rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-43237 
Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void put_epel_hv_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43238 
Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43239 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma<unsigned short> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43240 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_qpel_h_2_v_1_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43241 
Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43242 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma<unsigned char> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43243 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43244 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43245 
Libde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal<unsigned short> in sao.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43248 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_weighted_pred_avg_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43249 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_hv_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43250 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_0_0_fallback_16 in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43252 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43253 
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_unweighted_pred_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43254 
GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43255 
GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-02T00:00:00.000Z
CVE-2022-43256 
SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-16T00:00:00.000Z
CVE-2022-43259 
Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-18T00:00:00.000Z
CVE-2022-43260 
Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-18T00:00:00.000Z
CVE-2022-43262 
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-16T00:00:00.000Z
CVE-2022-43263 
A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-16T00:00:00.000Z
CVE-2022-43264 
Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-16T00:00:00.000Z
CVE-2022-43265 
An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-43271 
Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerability via the User profile component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-22T00:00:00.000Z
CVE-2022-43272 
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-02T00:00:00.000Z
CVE-2022-43275 
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43276 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelectedfood.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43277 
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43278 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43279 
LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-43280 
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43281 
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43282 
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43283 
wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43284 
Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43285 
Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43286 
Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2022-43288 
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/view&type=php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-43289 
Deark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-19T00:00:00.000Z
CVE-2022-43290 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43291 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43292 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43293 
Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-11T00:00:00.000Z
CVE-2022-43294 
Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-43295 
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-43303 
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43304 
The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43305 
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43306 
The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43308 
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-18T00:00:00.000Z
CVE-2022-43309 
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-07T00:00:00.000Z
CVE-2022-43310 
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43317 
A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43318 
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43319 
An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43320 
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43321 
Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/library/Page.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-09T00:00:00.000Z
CVE-2022-43323 
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-43325 
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-02T00:00:00.000Z
CVE-2022-43326 
An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-29T00:00:00.000Z
CVE-2022-43328 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43329 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43330 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43331 
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_action/printOrder.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43332 
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-17T00:00:00.000Z
CVE-2022-43333 
Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the component action_export_control.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-01T00:00:00.000Z
CVE-2022-43340 
A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-27T00:00:00.000Z
CVE-2022-43342 
A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the KPI Title text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-43343 
N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-08T00:00:00.000Z
CVE-2022-43350 
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43351 
Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43352 
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43353 
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43354 
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43355 
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43357 
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-43358 
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-43359 
Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function read_image_data. This vulnerability is triggered when parsing a crafted Gif file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-07T00:00:00.000Z
CVE-2022-43361 
Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z
CVE-2022-43362 
Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-01T00:00:00.000Z