Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38381 State: PUBLISHED Published: 2022-11-02T00:00:00 Last Updated: 2024-10-25T13:20:24.257Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiADC Problem Types: Execute unauthorized code or commands Description: An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall (WAF) protection such as the SQL Injection and XSS filters via a malformed HTTP request. Additional Analyst No
Firewall (WAF) protection such as the SQL Injection and XSS filters via a malformed HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-234
CVE ID: CVE-2022-38382 State: PUBLISHED Published: 2024-08-13T01:01:33.992Z Last Updated: 2024-09-21T09:50:16.866Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-613 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7165286 - https://exchange.xforce.ibmclou
- CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7165286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233672
CVE ID: CVE-2022-38383 State: PUBLISHED Published: 2024-06-28T19:03:43.269Z Last Updated: 2024-08-03T10:54:03.714Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cloud Pak for Security, QRadar Suite Software Problem Types: CWE-525 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158986 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/7158986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233673
CVE ID: CVE-2022-38385 State: PUBLISHED Published: 2022-11-11T18:19:55.616Z Last Updated: 2025-05-01T13:52:39.520Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: Cloud Pak for Security Problem Types: CWE-20 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6833586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233777
CVE ID: CVE-2022-38386 State: PUBLISHED Published: 2024-05-01T12:48:12.167Z Last Updated: 2024-08-03T10:54:03.704Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Cloud Pak for Security, QRadar Suite for Software Problem Types: CWE-1275 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
X-Force ID: 233778. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233778
CVE ID: CVE-2022-38387 State: PUBLISHED Published: 2022-11-11T18:16:00.169Z Last Updated: 2025-05-01T13:58:18.515Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: Cloud Pak for Security Problem Types: CWE-78 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 233786. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6833584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233786
CVE ID: CVE-2022-38388 State: PUBLISHED Published: 2022-10-11T16:00:14.097Z Last Updated: 2025-05-15T18:43:49.068Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/C:L/PR:N/AV:L/A:N/UI:N/AC:L/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Navigator Mobile Problem Types: Obtain Information Description: IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6828469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233968
CVE ID: CVE-2022-38389 State: PUBLISHED Published: 2023-02-02T18:00:54.967Z Last Updated: 2025-03-25T19:49:50.851Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: IBM Products: Tivoli Workload Scheduler Problem Types: CWE-611 Description: IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890695 - https://exchange
gram Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233975
CVE ID: CVE-2022-38390 State: PUBLISHED Published: 2022-11-17T16:48:11.088Z Last Updated: 2025-04-29T13:46:49.770Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Business Automation Workflow Problem Types: CWE-79 Description: Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 233978. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/suppor
78. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6839847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233978
CVE ID: CVE-2022-38391 State: PUBLISHED Published: 2022-12-20T20:31:35.551Z Last Updated: 2025-04-15T20:03:26.616Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Spectrum Control Problem Types: CWE-327 Description: IBM Spectrum Control 5.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 233982. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6847541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/233982
CVE ID: CVE-2022-38392 State: PUBLISHED Published: 2022-08-17T00:00:00 Last Updated: 2024-08-03T10:54:03.576Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:P/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported product is Seagate STDT4000100 763649053447. Additional Analyst Notes: - CVE Program Container: References: - https://devblogs.microsoft.com/oldnewthing/20220816-00
Additional Analyst Notes: - CVE Program Container: References: - https://devblogs.microsoft.com/oldnewthing/20220816-00/?p=106994 - https://www.youtube.com/watch?v=nSvu9IDUjZw&t=416s - https://www.seagate.com/support/security/
CVE ID: CVE-2022-38393 State: PUBLISHED Published: 2023-01-10T20:37:32.449Z Last Updated: 2024-08-03T10:54:03.747Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Asus Products: RT-AX82U Problem Types: CWE-125 Description: A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_report
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1592
CVE ID: CVE-2022-38394 State: PUBLISHED Published: 2022-09-08T07:10:46 Last Updated: 2024-08-03T10:54:03.548Z Vendors: Allied Telesis K.K. Products: CentreCOM AR260S V2 Problem Types: Use of hard-coded credentials Description: Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote unauthenticated attacker to execute an arbitrary OS command. Additional Analyst Notes: - CVE Program Container: References: - https://www.allied-telesis.co.jp/support/list/faq/vuls/20220829.html - https://jvn.jp/en/jp/JVN45473612/index.html
CVE ID: CVE-2022-38395 State: PUBLISHED Published: 2022-11-18T20:52:28.312Z Last Updated: 2025-04-29T18:35:19.184Z Vendors: HP Inc. Products: HP Support Assistant Problem Types: n/a Description: HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6788123-6788147-16/hpsbhf03809
CVE ID: CVE-2022-38396 State: PUBLISHED Published: 2023-02-03T16:53:47.447Z Last Updated: 2025-03-25T20:40:17.060Z Vendors: HP Inc. Products: HP Factory Preinstalled Windows 10 20H2 Images Problem Types: n/a Description: HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/ie-en/document/ish_7620368-7620413-16
CVE ID: CVE-2022-38398 State: PUBLISHED Published: 2022-09-22T00:00:00.000Z Last Updated: 2025-11-03T19:27:24.506Z Vendors: Apache Software Foundation Products: Apache XML Graphics Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/712c9xwtmyghyokzrm2ml6sps4xlmbsx - https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html - https://security.gentoo.org/glsa/202401-11
CVE ID: CVE-2022-38399 State: PUBLISHED Published: 2022-09-08T07:10:46 Last Updated: 2024-08-03T10:54:03.723Z Vendors: PLANEX COMMUNICATIONS INC. Products: SmaCam CS-QR10 and SmaCam Night Vision CS-QR20 Problem Types: Missing protection mechanism for alternate hardware interface Description: Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection Additional Analyst Notes: - CVE Program Container: References: - https://www.planex.co.jp/products/cs-qr10/index.shtml - https://www.planex.c
tes: - CVE Program Container: References: - https://www.planex.co.jp/products/cs-qr10/index.shtml - https://www.planex.co.jp/products/cs-qr20/index.shtml - https://jvn.jp/en/vu/JVNVU90766406/index.html
CVE ID: CVE-2022-38400 State: PUBLISHED Published: 2022-09-08T07:10:47 Last Updated: 2024-08-03T10:54:03.500Z Vendors: SYNCK GRAPHICA Products: Mailform Pro CGI Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.synck.com/blogs/news/newsroom/detail_1661907555.html - https://www.synck.com/downloads/cgi-perl/mailformpro/index.html - https://www.synck.com/downloads/cgi-perl/mailformpro/feature_1381250709.html - http
ds/cgi-perl/mailformpro/index.html - https://www.synck.com/downloads/cgi-perl/mailformpro/feature_1381250709.html - https://jvn.jp/en/jp/JVN34205166/index.html
CVE ID: CVE-2022-38401 State: PUBLISHED Published: 2022-09-16T17:14:27.354Z Last Updated: 2025-04-23T17:08:41.984Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/aps
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE ID: CVE-2022-38402 State: PUBLISHED Published: 2022-09-16T17:14:14.318Z Last Updated: 2025-04-23T17:09:12.937Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-125 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/aps
CVE ID: CVE-2022-38403 State: PUBLISHED Published: 2022-09-16T17:14:11.212Z Last Updated: 2025-04-23T17:09:18.603Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-125 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/aps
CVE ID: CVE-2022-38404 State: PUBLISHED Published: 2022-09-16T17:14:17.245Z Last Updated: 2025-04-23T17:09:06.634Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/aps
CVE ID: CVE-2022-38405 State: PUBLISHED Published: 2022-09-16T17:14:22.171Z Last Updated: 2025-04-23T17:08:54.107Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/aps
CVE ID: CVE-2022-38406 State: PUBLISHED Published: 2022-09-16T17:14:19.622Z Last Updated: 2025-04-23T17:08:59.962Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InCopy Problem Types: CWE-125 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE ID: CVE-2022-38407 State: PUBLISHED Published: 2022-09-16T17:14:24.822Z Last Updated: 2025-04-23T17:08:48.710Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InCopy Problem Types: CWE-125 Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
CVE ID: CVE-2022-38408 State: PUBLISHED Published: 2022-09-16T17:00:12.722Z Last Updated: 2025-04-23T17:09:29.817Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-20 Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP
r interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-55.html
CVE ID: CVE-2022-38409 State: PUBLISHED Published: 2022-09-16T17:00:09.819Z Last Updated: 2025-04-23T17:09:35.673Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-55.html
CVE ID: CVE-2022-38410 State: PUBLISHED Published: 2022-09-16T17:00:15.596Z Last Updated: 2025-04-23T17:09:23.969Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
CVE ID: CVE-2022-38411 State: PUBLISHED Published: 2022-09-16T16:58:20.411Z Last Updated: 2025-04-23T17:09:41.445Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-122 Description: Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/anima
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb22-54.html
CVE ID: CVE-2022-38412 State: PUBLISHED Published: 2022-09-16T16:58:17.248Z Last Updated: 2025-04-23T17:09:47.781Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-125 Description: Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Note
xploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb22-54.html
CVE ID: CVE-2022-38413 State: PUBLISHED Published: 2022-09-16T17:20:40.005Z Last Updated: 2025-04-23T17:06:19.443Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-122 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indes
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb22-50.html