rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-30758 
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected information with privilege of Finder.
Problem types: cwe_id: CWE-276
description: CWE-276: Incorrect Default Permissions
Affected products: vendor: Samsung Mobile
product: Samsung Mobile Devices
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-07-11T13:33:10.000Z
CVE-2022-30759 
In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-02T00:00:00.000Z
CVE-2022-30760 
An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information (final grades, study courses, degrees) by changing the student ID parameter in the HTTP POST request to the FrontControllerSS endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-09T15:14:10.000Z
CVE-2022-30763 
Janet before 1.22.0 mishandles arrays.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T02:13:10.000Z
CVE-2022-30765 
Calibre-Web before 0.6.18 allows user table SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T01:50:53.000Z
CVE-2022-30767 
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T02:13:47.000Z
CVE-2022-30768 
A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-30769 
Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-30770 
Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T00:00:00.000Z
CVE-2022-30771 
Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in: Kernel 5.1: Version 05.17.25 Kernel 5.2: Version 05.27.25 Kernel 5.3: Version 05.36.25 Kernel 5.4: Version 05.44.25 Kernel 5.5: Version 05.52.25 https://www.insyde.com/security-pledge/SA-2022064
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-30772 
Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of the PnpSmm driver is passed the address and size of data to write into the SMBIOS table, but manipulation of the address could be used by malware to overwrite SMRAM or OS kernel memory. This issue was discovered by Insyde engineering during a security review. This issue is fixed in: Kernel 5.0: 05.09.41 Kernel 5.1: 05.17.43 Kernel 5.2: 05.27.30 Kernel 5.3: 05.36.30 Kernel 5.4: 05.44.30 Kernel 5.5: 05.52.30 https://www.insyde.com/security-pledge/SA-2022065
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-30773 
DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). This issue was discovered by Insyde engineering. This issue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-30774 
DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) . This issue was discovered by Insyde engineering during a security review. This iss was fixed in Kernel 5.2: 05.27.29, Kernel 5.3: 05.36.25, Kernel 5.4: 05.44.25, Kernel 5.5: 05.52.25. CWE-367 https://www.insyde.com/security-pledge/SA-2022043
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2022-30775 
xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T02:54:45.000Z
CVE-2022-30776 
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T13:35:42.000Z
CVE-2022-30777 
Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T13:38:07.000Z
CVE-2022-30780 
Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-11T14:40:53.000Z
CVE-2022-30781 
Gitea before 1.16.7 does not escape git fetch remote.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T00:00:00.000Z
CVE-2022-30782 
Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T05:25:22.000Z
CVE-2022-30783 
An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30784 
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30785 
A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30786 
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30787 
An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30788 
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30789 
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T00:00:00.000Z
CVE-2022-30790 
Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T12:32:19.000Z
CVE-2022-30791 CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS Gateway
vendor: CODESYS
product: CODESYS Edge Gateway for Windows
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Development System V3
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
product: CODESYS Edge Gateway for Linux
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-07-11T10:40:38.913Z
CVE-2022-30792 CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS Gateway
vendor: CODESYS
product: CODESYS Edge Gateway for Windows
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Development System V3
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
product: CODESYS Edge Gateway for Linux
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-07-11T10:40:43.935Z
CVE-2022-30794 
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:06:48.000Z
CVE-2022-30795 
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:08:26.000Z
CVE-2022-30797 
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:11:23.000Z
CVE-2022-30798 
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:13:01.000Z
CVE-2022-30799 
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:14:44.000Z
CVE-2022-30804 
elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:29:52.000Z
CVE-2022-30808 
elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:25:32.000Z
CVE-2022-30809 
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:23:49.000Z
CVE-2022-30810 
elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:22:14.000Z
CVE-2022-30813 
elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:18:27.000Z
CVE-2022-30814 
elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:17:00.000Z
CVE-2022-30815 
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:54:59.000Z
CVE-2022-30816 
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T15:52:26.000Z
CVE-2022-30817 
Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T16:34:18.000Z
CVE-2022-30818 
Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:17:19.000Z
CVE-2022-30819 
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:40:25.000Z
CVE-2022-30820 
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:38:53.000Z
CVE-2022-30821 
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:37:25.000Z
CVE-2022-30822 
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:35:22.000Z
CVE-2022-30823 
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:32:55.000Z
CVE-2022-30825 
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:30:04.000Z
CVE-2022-30826 
Wedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:28:29.000Z
CVE-2022-30827 
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\package_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:27:07.000Z
CVE-2022-30828 
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\photos_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:25:58.000Z
CVE-2022-30829 
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\users_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:24:46.000Z
CVE-2022-30830 
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\feature_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:23:14.000Z
CVE-2022-30831 
Wedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management/wedding_details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:22:04.000Z
CVE-2022-30832 
Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_assign.php?booking=31&user_id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:20:48.000Z
CVE-2022-30833 
Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_edit.php?booking=31&user_id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:19:17.000Z
CVE-2022-30834 
Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_manage_account_details.php?booking_id=31&user_id=
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:15:20.000Z
CVE-2022-30835 
Wedding Management System v1.0 is vulnerable to SQL Injection. via /Wedding-Management/admin/budget.php?booking_id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:13:48.000Z
CVE-2022-30836 
Wedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin/select.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T17:12:24.000Z
CVE-2022-30837 
Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T14:01:53.000Z
CVE-2022-30838 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=update_application_status
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T14:06:59.000Z
CVE-2022-30839 
Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting (XSS) via /rrps/classes/Master.php?f=save_category, vehicle_name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T14:09:46.000Z
CVE-2022-30842 
Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ctpms/classes/Users.php?f=save, firstname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T14:04:34.000Z
CVE-2022-30843 
Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=delete_category, id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T14:08:40.000Z
CVE-2022-30852 
Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-08T11:10:28.000Z
CVE-2022-30858 
An issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CA_file2_0
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-17T00:00:00.000Z
CVE-2022-30860 
FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T13:34:41.000Z
CVE-2022-30861 
FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T13:40:00.000Z
CVE-2022-30863 
FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T13:44:00.000Z
CVE-2022-30874 
There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T14:35:16.000Z
CVE-2022-30875 
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting (XSS) via Sql Error Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T16:04:23.000Z
CVE-2022-30877 
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T17:39:13.000Z