rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-30882 
pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code (remote). When installing the pyanxdns package of version 0.2, the request package will be installed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T19:05:48.000Z
CVE-2022-30885 
The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T20:41:10.000Z
CVE-2022-30886 
School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /dms/admin/reports/daily_collection_report.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-20T12:53:22.000Z
CVE-2022-30887 
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-20T12:53:21.000Z
CVE-2022-30898 
A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-09T18:52:44.000Z
CVE-2022-30899 
A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/part_categories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T15:51:24.000Z
CVE-2022-30903 
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting (XSS) via the admin->Maintenance>Device Management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T17:02:37.000Z
CVE-2022-30904 
In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:A/A:L/C:H/I:L/PR:L/S:C/UI:N
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 8.2
baseSeverity: HIGH
Published: 2023-02-01T00:00:00.000Z
CVE-2022-30909 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:50.000Z
CVE-2022-30910 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:51.000Z
CVE-2022-30912 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:52.000Z
CVE-2022-30913 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:53.000Z
CVE-2022-30914 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:54.000Z
CVE-2022-30915 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:54.000Z
CVE-2022-30916 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:55.000Z
CVE-2022-30917 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:56.000Z
CVE-2022-30918 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:59.000Z
CVE-2022-30919 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:23:58.000Z
CVE-2022-30920 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:00.000Z
CVE-2022-30921 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:01.000Z
CVE-2022-30922 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:02.000Z
CVE-2022-30923 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:02.000Z
CVE-2022-30924 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:03.000Z
CVE-2022-30925 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:04.000Z
CVE-2022-30926 
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T13:24:05.000Z
CVE-2022-30927 
A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable "id" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T22:10:40.000Z
CVE-2022-30929 
Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-06T14:21:59.000Z
CVE-2022-30930 
Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T16:08:42.000Z
CVE-2022-30931 
Employee Leaves Management System (ELMS) V 2.1 is vulnerable to Cross Site Request Forgery (CSRF) via /myprofile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:45:45.000Z
CVE-2022-30935 
An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the use of a bad randomness function. This allows the attacker to get valid sessions for arbitrary users, and optionally reset their password. Tested and confirmed in a default installation of version 7.2.3. Earlier versions are affected, possibly earlier major versions as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-28T10:24:56.000Z
CVE-2022-30937 
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint. This could allow an attacker to crash the affected application leading to a denial of service condition.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Siemens
product: EN100 Ethernet module DNP3 IP variant
vendor: Siemens
product: EN100 Ethernet module IEC 104 variant
vendor: Siemens
product: EN100 Ethernet module IEC 61850 variant
vendor: Siemens
product: EN100 Ethernet module Modbus TCP variant
vendor: Siemens
product: EN100 Ethernet module PROFINET IO variant
Published: 2022-06-14T09:21:54.000Z
CVE-2022-30938 
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.40), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint manupulating a specific argument. This could allow an attacker to crash the affected application leading to a denial of service condition
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Siemens
product: EN100 Ethernet module DNP3 IP variant
vendor: Siemens
product: EN100 Ethernet module IEC 104 variant
vendor: Siemens
product: EN100 Ethernet module IEC 61850 variant
vendor: Siemens
product: EN100 Ethernet module Modbus TCP variant
vendor: Siemens
product: EN100 Ethernet module PROFINET IO variant
Published: 2022-07-12T10:06:41.000Z
CVE-2022-30943 
Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2022-07-11T00:40:24.000Z
CVE-2022-30944 
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Intel(R) AMT and Intel(R) Standard Manageability
Published: 2022-08-18T00:00:00.000Z
CVE-2022-30945 
Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.
Affected products: vendor: Jenkins project
product: Jenkins Pipeline: Groovy Plugin
Published: 2022-05-17T14:05:37.000Z
CVE-2022-30946 
A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.
Affected products: vendor: Jenkins project
product: Jenkins Script Security Plugin
Published: 2022-05-17T14:05:52.000Z
CVE-2022-30947 
Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.
Affected products: vendor: Jenkins project
product: Jenkins Git Plugin
Published: 2022-05-17T14:06:05.000Z
CVE-2022-30948 
Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.
Affected products: vendor: Jenkins project
product: Jenkins Mercurial Plugin
Published: 2022-05-17T14:06:07.000Z
CVE-2022-30949 
Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.
Affected products: vendor: Jenkins project
product: Jenkins REPO Plugin
Published: 2022-05-17T14:06:09.000Z
CVE-2022-30950 
Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library which has a buffer overflow vulnerability that may allow users able to connect to a named pipe to execute commands on the Windows agent machine.
Affected products: vendor: Jenkins project
product: Jenkins WMI Windows Agents Plugin
Published: 2022-05-17T14:06:12.000Z
CVE-2022-30951 
Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in.
Affected products: vendor: Jenkins project
product: Jenkins WMI Windows Agents Plugin
Published: 2022-05-17T14:06:14.000Z
CVE-2022-30952 
Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to access credentials with attacker-specified IDs stored in the private per-user credentials stores of any attacker-specified user in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Pipeline SCM API for Blue Ocean Plugin
Published: 2022-05-17T00:00:00.000Z
CVE-2022-30953 
A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.
Affected products: vendor: Jenkins project
product: Jenkins Blue Ocean Plugin
Published: 2022-05-17T14:06:18.000Z
CVE-2022-30954 
Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server.
Affected products: vendor: Jenkins project
product: Jenkins Blue Ocean Plugin
Published: 2022-05-17T14:06:21.000Z
CVE-2022-30955 
Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins GitLab Plugin
Published: 2022-05-17T14:06:23.000Z
CVE-2022-30956 
Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads.
Affected products: vendor: Jenkins project
product: Jenkins Rundeck Plugin
Published: 2022-05-17T14:06:25.000Z
CVE-2022-30957 
A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins SSH Plugin
Published: 2022-05-17T14:06:27.000Z
CVE-2022-30958 
A cross-site request forgery (CSRF) vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins SSH Plugin
Published: 2022-05-17T14:06:29.000Z
CVE-2022-30959 
A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins SSH Plugin
Published: 2022-05-17T14:06:32.000Z
CVE-2022-30960 
Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Application Detector Plugin
Published: 2022-05-17T14:06:34.000Z
CVE-2022-30961 
Jenkins Autocomplete Parameter Plugin 1.1 and earlier does not escape the name of Dropdown Autocomplete and Auto Complete String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Autocomplete Parameter Plugin
Published: 2022-05-17T14:06:36.000Z
CVE-2022-30962 
Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Global Variable String Parameter Plugin
Published: 2022-05-17T14:06:38.000Z
CVE-2022-30963 
Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins JDK Parameter Plugin
Published: 2022-05-17T14:06:41.000Z
CVE-2022-30964 
Jenkins Multiselect parameter Plugin 1.3 and earlier does not escape the name and description of Multiselect parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Multiselect parameter Plugin
Published: 2022-05-17T14:06:43.000Z
CVE-2022-30965 
Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Promoted Builds (Simple) Plugin
Published: 2022-05-17T14:06:45.000Z
CVE-2022-30966 
Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Random String Parameter Plugin
Published: 2022-05-17T14:06:48.000Z
CVE-2022-30967 
Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variable parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Selection tasks Plugin
Published: 2022-05-17T14:06:50.000Z
CVE-2022-30968 
Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins vboxwrapper Plugin
Published: 2022-05-17T14:06:52.000Z
CVE-2022-30969 
A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.
Affected products: vendor: Jenkins project
product: Jenkins Autocomplete Parameter Plugin
Published: 2022-05-17T14:06:54.000Z
CVE-2022-30970 
Jenkins Autocomplete Parameter Plugin 1.1 and earlier references Dropdown Autocomplete parameter and Auto Complete String parameter names in an unsafe manner from Javascript embedded in view definitions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Autocomplete Parameter Plugin
Published: 2022-05-17T14:06:56.000Z
CVE-2022-30971 
Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins Storable Configs Plugin
Published: 2022-05-17T14:06:57.000Z
CVE-2022-30972 
A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file (e.g., archived artifacts) that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.
Affected products: vendor: Jenkins project
product: Jenkins Storable Configs Plugin
Published: 2022-05-17T14:06:59.000Z
CVE-2022-30973 Missing fix for CVE-2022-30126 in 1.28.2
We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Tika
Credits: lang: en
value: This issue was reported by Cathy Hu, SUSE Software Solutions Germany GmbH.
Published: 2022-05-31T13:20:10.000Z
CVE-2022-30974 
compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T00:00:00.000Z
CVE-2022-30975 
In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T00:00:00.000Z
CVE-2022-30976 
GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T05:20:13.000Z
CVE-2022-30981 
An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T22:24:51.000Z