rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-27958 
Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T21:01:38.000Z
CVE-2022-27960 
Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T21:01:39.000Z
CVE-2022-27961 
A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T21:01:40.000Z
CVE-2022-27962 
Bluecms 1.6 has a SQL injection vulnerability at cooike.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T17:00:38.000Z
CVE-2022-27963 
Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-31T22:11:35.000Z
CVE-2022-27964 
Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-31T22:11:37.000Z
CVE-2022-27965 
Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-31T22:11:37.000Z
CVE-2022-27966 
Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-31T22:11:38.000Z
CVE-2022-27967 
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET request sent to /WebApp/SettingsExclusion/GetExclusionsProfiles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-08T15:31:05.000Z
CVE-2022-27968 
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET request sent to /WebApp/SettingsFileMonitor/GetFileMonitorProfiles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-08T15:31:11.000Z
CVE-2022-27969 
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-08T15:31:17.000Z
CVE-2022-27978 
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-26T00:00:00.000Z
CVE-2022-27979 
A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-26T00:00:00.000Z
CVE-2022-27982 
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution (RCE) vulnerability via the fileName parameter at /guest_auth/cfg/upLoadCfg.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T13:28:31.000Z
CVE-2022-27983 
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T13:28:32.000Z
CVE-2022-27984 
CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T13:58:22.000Z
CVE-2022-27985 
CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T13:58:23.000Z
CVE-2022-27991 
Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via the Staff ID and Staff Password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:45.000Z
CVE-2022-27992 
Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:46.000Z
CVE-2022-28000 
Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental/booking.php via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:47.000Z
CVE-2022-28001 
Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:48.000Z
CVE-2022-28002 
Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:49.000Z
CVE-2022-28005 
An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server (via /Electron/download directory traversal in conjunction with a path component that uses backslash characters), leading to cleartext credential disclosure. Afterwards, the authenticated attacker is able to upload a file that overwrites a 3CX service binary, leading to Remote Code Execution as NT AUTHORITY\SYSTEM on Windows installations. NOTE: this issue exists because of an incomplete fix for CVE-2022-48482.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T00:00:00.000Z
CVE-2022-28006 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:34.000Z
CVE-2022-28007 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:33.000Z
CVE-2022-28008 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:33.000Z
CVE-2022-28009 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:32.000Z
CVE-2022-28010 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:32.000Z
CVE-2022-28011 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:31.000Z
CVE-2022-28012 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:29.000Z
CVE-2022-28013 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_employee_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:28.000Z
CVE-2022-28014 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:27.000Z
CVE-2022-28015 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:27.000Z
CVE-2022-28016 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deduction_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:26.000Z
CVE-2022-28017 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:25.000Z
CVE-2022-28018 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:25.000Z
CVE-2022-28019 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:24.000Z
CVE-2022-28020 
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:23.000Z
CVE-2022-28021 
Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:23.000Z
CVE-2022-28022 
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:23.000Z
CVE-2022-28023 
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:22.000Z
CVE-2022-28024 
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:21.000Z
CVE-2022-28025 
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:21.000Z
CVE-2022-28026 
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:20.000Z
CVE-2022-28028 
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:17.000Z
CVE-2022-28029 
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:16.000Z
CVE-2022-28030 
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_estate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:16.000Z
CVE-2022-28032 
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:14:24.000Z
CVE-2022-28033 
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:16:03.000Z
CVE-2022-28034 
AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:17:15.000Z
CVE-2022-28035 
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:18:29.000Z
CVE-2022-28036 
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:19:34.000Z
CVE-2022-28041 
stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T00:00:00.000Z
CVE-2022-28042 
stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T00:00:00.000Z
CVE-2022-28044 
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T13:06:35.000Z
CVE-2022-28048 
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T13:06:36.000Z
CVE-2022-28049 
NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T13:06:37.000Z
CVE-2022-28051 
The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T22:17:40.000Z
CVE-2022-28052 
Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-13T14:17:10.000Z
CVE-2022-28053 
Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:43:11.000Z
CVE-2022-28054 
Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T13:33:57.000Z
CVE-2022-28055 
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T02:49:36.000Z
CVE-2022-28056 
ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T13:36:20.000Z
CVE-2022-28058 
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:27.000Z
CVE-2022-28059 
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:27.000Z
CVE-2022-28060 
SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-28T19:35:07.000Z
CVE-2022-28062 
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T13:18:00.000Z
CVE-2022-28063 
Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T13:18:00.000Z
CVE-2022-28067 
An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service (DoS) in the Sandbox via a crafted executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:21:24.000Z
CVE-2022-28068 
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-28069 
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-28070 
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-28071 
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-28072 
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-28073 
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-28074 
Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T13:33:49.000Z
CVE-2022-28076 
Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:18:30.000Z
CVE-2022-28077 
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T13:53:41.000Z
CVE-2022-28078 
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T13:56:52.000Z
CVE-2022-28079 
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T15:31:57.000Z
CVE-2022-28080 
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T16:06:34.000Z
CVE-2022-28081 
A reflected cross-site scripting (XSS) vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:11:46.000Z
CVE-2022-28082 
Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:09:46.000Z
CVE-2022-28085 
A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T02:19:23.000Z
CVE-2022-28090 
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:06:04.000Z
CVE-2022-28093 
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T13:09:45.000Z
CVE-2022-28094 
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T13:09:46.000Z
CVE-2022-28096 
Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T12:59:56.000Z
CVE-2022-28099 
Poultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via the Item parameter at /farm/store.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:20:15.000Z
CVE-2022-28101 
Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-28T13:55:08.000Z