rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-45449 
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Published: 2024-07-16T14:47:21.100Z
CVE-2022-45450 
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Published: 2023-05-18T09:27:38.534Z
CVE-2022-45451 
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: Acronis
product: Acronis Cyber Protect Home Office
default_status: unaffected
vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Credits: lang: en
value: @alfarom256 (https://hackerone.com/alfarom256)
Published: 2023-08-31T14:43:49.464Z
CVE-2022-45452 
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Credits: lang: en
value: @netero1010 (https://hackerone.com/netero1010)
Published: 2023-05-18T09:21:55.932Z
CVE-2022-45453 
TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.
Problem types: cwe_id: CWE-310
description: CWE-310
Affected products: vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Published: 2023-05-18T09:19:10.914Z
CVE-2022-45454 
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Credits: lang: en
value: @tkoyeung (https://hackerone.com/tkoyeung)
Published: 2023-02-13T09:25:26.680Z
CVE-2022-45455 
Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
Problem types: cwe_id: CWE-459
description: CWE-459
Affected products: vendor: Acronis
product: Acronis Cyber Protect Home Office
default_status: unaffected
vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Credits: lang: en
value: @tkoyeung (https://hackerone.com/tkoyeung)
Published: 2023-02-13T09:27:01.356Z
CVE-2022-45456 
Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
Published: 2023-04-26T19:54:03.119Z
CVE-2022-45457 
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Published: 2023-05-18T09:23:51.453Z
CVE-2022-45458 
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Published: 2023-05-18T09:25:04.232Z
CVE-2022-45459 
Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Acronis
product: Acronis Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
default_status: unaffected
Published: 2023-05-18T09:26:22.045Z
CVE-2022-45460 
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow an unauthenticated and remote user to exploit a stack-based buffer overflow and crash the web server, resulting in a system reboot. An unauthenticated and remote attacker can execute arbitrary code by sending a crafted HTTP request that triggers the overflow condition via a long URI passed to a sprintf call. NOTE: this is different than CVE-2018-10088, but this may overlap CVE-2017-16725.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-28T00:00:00.000Z
CVE-2022-45461 
The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users (that have been explicitly added to the auth.conf file) to execute arbitrary commands as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
Published: 2022-11-17T00:00:00.000Z
CVE-2022-45462 Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability
Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Apache Software Foundation
product: Apache DolphinScheduler
Credits: lang: en
value: This issue was discovered by Jigang Dong of M1QLin Security Team
Published: 2022-11-23T00:00:00.000Z
CVE-2022-45468 CVE-2022-45468
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
Problem types: description: CWE-611
Affected products: vendor: VISAM
product: VBASE
Published: 2023-03-21T22:24:37.550Z
CVE-2022-45469 
Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-20
description: Improper input validation
Affected products: vendor: n/a
product: Intel Unison software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 2.2
baseSeverity: LOW
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
Published: 2023-11-14T19:04:36.206Z
CVE-2022-45470 Apache Hama allows XSS and information disclosure
missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Hama
Credits: lang: en
value: Apache would like to thank QSec-Team for reporting this issue
Published: 2022-11-21T00:00:00.000Z
CVE-2022-45471 
In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email address
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: JetBrains
product: Hub
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
baseScore: 3.5
baseSeverity: LOW
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Published: 2022-11-18T14:04:02.694Z
CVE-2022-45472 
CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2022-45473 
In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-18T00:00:00.000Z
CVE-2022-45474 
drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-18T00:00:00.000Z
CVE-2022-45475 
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.



Problem types: description: Remote command execution
Affected products: vendor: n/a
product: Tiny File Manager
default_status: unaffected
Published: 2022-11-25T00:00:00.000Z
CVE-2022-45476 
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download. This is possible because the application is vulnerable to insecure file upload.



Problem types: description: Remote command execution
Affected products: vendor: n/a
product: Tiny File Manager
default_status: unaffected
Published: 2022-11-25T00:00:00.000Z
CVE-2022-45477 
Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Telepad
product: Telepad
Published: 2022-12-05T00:00:00.000Z
CVE-2022-45478 
Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Telepad
product: Telepad
Published: 2022-12-05T00:00:00.000Z
CVE-2022-45479 
PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: BEAppsMobile
product: PC Keyboard WiFi & Bluetooth
Published: 2022-12-05T00:00:00.000Z
CVE-2022-45480 
PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Telepad
product: PC Keyboard WiFi & Bluetooth
Published: 2022-12-02T00:00:00.000Z
CVE-2022-45481 
The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: thisAAY
product: Lazy Mouse
Published: 2022-12-05T00:00:00.000Z
CVE-2022-45482 
Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem types: cwe_id: CWE-521
description: CWE-521: Weak Password Requirements
Affected products: vendor: thisAAY
product: Lazy Mouse
Published: 2022-12-02T00:00:00.000Z
CVE-2022-45483 
Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: thisAAY
product: Lazy Mouse
Published: 2022-12-02T00:00:00.000Z
CVE-2022-45484 
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.9), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.5), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CCITT_G4Decode.dll contains an out of bounds read vulnerability when parsing a RAS file. An attacker can leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19056)
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Siemens
product: JT2Go
default_status: unknown
vendor: Siemens
product: Teamcenter Visualization V13.2
default_status: unknown
vendor: Siemens
product: Teamcenter Visualization V13.3
default_status: unknown
vendor: Siemens
product: Teamcenter Visualization V13.3
default_status: unknown
vendor: Siemens
product: Teamcenter Visualization V14.0
default_status: unknown
vendor: Siemens
product: Teamcenter Visualization V14.0
default_status: unknown
vendor: Siemens
product: Teamcenter Visualization V14.1
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
baseScore: 3.3
baseSeverity: LOW
Published: 2022-12-13T00:00:00.000Z
CVE-2022-45491 
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2022-45492 
Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2022-45493 
Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2022-45494 
Buffer overflow vulnerability in function json_parse_object in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-31T00:00:00.000Z
CVE-2022-45496 
Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2022-45497 
Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45498 
An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45499 
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45501 
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45503 
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45504 
An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45505 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45506 
Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45507 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45508 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45509 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45510 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45511 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45512 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45513 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45514 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45515 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45516 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45517 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45518 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45519 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45520 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45521 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45522 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45523 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45524 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45525 
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-08T00:00:00.000Z
CVE-2022-45526 
SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-08T00:00:00.000Z