stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-40475 (severity: CRITICAL, weakness: CWE-78)
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
CVE-2022-40476 (severity: MEDIUM, weakness: CWE-476)
A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.
CVE-2022-4048 (severity: HIGH, weakness: CWE-326)
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
CVE-2022-40480 (severity: MEDIUM, weakness: CWE-400)
Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers to cause a Denial of Service (DoS) via a crafted ConReq packet.
CVE-2022-40482 (severity: MEDIUM, weakness: CWE-203)
The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This is caused by the early return inside the hasValidCredentials method in the Illuminate\Auth\SessionGuard class when a user is found to not exist.
CVE-2022-40483 (severity: CRITICAL, weakness: CWE-89)
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
CVE-2022-40484 (severity: CRITICAL, weakness: CWE-89)
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
CVE-2022-40485 (severity: CRITICAL, weakness: CWE-89)
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
CVE-2022-40486 (severity: HIGH, weakness: CWE-94)
TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.
CVE-2022-40487 (severity: MEDIUM, weakness: CWE-79)
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload.
CVE-2022-40488 (severity: MEDIUM, weakness: CWE-352)
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVE-2022-40489 (severity: HIGH, weakness: CWE-352)
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
CVE-2022-4049 (severity: CRITICAL, weakness: NVD-CWE-Other)
The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
CVE-2022-40490 (severity: MEDIUM, weakness: CWE-79)
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.
CVE-2022-40494 (severity: CRITICAL, weakness: CWE-287)
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
CVE-2022-40497 (severity: HIGH, weakness: CWE-94)
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
CVE-2022-4050 (severity: CRITICAL, weakness: NVD-CWE-Other)
The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
CVE-2022-40502 (severity: HIGH, weakness: CWE-20)
Transient DOS due to improper input validation in WLAN Host.
CVE-2022-40503 (severity: HIGH, weakness: CWE-126)
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-40504 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
CVE-2022-40505 (severity: HIGH, weakness: CWE-126)
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
CVE-2022-40507 (severity: HIGH, weakness: CWE-415)
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-40508 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
CVE-2022-4051 (severity: CRITICAL, weakness: CWE-707)
A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213844.
CVE-2022-40510 (severity: CRITICAL, weakness: CWE-457)
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-40512 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-40513 (severity: HIGH, weakness: CWE-400)
Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.
CVE-2022-40514 (severity: CRITICAL, weakness: CWE-120)
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
CVE-2022-40515 (severity: CRITICAL, weakness: CWE-415)
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVE-2022-40516 (severity: HIGH, weakness: CWE-787)
Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-40517 (severity: HIGH, weakness: CWE-787)
Memory corruption in core due to stack-based buffer overflow
CVE-2022-40518 (severity: MEDIUM, weakness: CWE-125)
Information disclosure due to buffer overread in Core
CVE-2022-40519 (severity: MEDIUM, weakness: CWE-125)
Information disclosure due to buffer overread in Core
CVE-2022-4052 (severity: HIGH, weakness: CWE-707)
A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability.
CVE-2022-40520 (severity: HIGH, weakness: CWE-787)
Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40521 (severity: HIGH, weakness: CWE-285)
Transient DOS due to improper authorization in Modem
CVE-2022-40522 (severity: HIGH, weakness: CWE-415)
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVE-2022-40523 (severity: MEDIUM, weakness: CWE-200)
Information disclosure in Kernel due to indirect branch misprediction.
CVE-2022-40524 (severity: HIGH, weakness: CWE-126)
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
CVE-2022-40525 (severity: MEDIUM, weakness: CWE-200)
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
CVE-2022-40527 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.
CVE-2022-40529 (severity: HIGH, weakness: CWE-284)
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
CVE-2022-4053 (severity: MEDIUM, weakness: CWE-707)
A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability.
CVE-2022-40530 (severity: HIGH, weakness: CWE-680)
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-40531 (severity: HIGH, weakness: CWE-704)
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40532 (severity: HIGH, weakness: CWE-190)
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40533 (severity: MEDIUM, weakness: CWE-822)
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
CVE-2022-40534 (severity: HIGH, weakness: CWE-129)
Memory corruption due to improper validation of array index in Audio.
CVE-2022-40535 (severity: HIGH, weakness: CWE-126)
Transient DOS due to buffer over-read in WLAN while sending a packet to device.
CVE-2022-40536 (severity: HIGH, weakness: CWE-285)
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
CVE-2022-40537 (severity: CRITICAL, weakness: CWE-129)
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVE-2022-40538 (severity: HIGH, weakness: CWE-617)
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
CVE-2022-40539 (severity: HIGH, weakness: CWE-284)
Memory corruption in Automotive Android OS due to improper validation of array index.
CVE-2022-4054 (severity: MEDIUM, weakness: CWE-200)
An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to leak a webhook secret token by changing the webhook URL to an endpoint that allows them to capture request headers.
CVE-2022-40540 (severity: HIGH, weakness: CWE-120)
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
CVE-2022-4055 (severity: HIGH, weakness: CWE-146)
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4057 (severity: MEDIUM, weakness: CWE-425)
The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.
CVE-2022-4058 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control.
CVE-2022-4059 (severity: CRITICAL, weakness: CWE-89)
The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVE-2022-4060 (severity: CRITICAL, weakness: NVD-CWE-Other)
The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.
CVE-2022-40602 (severity: CRITICAL, weakness: CWE-287)
A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.
CVE-2022-40603 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victim’s browser.
CVE-2022-40604 (severity: HIGH, weakness: CWE-134)
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
CVE-2022-40605 (severity: MEDIUM, weakness: CWE-79)
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606.
CVE-2022-40606 (severity: MEDIUM, weakness: CWE-79)
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.
CVE-2022-40607 (severity: MEDIUM, weakness: CWE-22)
IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.
CVE-2022-40608 (severity: MEDIUM, weakness: CWE-22)
IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.
CVE-2022-40609 (severity: CRITICAL, weakness: CWE-502)
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.
CVE-2022-4061 (severity: HIGH, weakness: NVD-CWE-Other)
The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.
CVE-2022-40615 (severity: CRITICAL, weakness: CWE-89)
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 236208.
CVE-2022-40616 (severity: MEDIUM, weakness: CWE-287)
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
CVE-2022-40617 (severity: HIGH, weakness: CWE-400)
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
CVE-2022-4062 (severity: HIGH, weakness: CWE-285)
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)
CVE-2022-40621 (severity: HIGH, weakness: CWE-294)
Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed password of a logged on user and use it in a classic Pass-the-Hash style attack.
CVE-2022-40622 (severity: HIGH, weakness: CWE-304)
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.
CVE-2022-40623 (severity: HIGH, weakness: CWE-352)
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.
CVE-2022-40624 (severity: CRITICAL, weakness: CWE-78)
pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.
CVE-2022-40626 (severity: MEDIUM, weakness: CWE-79)
An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.
CVE-2022-40628 (severity: CRITICAL, weakness: CWE-94)
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary commands on the targeted device.
CVE-2022-40629 (severity: HIGH, weakness: CWE-200)
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.
CVE-2022-4063 (severity: CRITICAL, weakness: CWE-22)
The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.
CVE-2022-40630 (severity: CRITICAL, weakness: CWE-384)
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
CVE-2022-40631 (severity: MEDIUM, weakness: CWE-79)
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0), SCALANCE X202-2IRT (All versions < V5.5.0), SCALANCE X202-2P IRT (All versions < V5.5.0), SCALANCE X202-2P IRT PRO (All versions < V5.5.0), SCALANCE X204-2 (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X204IRT (All versions < V5.5.0), SCALANCE X204IRT PRO (All versions < V5.5.0), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < V5.5.0), SCALANCE XF202-2P IRT (All versions < V5.5.0), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204-2 (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < V5.5.0), SCALANCE XF204IRT (All versions < V5.5.0), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.0). There is a cross-site scripting vulnerability on the affected devices, that if used by a threat actor, it could result in session hijacking.
CVE-2022-40632 (severity: MEDIUM, weakness: CWE-352)
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.
CVE-2022-40633 (severity: MEDIUM, weakness: NVD-CWE-Other)
A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks.
CVE-2022-40634 (severity: HIGH, weakness: CWE-913)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.
CVE-2022-40635 (severity: HIGH, weakness: CWE-913)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
CVE-2022-40636 (severity: HIGH, weakness: CWE-125)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17044.
CVE-2022-40637 (severity: HIGH, weakness: CWE-416)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17045.
CVE-2022-40638 (severity: HIGH, weakness: CWE-416)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17102.