SQLi-2.md
CVE ID: CVE-2022-30379 State: PUBLISHED Published: 2022-05-13T13:22:49 Last Updated: 2024-08-03T06:48:36.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-social-networking-site/SQLi-3.md
CVE ID: CVE-2022-30381 State: PUBLISHED Published: 2022-05-13T14:45:01 Last Updated: 2024-08-03T06:48:35.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/delet-file-1.md
CVE ID: CVE-2022-30384 State: PUBLISHED Published: 2022-05-13T14:40:29 Last Updated: 2024-08-03T06:48:36.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-1.md
CVE ID: CVE-2022-30385 State: PUBLISHED Published: 2022-05-13T14:39:18 Last Updated: 2024-08-03T06:48:35.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-2.md
CVE ID: CVE-2022-30386 State: PUBLISHED Published: 2022-05-13T14:29:32 Last Updated: 2024-08-03T06:48:35.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-4.md
CVE ID: CVE-2022-30387 State: PUBLISHED Published: 2022-05-13T14:25:50 Last Updated: 2024-08-03T06:48:35.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-3.md.
CVE ID: CVE-2022-30391 State: PUBLISHED Published: 2022-05-13T14:21:28 Last Updated: 2024-08-03T06:48:36.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-5.md
CVE ID: CVE-2022-30392 State: PUBLISHED Published: 2022-05-13T14:20:28 Last Updated: 2024-08-03T06:48:35.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-6.md
CVE ID: CVE-2022-30393 State: PUBLISHED Published: 2022-05-13T14:19:19 Last Updated: 2024-08-03T06:48:36.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-8.md
CVE ID: CVE-2022-30395 State: PUBLISHED Published: 2022-05-13T14:16:34 Last Updated: 2024-08-03T06:48:36.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-7.md
CVE ID: CVE-2022-30396 State: PUBLISHED Published: 2022-05-13T14:15:30 Last Updated: 2024-08-03T06:48:36.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-9.md
CVE ID: CVE-2022-30398 State: PUBLISHED Published: 2022-05-13T14:12:28 Last Updated: 2024-08-03T06:48:36.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-10.md
CVE ID: CVE-2022-30399 State: PUBLISHED Published: 2022-05-13T14:11:18 Last Updated: 2024-08-03T06:48:36.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-11.md
CVE ID: CVE-2022-30400 State: PUBLISHED Published: 2022-05-13T14:09:53 Last Updated: 2024-08-03T06:48:35.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-13.md
CVE ID: CVE-2022-30401 State: PUBLISHED Published: 2022-05-13T14:08:51 Last Updated: 2024-08-03T06:48:36.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-14.md
CVE ID: CVE-2022-30402 State: PUBLISHED Published: 2022-05-13T14:07:36 Last Updated: 2024-08-03T06:48:36.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-12.md
CVE ID: CVE-2022-30403 State: PUBLISHED Published: 2022-05-13T14:06:29 Last Updated: 2024-08-03T06:48:35.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-15.md
CVE ID: CVE-2022-30404 State: PUBLISHED Published: 2022-05-13T14:49:19 Last Updated: 2024-08-03T06:48:36.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/code-projects/College-Management-System/SQLi-1.md.
CVE ID: CVE-2022-30407 State: PUBLISHED Published: 2022-05-13T14:55:19 Last Updated: 2024-08-03T06:48:36.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/pharmacy-sales-and-inventory-system/SQLi-1.md
CVE ID: CVE-2022-30408 State: PUBLISHED Published: 2022-05-13T14:57:08 Last Updated: 2024-08-03T06:48:36.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/delete-file-1.md
CVE ID: CVE-2022-30411 State: PUBLISHED Published: 2022-05-13T15:06:02 Last Updated: 2024-08-03T06:48:35.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/view_individual&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-2.md
CVE ID: CVE-2022-30412 State: PUBLISHED Published: 2022-05-13T15:04:46 Last Updated: 2024-08-03T06:48:36.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/update_status.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-3.md
CVE ID: CVE-2022-30413 State: PUBLISHED Published: 2022-05-13T15:02:59 Last Updated: 2024-08-03T06:48:36.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-1.md
CVE ID: CVE-2022-30414 State: PUBLISHED Published: 2022-05-13T15:01:41 Last Updated: 2024-08-03T06:48:36.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/view_application&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-4.md
CVE ID: CVE-2022-30415 State: PUBLISHED Published: 2022-05-13T15:00:38 Last Updated: 2024-08-03T06:48:35.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/update_status.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-5.md
CVE ID: CVE-2022-30417 State: PUBLISHED Published: 2022-05-13T14:58:15 Last Updated: 2024-08-03T06:48:36.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-6.md
CVE ID: CVE-2022-30421 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:39:20.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained via(local) password authentication module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://global.gmarket.co.kr/item?goodscode=741668527 - https://www.ebay.com/itm/274246695791 - http://global.11st.co.kr/glb/product/SellerProductDetail.tmall?method=getSellerProductDetail&prdNo=1398327038 - https://github.com/bosslabdcu/Vulnerability
t/SellerProductDetail.tmall?method=getSellerProductDetail&prdNo=1398327038 - https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-px7r-44vj-8h7m
CVE ID: CVE-2022-30422 State: PUBLISHED Published: 2022-06-17T16:11:37 Last Updated: 2024-08-03T06:48:35.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.swascan.com/it/ - https://www.swascan.com/it/security-advisory-proietti-planet-time-enterprise-cve-2022-30422/
CVE ID: CVE-2022-30423 State: PUBLISHED Published: 2022-05-27T13:38:47 Last Updated: 2024-08-03T06:48:36.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ffYYy6x0y1/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/RCE-1.md
CVE ID: CVE-2022-30425 State: PUBLISHED Published: 2022-05-27T12:56:20 Last Updated: 2024-08-03T06:48:36.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tendacn.com/ - https://www.tendacn.com/product/HG6.html - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5706.php
CVE ID: CVE-2022-30426 State: PUBLISHED Published: 2022-09-22T23:06:15.000Z Last Updated: 2025-05-27T16:05:10.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P
version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmwar
600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://acer.com - http://altos.com - https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md
CVE ID: CVE-2022-30427 State: PUBLISHED Published: 2022-05-25T15:26:04 Last Updated: 2024-08-03T06:48:36.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gphper/ginadmin/issues/8
CVE ID: CVE-2022-30428 State: PUBLISHED Published: 2022-05-25T15:23:50 Last Updated: 2024-08-03T06:48:36.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gphper/ginadmin/issues/9
CVE ID: CVE-2022-30429 State: PUBLISHED Published: 2022-06-02T17:18:03 Last Updated: 2024-08-03T06:48:36.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also be present in all intermediate versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.neos.io/blog/xss-in-various-backend-modules.html - https://it-sec.de/unbekannte-schwachstellen-in-neos-cms/
CVE ID: CVE-2022-30448 State: PUBLISHED Published: 2022-05-11T18:07:06 Last Updated: 2024-08-03T06:48:36.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/43407f5b-a831-4598-9648-5af9f780b12a
CVE ID: CVE-2022-30449 State: PUBLISHED Published: 2022-05-11T18:14:52 Last Updated: 2024-08-03T06:48:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/8d4fd0f4-671f-4ed0-893d-af8227cddf84
CVE ID: CVE-2022-30450 State: PUBLISHED Published: 2022-05-11T18:11:01 Last Updated: 2024-08-03T06:48:36.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/5e8fa3c7-6fcd-492f-9d7c-bdf9052dca44