rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-32294 
Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command). It is visible in cleartext on port UDP 514 (aka the syslog port). NOTE: a third party reports that this cannot be reproduced.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:00:00.000Z
CVE-2022-32295 
On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-30T23:28:16.000Z
CVE-2022-32296 
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-05T21:53:54.000Z
CVE-2022-32297 
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T19:04:39.000Z
CVE-2022-32298 
Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lead to a Denial of Service (DoS) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T19:12:42.000Z
CVE-2022-32299 
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T16:21:05.000Z
CVE-2022-32300 
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T16:21:07.000Z
CVE-2022-32301 
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T16:21:07.000Z
CVE-2022-32302 
Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edit_ticket.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T16:21:08.000Z
CVE-2022-32308 
Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-13T19:50:46.000Z
CVE-2022-32310 
An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-05T19:27:18.000Z
CVE-2022-32311 
Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/view_stock.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-05T19:27:19.000Z
CVE-2022-32317 
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2.c. This vulnerability can lead to a Denial of Service (DoS) via a crafted file. The device=strdup statement is not executed on every call. Note: This has been disputed by third parties as invalid and not reproduceable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T00:00:00.000Z
CVE-2022-32318 
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the component /ffos/classes/Master.php?f=save_category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T19:45:48.000Z
CVE-2022-32320 
A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T16:24:10.000Z
CVE-2022-32323 
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T20:11:45.000Z
CVE-2022-32324 
PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T21:18:56.000Z
CVE-2022-32325 
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T00:00:00.000Z
CVE-2022-32328 
Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:11:51.000Z
CVE-2022-32330 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:14:54.000Z
CVE-2022-32331 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/view_category.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:15:59.000Z
CVE-2022-32332 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:17:25.000Z
CVE-2022-32333 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:18:49.000Z
CVE-2022-32334 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/manage_category.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:20:06.000Z
CVE-2022-32335 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/manage_menu.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:21:23.000Z
CVE-2022-32336 
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T13:02:43.000Z
CVE-2022-32337 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T16:03:20.000Z
CVE-2022-32338 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/manage_doctor.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T16:02:10.000Z
CVE-2022-32339 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/view_doctor.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T16:00:49.000Z
CVE-2022-32340 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/view_patient&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:59:31.000Z
CVE-2022-32341 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manage_user&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:58:21.000Z
CVE-2022-32342 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/room_types/view_room_type.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:56:57.000Z
CVE-2022-32343 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/room_types/manage_room_type.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:54:52.000Z
CVE-2022-32344 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:53:36.000Z
CVE-2022-32345 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/manage_room.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:52:07.000Z
CVE-2022-32346 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/view_room.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:46:03.000Z
CVE-2022-32347 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:44:55.000Z
CVE-2022-32348 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_doctor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:43:24.000Z
CVE-2022-32349 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_history.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:37:33.000Z
CVE-2022-32350 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room_type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:33:24.000Z
CVE-2022-32351 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:31:32.000Z
CVE-2022-32352 
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_admission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T15:29:11.000Z
CVE-2022-32353 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_field_order.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:26:07.000Z
CVE-2022-32354 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:24:46.000Z
CVE-2022-32355 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:23:34.000Z
CVE-2022-32358 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:20:05.000Z
CVE-2022-32359 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:18:57.000Z
CVE-2022-32362 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:15:06.000Z
CVE-2022-32363 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T20:13:47.000Z
CVE-2022-32364 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T17:23:46.000Z
CVE-2022-32365 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T17:22:28.000Z
CVE-2022-32366 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T17:21:15.000Z
CVE-2022-32367 
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T17:20:10.000Z
CVE-2022-32368 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_grade.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T19:47:16.000Z
CVE-2022-32370 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_classroom.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T20:23:54.000Z
CVE-2022-32371 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T20:22:38.000Z
CVE-2022-32372 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T20:21:09.000Z
CVE-2022-32373 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T19:52:17.000Z
CVE-2022-32374 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject_routing.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T19:45:52.000Z
CVE-2022-32375 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_timetable.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:44:47.000Z
CVE-2022-32376 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_events.php?event_id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:43:40.000Z
CVE-2022-32377 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam_timetable.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:42:16.000Z
CVE-2022-32378 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher_profile.php?my_index=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:40:52.000Z
CVE-2022-32379 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_parents_profile.php?my_index=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:39:33.000Z
CVE-2022-32380 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_student_subject.php?index=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:38:13.000Z
CVE-2022-32381 
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_admin_profile.php?my_index=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T18:37:00.000Z
CVE-2022-32383 
Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-06T11:36:37.000Z
CVE-2022-32384 
Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T20:32:47.000Z
CVE-2022-32385 
Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-06T11:34:04.000Z
CVE-2022-32386 
Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-06T11:32:23.000Z
CVE-2022-32387 
In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-18T16:03:25.000Z
CVE-2022-32389 
Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This allows attackers to access sensitive information such as user credentials and certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T20:28:52.000Z
CVE-2022-32391 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/view_action.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:01:46.000Z
CVE-2022-32392 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/manage_action.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:02:58.000Z
CVE-2022-32393 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/view_cell.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:04:10.000Z
CVE-2022-32394 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/view_inmate.php:3
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:04:59.000Z
CVE-2022-32395 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/manage_crime.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:05:46.000Z
CVE-2022-32396 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/manage_visit.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:06:34.000Z
CVE-2022-32397 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/view_visit.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:07:46.000Z
CVE-2022-32398 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/manage_cell.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:08:34.000Z
CVE-2022-32399 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/view_crime.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:09:21.000Z
CVE-2022-32400 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manage_user.php:4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:10:24.000Z
CVE-2022-32401 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_privilege.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:11:04.000Z
CVE-2022-32402 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manage_prison.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:12:58.000Z
CVE-2022-32403 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_record.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:13:47.000Z
CVE-2022-32404 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_inmate.php:3
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:14:43.000Z
CVE-2022-32405 
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/view_prison.php:4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T01:15:27.000Z
CVE-2022-32406 
GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service (DoS) via a crafted MAP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T20:37:15.000Z
CVE-2022-32407 
Softr v2.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via the First Name parameter under the Create A New Account module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-27T00:00:00.000Z
CVE-2022-32409 
A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-14T21:24:22.000Z
CVE-2022-32411 
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T21:32:31.000Z
CVE-2022-32412 
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T21:32:32.000Z