yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-27940: tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2022-27941: tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2022-27942: tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2022-27943: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
Key phrases: stack consumption in demangle_const
CVE-2022-27944: Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.
Key phrases: an exportXFAData NULL pointer dereference, exportxfadata null pointer dereference
CVE-2022-27945: NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.
Key phrases: execute arbitrary commands, execute arbitrary commands (such as telnetd), shell metacharacters
CVE-2022-27946: NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.
Key phrases: execute arbitrary commands, execute arbitrary commands (such as telnetd), shell metacharacters
CVE-2022-27947: NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands (such as telnetd), shell metacharacters
CVE-2022-27948: Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended
Key phrases: open the charging port via a 315 MHz
CVE-2022-27949: A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and previous instances of the task failed). This issue affects Apache Airflow prior to 2.3.1.
Key phrases: view unmasked secrets in rendered template values for
CVE-2022-2795: By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.
Key phrases: performance
CVE-2022-27950: In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition.
Key phrases: memory leak
CVE-2022-27952: An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted SVG file, arbitrary file upload
CVE-2022-27958: Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information.
Key phrases: access and arbitrarily modify users' personal information, insecure permissions
CVE-2022-2796: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4.
Key phrases: cross-site scripting (xss)
CVE-2022-27960: Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information.
Key phrases: access and arbitrarily modify users' personal information, insecure permissions
CVE-2022-27961: A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-27962: Bluecms 1.6 has a SQL injection vulnerability at cooike.
Key phrases: sql injection
CVE-2022-27963: Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted .exe file, binary hijack
CVE-2022-27964: Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted .exe file, binary hijack
CVE-2022-27965: Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted .exe file, binary hijack
CVE-2022-27966: Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted .exe file, binary hijack
CVE-2022-27967: Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET request sent to /WebApp/SettingsExclusion/GetExclusionsProfiles.
Key phrases: access a list of excluded files and profiles
CVE-2022-27968: Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET request sent to /WebApp/SettingsFileMonitor/GetFileMonitorProfiles.
Key phrases: access a list of monitored files and profiles
CVE-2022-27969: Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers.
Key phrases: access a list of decoy users via a
CVE-2022-2797: A vulnerability classified as critical was found in SourceCodester Student Information System. Affected by this vulnerability is an unknown functionality of the file /admin/students/view_student.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-206245 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-27978: Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.
Key phrases: arbitrarily reset passwords via a crafted HTTP request, missing values
CVE-2022-27979: A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-2798: The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the data
Key phrases: perform CSV injection attacks against an admin exporting, csv injection
CVE-2022-27982: RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution (RCE) vulnerability via the fileName parameter at /guest_auth/cfg/upLoadCfg.php.
Key phrases: remote code execution (rce)
CVE-2022-27983: RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php.
Key phrases: arbitrary file read
CVE-2022-27984: CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.
Key phrases: sql injection
CVE-2022-27985: CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.
Key phrases: sql injection
CVE-2022-2799: The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Key phrases: perform Cross-Site Scripting attacks even when, cross-site scripting, unfiltered_html capability
CVE-2022-27991: Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via the Staff ID and Staff Password parameters.
Key phrases: sql injection
CVE-2022-27992: Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.
Key phrases: sql injection
CVE-2022-2800: A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-206246 is the identifier assigned to this vulnerability.
Key phrases: clickjacking
CVE-2022-28000: Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental/booking.php via the id parameter.
Key phrases: sql injection
CVE-2022-28001: Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter.
Key phrases: sql injection
CVE-2022-28002: Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home.
Key phrases: unauthenticated file disclosure
CVE-2022-28005: An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server (via /Electron/download directory traversal in conjunction with a path component that uses backslash characters), leading to cleartext credential disclosure. Afterwards, the authenticated attacker is able to upload a file that overwrites a 3CX service binary, leading to Remote Code Execution as NT AUTHORITY\\\\SYSTEM on Windows installations. NOTE: this issue exists because of an incomplete fix for CVE-2022-48482.
Key phrases: electron download directory traversal, cleartext credential disclosure, remote code execution, arbitrary file, credentials disclosure
CVE-2022-28006: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\employee_delete.php.
Key phrases: sql injection
CVE-2022-28007: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\cashadvance_delete.php.
Key phrases: sql injection
CVE-2022-28008: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\attendance_delete.php.
Key phrases: sql injection
CVE-2022-28009: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\attendance_delete.php.
Key phrases: sql injection
CVE-2022-2801: A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247.
Key phrases: sql injection
CVE-2022-28010: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\overtime_delete.php.
Key phrases: sql injection
CVE-2022-28011: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\schedule_delete.php.
Key phrases: sql injection
CVE-2022-28012: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\position_delete.php.
Key phrases: sql injection
CVE-2022-28013: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\schedule_employee_edit.php.
Key phrases: sql injection
CVE-2022-28014: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\attendance_edit.php.
Key phrases: sql injection
CVE-2022-28015: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\cashadvance_edit.php.
Key phrases: sql injection
CVE-2022-28016: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\deduction_edit.php.
Key phrases: sql injection
CVE-2022-28017: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\overtime_edit.php.
Key phrases: sql injection
CVE-2022-28018: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\schedule_edit.php.
Key phrases: sql injection
CVE-2022-28019: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\employee_edit.php.
Key phrases: sql injection
CVE-2022-2802: A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerability affects unknown code of the file gasmark/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206248.
Key phrases: sql injection
CVE-2022-28020: Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \\\\admin\\\\position_edit.php.
Key phrases: sql injection
CVE-2022-28021: Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
Key phrases: remote code execution (rce)
CVE-2022-28022: Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.
Key phrases: sql injection
CVE-2022-28023: Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.
Key phrases: sql injection
CVE-2022-28024: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade.
Key phrases: sql injection
CVE-2022-28025: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year.
Key phrases: sql injection
CVE-2022-28026: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=.
Key phrases: sql injection
CVE-2022-28028: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity.
Key phrases: sql injection
CVE-2022-28029: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_type.
Key phrases: sql injection
CVE-2022-2803: A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument class_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206249 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-28030: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_estate.
Key phrases: sql injection
CVE-2022-28032: AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
Key phrases: sql injection
CVE-2022-28033: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
Key phrases: sql injection
CVE-2022-28034: AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
Key phrases: sql injection
CVE-2022-28035: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
Key phrases: sql injection
CVE-2022-28036: AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
Key phrases: sql injection
CVE-2022-2804: A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability.
Key phrases: unrestricted upload
CVE-2022-28041: stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), integer overflow, denial of service (dos), unspecified vectors
CVE-2022-28042: stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
Key phrases: heap-based use-after-free, use after free
CVE-2022-28044: Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control.
Key phrases: heap memory corruption
CVE-2022-28048: STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.
Key phrases: integer shift, invalid size
CVE-2022-28049: NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.
Key phrases: null pointer dereference
CVE-2022-2805: A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.
Key phrases: read the log file, confidentiality loss
CVE-2022-28051: The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code.
Key phrases: inject malicious javascript code, xss
CVE-2022-28052: Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution.
Key phrases: remote arbitrary code execution, arbitrarily upload files via /common/upload API, directory traversal
CVE-2022-28053: Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted PHP file, arbitrary file upload
CVE-2022-28054: Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted value, improper sanitization
CVE-2022-28055: Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.
Key phrases: command injection
CVE-2022-28056: ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.
Key phrases: system re-install
CVE-2022-28058: Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \\\\backend\\\\file_controller.php.
Key phrases: arbitrary file deletion
CVE-2022-28059: Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \\\\backend\\\\database_controller.php.
Key phrases: arbitrary file deletion
CVE-2022-2806: It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev
CVE-2022-28060: SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.
Key phrases: sql injection
CVE-2022-28062: Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.
Key phrases: execute arbitrary code, upload a webshell and execute arbitrary code, arbitrary file upload
CVE-2022-28063: Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.
Key phrases: file disclosure
CVE-2022-28067: An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service (DoS) in the Sandbox via a crafted executable.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), incorrect access control issue, denial of service (dos)
CVE-2022-28068: A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
Key phrases: heap buffer overflow
CVE-2022-28069: A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
Key phrases: heap buffer overflow
CVE-2022-2807: SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11.
Key phrases: SQL Injection, sql injection
CVE-2022-28070: A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
Key phrases: null pointer deference
CVE-2022-28071: A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
Key phrases: use after free
CVE-2022-28072: A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
Key phrases: heap buffer overflow
CVE-2022-28073: A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
Key phrases: use after free
CVE-2022-28074: Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \\\\admin\\\\index.html#/system/tools.
Key phrases: stored cross-site scripting (xss)
CVE-2022-28076: Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings.
Key phrases: remote command execution (rce)
CVE-2022-28077: Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.
Key phrases: reflected cross-site scripting (xss)
CVE-2022-28078: Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.
Key phrases: reflected cross-site scripting (xss)
CVE-2022-28079: College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
Key phrases: sql injection
CVE-2022-2808: Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11.
Key phrases: Bypass Through User-Controlled, Authorization Bypass, Object Relational Mapping Injection, authorization bypass through user-controlled key, object relational mapping injection
CVE-2022-28080: Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.
Key phrases: sql injection
CVE-2022-28081: A reflected cross-site scripting (XSS) vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts.
Key phrases: execute arbitrary web scripts, reflected cross-site scripting (xss)
CVE-2022-28082: Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.
Key phrases: stack overflow
CVE-2022-28085: A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
Key phrases: Denial of Service (DoS), heap buffer overflow, denial of service (dos), arbitrary code, arbitrary code execution
CVE-2022-2809: A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser handles unclosed http headers. If long enough http header is passed in the multipart form without colon there is one byte overwrite on heap. It can be conducted multiple times in a loop to cause DoS.
Key phrases: cause denial of service, memory corruptions, dos
CVE-2022-28090: Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.
Key phrases: execute a Server-Side Request Forgery (, server-side request forgery (ssrf)
CVE-2022-28093: SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted PHP file, local file inclusion
CVE-2022-28094: SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.
Key phrases: cross-site scripting (xss)
CVE-2022-28096: Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.
Key phrases: remote code execution (rce)
CVE-2022-28099: Poultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via the Item parameter at /farm/store.php.
Key phrases: sql injection
CVE-2022-28101: Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.
Key phrases: execute HTML injection, html injection
CVE-2022-28102: A cross-site scripting (XSS) vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-28104: Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.
Key phrases: arbitrary file upload
CVE-2022-28105: Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view_facility.php.
Key phrases: blind sql injection
CVE-2022-28106: Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request.
Key phrases: take over user accounts via a crafted POST
CVE-2022-28108: Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
Key phrases: CSRF because it permits non-JSON content, csrf
CVE-2022-28109: Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding. The impact is: execute arbitrary code (remote). The component is: WebDriver endpoint of Selenium Grid / Selenium Standalone Server. The attack vector is: Triggered by browsing to to a malicious remote web server. The WebDriver endpoint of Selenium Server (Grid) is vulnerable to DNS rebinding. This can be used to execute arbitrary code on the machine.
Key phrases: execute arbitrary code, dns rebinding, arbitrary code (remote), attack vector
CVE-2022-2811: A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unknown part of the file myform.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206397 was assigned to this vulnerability.
Key phrases: cross site scripting, cross-site scripting
CVE-2022-28110: Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page.
Key phrases: sql injection
CVE-2022-28111: MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter.
Key phrases: sql injection
CVE-2022-28113: An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.
Key phrases: write files and reset the user passwords without, to write files
CVE-2022-28114: DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php.
Key phrases: arbitrary file deletion
CVE-2022-28115: Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.
Key phrases: sql injection
CVE-2022-28116: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.
Key phrases: sql injection
CVE-2022-28117: A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.
Key phrases: make arbitrary requests, force the application to make arbitrary requests via, server-side request forgery (ssrf)
CVE-2022-28118: SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted plug-
CVE-2022-2812: A vulnerability classified as critical was found in SourceCodester Guest Management System. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-206398 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-28120: Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server.
Key phrases: gain control, file upload
CVE-2022-28126: Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, improper input validation, escalation privilege
CVE-2022-28127: A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability.
Key phrases: data removal, arbitrary file deletion
CVE-2022-28128: Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.
Key phrases: execute arbitrary code, gain privileges, gain privileges and execute arbitrary code via a, untrusted search path, unspecified
CVE-2022-28129: Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Key phrases: send invalid headers, improper input validation
CVE-2022-2813: A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-206400.
Key phrases: cleartext storage of password
CVE-2022-28131: Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
Key phrases: cause a panic due to stack exhaustion via, uncontrolled recursion
CVE-2022-28133: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.
Key phrases: stored cross-site scripting (xss)
CVE-2022-28134: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.
Key phrases: create, http endpoints
CVE-2022-28135: Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configuration file of plugins based on Jenkins instant-messaging Plugin on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Key phrases: unencrypted
CVE-2022-28136: A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
Key phrases: connect to an attacker-specified URL using, cross-site request forgery (csrf), cross site request forgery
CVE-2022-28137: A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Key phrases: connect to an attacker-specified URL using, missing permission check
CVE-2022-28138: A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.
Key phrases: connect to an attacker-specified URL using, cross-site request forgery (csrf), cross site request forgery
CVE-2022-28139: A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Key phrases: connect to an attacker-specified URL using, permission check
CVE-2022-2814: A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /mkshope/login.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206401 was assigned to this vulnerability.
Key phrases: cross site scripting
CVE-2022-28140: Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Key phrases: xml external entity (xxe)
CVE-2022-28141: Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
Key phrases: unencrypted
CVE-2022-28142: Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS issues.
Key phrases: ssl tls issues
CVE-2022-28143: A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters.
Key phrases: connect to an attacker-specified host using, cross-site request forgery (csrf), cross site request forgery
CVE-2022-28144: Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters.
Key phrases: connect to an attacker-specified host using
CVE-2022-28145: Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents.
Key phrases: stored cross-site scripting (xss), exploitable
CVE-2022-28146: Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps.
Key phrases: read arbitrary files, read arbitrary files on the Jenkins controller by
CVE-2022-28147: A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Key phrases: check for the existence of an attacker-
CVE-2022-28148: The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
Key phrases: obtain the contents of arbitrary files on Windows controllers, path traversal
CVE-2022-28149: Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Key phrases: stored cross-site scripting (xss)
CVE-2022-2815: Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.
Key phrases: insecure storage of sensitive information
CVE-2022-28150: A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job.
Key phrases: change the owners and item-specific permissions, cross-site request forgery (csrf), cross site request forgery
CVE-2022-28151: A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.
Key phrases: change the owners and item-specific permissions, missing permission check
CVE-2022-28152: A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.
Key phrases: restore the default ownership of a job, cross-site request forgery (csrf), cross site request forgery
CVE-2022-28153: Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Key phrases: stored cross-site scripting (xss)
CVE-2022-28154: Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Key phrases: xml external entity (xxe)
CVE-2022-28155: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Key phrases: xml external entity (xxe)
CVE-2022-28156: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.
Key phrases: copy arbitrary files, copy arbitrary files and directories from the Jenkins
CVE-2022-28157: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server.
Key phrases: upload arbitrary files, upload arbitrary files from the Jenkins controller via, item configure permission
CVE-2022-28158: A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Key phrases: enumerate credentials IDs of credentials stored in Jenkins
CVE-2022-28159: Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Key phrases: stored cross-site scripting (xss)
CVE-2022-2816: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.
Key phrases: out-of-bounds read
CVE-2022-28160: Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller.
Key phrases: read arbitrary files, read arbitrary files on the Jenkins controller
CVE-2022-28161: An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need to have valid user credentials and turn on debug mode.
Key phrases: view sensitive information such as ssh passwords in, log file, information exposure
CVE-2022-28162: Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.
Key phrases: plain text
CVE-2022-28163: In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands.
Key phrases: run arbitrary SQL commands, sql injection
CVE-2022-28164: Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords.
Key phrases: decrypt stored account passwords
CVE-2022-28165: A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because restrictions are not performed on Server side to ensure the user has required permission before processing requests.
Key phrases: access resources that they should not be able
CVE-2022-28166: In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers (ssl-static-key-ciphers) on ports 443 & 18082.
CVE-2022-28167: Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log
Key phrases: plain text
CVE-2022-28168: In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords.
Key phrases: access log files to easily decode the passwords
CVE-2022-28169: Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator's authorization header.
Key phrases: gain elevated admin rights
CVE-2022-2817: Use After Free in GitHub repository vim/vim prior to 9.0.0213.
Key phrases: use after free
CVE-2022-28170: Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.
Key phrases: extract the passwords from a debug file
CVE-2022-28171: The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device.
Key phrases: insufficient input validation
CVE-2022-28172: The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.
Key phrases: xss, insufficient input validation
CVE-2022-28173: The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.
Key phrases: obtain the admin permission, access control
CVE-2022-2818: Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
Key phrases: improper removal of sensitive information
CVE-2022-28181: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
Key phrases: out-of-bounds write, denial of service, escalation of privileges, information disclosure, data tampering, out of bounds write, code execution, escalation privilege
CVE-2022-28182: NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
Key phrases: out-of-bounds write, denial of service, escalation of privileges, information disclosure, data tampering, out of bounds write, code execution, escalation privilege