Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34955 State: PUBLISHED Published: 2022-08-02T02:54:13 Last Updated: 2024-08-03T09:22:10.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/261
CVE ID: CVE-2022-34956 State: PUBLISHED Published: 2022-08-02T02:54:35 Last Updated: 2024-08-03T09:22:10.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/261
CVE ID: CVE-2022-34960 State: PUBLISHED Published: 2022-08-25T01:50:03 Last Updated: 2024-08-03T09:22:10.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host. Additional Analyst Notes: - CVE Program Container: References: - https://nns.ee/blog/2022/06/21/routeros-container-rce.html - https://nns.ee/blog/2022/08/05/routeros-container-rce.html
CVE ID: CVE-2022-34961 State: PUBLISHED Published: 2022-07-25T14:39:27 Last Updated: 2024-08-03T09:22:10.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module. Additional Analyst Notes: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 - https://www.openteknik.com/contact?channel=ossn - https://github.com/bypazs/CVE-2022-34961 - https://grimthereaperteam.medium.com/cve-2022-34961-ossn-6-3-lts-stored-xss-vu
ttps://github.com/bypazs/CVE-2022-34961 - https://grimthereaperteam.medium.com/cve-2022-34961-ossn-6-3-lts-stored-xss-vulnerability-at-users-timeline-819a9d4e5e6c
CVE ID: CVE-2022-34962 State: PUBLISHED Published: 2022-07-25T17:17:53 Last Updated: 2024-08-03T09:22:10.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module. Additional Analyst Notes: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 - https://www.openteknik.com/contact?channel=ossn - https://grimthereaperteam.medium.com/cve-2022-34962-ossn-6-3-lts-stored-xss-vulnerability-at-group-timeline-6ebe28dd6034
ttps://grimthereaperteam.medium.com/cve-2022-34962-ossn-6-3-lts-stored-xss-vulnerability-at-group-timeline-6ebe28dd6034 - https://github.com/bypazs/CVE-2022-34962
CVE ID: CVE-2022-34963 State: PUBLISHED Published: 2022-07-25T14:30:39 Last Updated: 2024-08-03T09:22:10.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the News Feed module. Additional Analyst Notes: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 - https://www.openteknik.com/contact?channel=ossn - https://grimthereaperteam.medium.com/cve-2022-34963-ossn-6-3-lts-stored-xss-vulnerability-at-news-feed-b8ae8f2fa5f3 - https://
//grimthereaperteam.medium.com/cve-2022-34963-ossn-6-3-lts-stored-xss-vulnerability-at-news-feed-b8ae8f2fa5f3 - https://github.com/bypazs/CVE-2022-34963
CVE ID: CVE-2022-34964 State: PUBLISHED Published: 2022-07-25T14:52:25 Last Updated: 2024-08-03T09:22:10.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the SitePages module. Additional Analyst Notes: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 - https://www.openteknik.com/contact?channel=ossn - https://grimthereaperteam.medium.com/ossn-6-3-lts-stored-xss-vulnerability-at-sitepages-ba91bbeccf1c
CVE ID: CVE-2022-34965 State: PUBLISHED Published: 2022-07-25T00:00:00 Last Updated: 2024-08-03T09:22:10.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - htt
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 - https://www.openteknik.com/contact?channel=ossn - https://grimthereaperteam.medium.com/cve-2022-34965-open-source-social-network-6-3-3f61db82880
CVE ID: CVE-2022-34966 State: PUBLISHED Published: 2022-07-25T18:35:34 Last Updated: 2024-08-03T09:22:10.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ip_address/:port/ossn/home. Additional Analyst Notes: - CVE Program Container: References: - https://www.opensource-socialnetwork.org/ - https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 - https://www.openteknik.com/contact?channel=ossn - https://grimthereaperteam.medium.com/cve-2022-34966-ossn-6-3-lts-html-injection-vulnerability-at-location
channel=ossn - https://grimthereaperteam.medium.com/cve-2022-34966-ossn-6-3-lts-html-injection-vulnerability-at-location-parameter-3fe791dd22c6
CVE ID: CVE-2022-34967 State: PUBLISHED Published: 2022-08-03T01:48:59 Last Updated: 2024-08-03T09:22:10.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MonetDB/MonetDB/issues/7306
CVE ID: CVE-2022-34968 State: PUBLISHED Published: 2022-08-03T01:49:13 Last Updated: 2024-08-03T09:22:10.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL query. Additional Analyst Notes: - CVE Program Container: References: - https://jira.percona.com/browse/PS-8294
CVE ID: CVE-2022-34969 State: PUBLISHED Published: 2022-08-03T01:49:02 Last Updated: 2024-08-03T09:22:10.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pingcap/tidb/issues/35310
CVE ID: CVE-2022-34970 State: PUBLISHED Published: 2022-08-04T18:39:06 Last Updated: 2024-08-03T09:22:10.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CrowCpp/Crow/pull/486 - https://github.com/CrowCpp/Crow/releases/tag/v1.0%2B4 - https://github.com/0xhebi/CVE-2022-34970/blob/master/report.md - https://cwe.mitre.org/data/definitions/193.html
CVE ID: CVE-2022-34971 State: PUBLISHED Published: 2022-07-27T01:15:44 Last Updated: 2024-08-03T09:22:10.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liufee/cms/issues/62
CVE ID: CVE-2022-34972 State: PUBLISHED Published: 2022-07-05T19:27:20 Last Updated: 2024-08-03T09:22:10.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_value_id , opt_value_id , and subcate_value_id parameters at /index.php?route=extension/module/so_filter_shop_by/filter_data. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/167605/OpenCart-3.x-So-Filter-Shop-By-SQL-Injection.html
CVE ID: CVE-2022-34973 State: PUBLISHED Published: 2022-08-03T14:06:44 Last Updated: 2024-08-03T09:22:10.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1759134370/iot/blob/main/DIR-820L.md
CVE ID: CVE-2022-34974 State: PUBLISHED Published: 2022-08-03T14:06:30 Last Updated: 2024-08-03T09:22:10.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1759134370/iot/blob/main/DIR-810L.md
CVE ID: CVE-2022-34981 State: PUBLISHED Published: 2022-07-22T14:17:30 Last Updated: 2024-08-03T09:29:17.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/PyCrowdTangle/ - https://github.com/UPB-SS1/PyCrowdTangle/issues/1
CVE ID: CVE-2022-34982 State: PUBLISHED Published: 2022-07-22T14:17:59 Last Updated: 2024-08-03T09:29:16.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/eziod/ - https://github.com/alexw994/eziod/issues/1
CVE ID: CVE-2022-34983 State: PUBLISHED Published: 2022-07-22T14:17:48 Last Updated: 2024-08-03T09:29:15.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/scu-captcha/ - https://github.com/SunnyHaze/SCU-Captcha/issues/1
CVE ID: CVE-2022-34988 State: PUBLISHED Published: 2022-07-26T12:57:42 Last Updated: 2024-08-03T09:29:16.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Inout-Blockchain-AltExchanger/2022/Cross-site-scripting-DOM-based-IG-js
CVE ID: CVE-2022-34989 State: PUBLISHED Published: 2022-07-26T12:57:30 Last Updated: 2024-08-03T09:29:15.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Md-Saiful-Islam-creativesaiful/2021/Ecommerce-project-with-php-and-mysqli-Fruits-Bazar
CVE ID: CVE-2022-34991 State: PUBLISHED Published: 2022-07-26T12:57:42 Last Updated: 2024-08-03T09:29:17.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/paymoney/2022/paymoney-3.3
CVE ID: CVE-2022-34992 State: PUBLISHED Published: 2022-08-03T17:09:24 Last Updated: 2024-08-03T09:29:17.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/viruscamp/luadec/issues/84
CVE ID: CVE-2022-34993 State: PUBLISHED Published: 2022-08-04T18:59:07 Last Updated: 2024-08-03T09:29:15.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - http://www.totolink.cn/home/menu/detail.html?menu_listtpl=download&id=63&ids=36image-20220606105532193 - https://github.com/cilan2/iot/blob/main/1.md
CVE ID: CVE-2022-34998 State: PUBLISHED Published: 2022-08-16T20:00:06 Last Updated: 2024-08-03T09:29:16.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/JPEGDEC/issues/41
CVE ID: CVE-2022-34999 State: PUBLISHED Published: 2022-08-16T20:00:07 Last Updated: 2024-08-03T09:29:17.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/JPEGDEC/issues/41
CVE ID: CVE-2022-35000 State: PUBLISHED Published: 2022-08-16T20:00:08 Last Updated: 2024-08-03T09:29:16.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/JPEGDEC/issues/41
CVE ID: CVE-2022-35002 State: PUBLISHED Published: 2022-08-16T20:00:11 Last Updated: 2024-08-03T09:29:16.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/JPEGDEC/issues/41
CVE ID: CVE-2022-35003 State: PUBLISHED Published: 2022-08-16T20:00:12 Last Updated: 2024-08-03T09:29:15.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/JPEGDEC/issues/41
CVE ID: CVE-2022-35004 State: PUBLISHED Published: 2022-08-16T20:00:12 Last Updated: 2024-08-03T09:29:17.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/JPEGDEC/issues/41
CVE ID: CVE-2022-35007 State: PUBLISHED Published: 2022-08-16T20:00:13 Last Updated: 2024-08-03T09:29:16.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35008 State: PUBLISHED Published: 2022-08-16T20:00:14 Last Updated: 2024-08-03T09:29:16.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35009 State: PUBLISHED Published: 2022-08-16T20:12:09 Last Updated: 2024-08-03T09:29:16.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35010 State: PUBLISHED Published: 2022-08-16T20:12:09 Last Updated: 2024-08-03T09:29:17.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35011 State: PUBLISHED Published: 2022-08-16T20:12:10 Last Updated: 2024-08-03T09:29:17.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35012 State: PUBLISHED Published: 2022-08-16T20:12:11 Last Updated: 2024-08-03T09:29:16.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35013 State: PUBLISHED Published: 2022-08-16T20:12:12 Last Updated: 2024-08-03T09:29:15.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitbank2/PNGdec/issues/10
CVE ID: CVE-2022-35014 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-03T09:29:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advancecomp v2.3 contains a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1mglfof2gR9Xoi5OWS9x0-jJ7cSIJA5i6/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35014.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXR
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXRE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF/
CVE ID: CVE-2022-35015 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-03T09:29:16.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1pxNOlyl5mWXdVwkmCD4ZuXEPxI3PZAac/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35015.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.
.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXRE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF/
CVE ID: CVE-2022-35016 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-03T09:29:16.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advancecomp v2.3 was discovered to contain a heap buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1oWVhoJJih6-pgbvrZsx5oFUtv-vgR0fF/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35016.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY4
BJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXRE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF/
CVE ID: CVE-2022-35017 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-03T09:29:16.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advancecomp v2.3 was discovered to contain a heap buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/13WAtJtCUBH4LW5MBulyuhLFq2HQq4e_Q/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35017.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY4
CVE ID: CVE-2022-35018 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-03T09:29:16.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advancecomp v2.3 was discovered to contain a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1ChqmPdrjId87582a-o5ogWyEI8goRVWJ/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35018.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45Q
FPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXRE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF/
CVE ID: CVE-2022-35019 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-03T09:29:16.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advancecomp v2.3 was discovered to contain a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1n1hltvw-kqpzZ50L6d7RGGNagwbUp0Z2/view?usp=sharing - https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35019.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45Q