rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-35454 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05aa.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:39.000Z
CVE-2022-35455 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0d63.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:40.000Z
CVE-2022-35456 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x617087.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:40.000Z
CVE-2022-35458 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05ce.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:44.000Z
CVE-2022-35459 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:44.000Z
CVE-2022-35460 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:45.000Z
CVE-2022-35461 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0a32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:45.000Z
CVE-2022-35462 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0bc3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:46.000Z
CVE-2022-35463 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:46.000Z
CVE-2022-35464 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6171b2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:47.000Z
CVE-2022-35465 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0414.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:48.000Z
CVE-2022-35466 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:53.000Z
CVE-2022-35467 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:51.000Z
CVE-2022-35468 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e420d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:53.000Z
CVE-2022-35469 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6+0xbb384.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:54.000Z
CVE-2022-35470 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x65fc97.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:55.000Z
CVE-2022-35471 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:07.000Z
CVE-2022-35472 
OTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:02:03.000Z
CVE-2022-35473 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:55.000Z
CVE-2022-35474 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:02:04.000Z
CVE-2022-35475 
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:12:57.000Z
CVE-2022-35476 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:02:05.000Z
CVE-2022-35477 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:01.000Z
CVE-2022-35478 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:02:06.000Z
CVE-2022-35479 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:01.000Z
CVE-2022-35481 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:12.000Z
CVE-2022-35482 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:13.000Z
CVE-2022-35483 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:14.000Z
CVE-2022-35484 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:15.000Z
CVE-2022-35485 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:15.000Z
CVE-2022-35486 
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T20:13:24.000Z
CVE-2022-35487 
Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T13:51:36.000Z
CVE-2022-35488 
In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account to cause Denial Of Service by many generated emails which would also spam the victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T13:53:34.000Z
CVE-2022-35489 
In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T13:55:30.000Z
CVE-2022-35490 
Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable amount of attempts, users are invalidated and logins prevented. An attacker might work around this prevention, enabling them to send more than the configured amount of requests before the user invalidation takes place.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T13:58:33.000Z
CVE-2022-35491 
TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T16:25:06.000Z
CVE-2022-35493 
A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_products?search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T14:10:51.000Z
CVE-2022-35500 
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2022-35501 
Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2022-35503 
Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor. An attacker may be able execute code to change the normal execution of the OSM components, retrieve confidential information, or gain access other parts of a Telco Operator infrastructure other than OSM itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-22T00:00:00.000Z
CVE-2022-35505 
A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T20:33:43.000Z
CVE-2022-35506 
TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T20:33:44.000Z
CVE-2022-35507 
A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers because they allow injection of response headers with %0d. This is fixed in pve-http-server 4.1-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-04T00:00:00.000Z
CVE-2022-35508 
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox Mail Gateway, privilege escalation to the root@pam account is possible if the backup feature has ever been used, because backup files such as pmg-backup_YYYY_MM_DD_*.tgz have 0644 permissions and contain an authkey value. This is fixed in pve-http-server 4.1-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-04T00:00:00.000Z
CVE-2022-35509 
An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T18:14:57.000Z
CVE-2022-35513 
The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T13:54:18.000Z
CVE-2022-35516 
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-17T19:09:53.000Z
CVE-2022-35517 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:59:29.000Z
CVE-2022-35518 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:56:01.000Z
CVE-2022-35519 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:55:21.000Z
CVE-2022-35520 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:53:56.000Z
CVE-2022-35521 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:52:56.000Z
CVE-2022-35522 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command injection in page /wan.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:51:50.000Z
CVE-2022-35523 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:50:17.000Z
CVE-2022-35524 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:49:18.000Z
CVE-2022-35525 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:47:38.000Z
CVE-2022-35526 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:43:41.000Z
CVE-2022-35533 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:37:25.000Z
CVE-2022-35534 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifi_multi_ssid.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:34:33.000Z
CVE-2022-35535 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:32:10.000Z
CVE-2022-35536 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:28:33.000Z
CVE-2022-35537 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:07:33.000Z
CVE-2022-35538 
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to command injection in page /wifi_mesh.shtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-09T19:03:36.000Z
CVE-2022-35540 
Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-18T22:17:40.000Z
CVE-2022-35554 
Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T22:33:13.000Z
CVE-2022-35555 
A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-11T16:35:18.000Z
CVE-2022-35557 
A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-11T16:37:46.000Z
CVE-2022-35558 
A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-11T16:38:49.000Z
CVE-2022-35559 
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-11T16:39:56.000Z
CVE-2022-35560 
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-11T16:43:45.000Z
CVE-2022-35561 
A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-11T16:48:51.000Z
CVE-2022-35569 
Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-20T17:45:59.000Z
CVE-2022-35572 
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, (and potentially other vendors/devices due to code reuse), the /SysInfo.htm URI does not require a session ID. This web page calls a show_sysinfo function which retrieves WPA passwords, SSIDs, MAC Addresses, serial numbers, WPS Pins, and hardware/firmware versions, and prints this information into the web page. This web page is visible when remote management is enabled. A user who has access to the web interface of the device can extract these secrets. If the device has remote management enabled and is connected directly to the internet, this vulnerability is exploitable over the internet without interaction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T21:17:06.000Z
CVE-2022-35582 
Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documentation. Knowing the credentials, attackers can use this feature to gain uncontrolled access to the device and therefore are considered an undocumented possibility for remote control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-13T22:00:19.000Z
CVE-2022-35583 
wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-22T00:00:00.000Z
CVE-2022-35585 
A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-12T15:55:56.000Z
CVE-2022-35587 
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-12T15:54:50.000Z
CVE-2022-35589 
A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-12T15:51:00.000Z
CVE-2022-35590 
A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-12T15:49:23.000Z
CVE-2022-35598 
A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-18T01:17:34.000Z