Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29780 State: PUBLISHED Published: 2022-05-27T13:13:48 Last Updated: 2024-08-03T06:33:42.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/486 - https://github.com/nginx/njs/commit/8b39afdad9a0761e0a5d4af1a762bd9a6daef572
CVE ID: CVE-2022-29784 State: PUBLISHED Published: 2022-06-03T20:27:07 Last Updated: 2024-08-03T06:33:42.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JinYiTong/CVE-Req/blob/main/publiccms/publiccms.md - https://github.com/sanluan/PublicCMS/commit/d8d7626cf51e4968fb384e1637a3c0c9921f33e9
CVE ID: CVE-2022-29788 State: PUBLISHED Published: 2022-06-02T13:02:58 Last Updated: 2024-08-03T06:33:42.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bfabiszewski/libmobi/commit/ce0ab6586069791b1e8e2a42f44318e581c39939
CVE ID: CVE-2022-29789 State: PUBLISHED Published: 2022-05-13T15:03:59 Last Updated: 2024-08-03T06:33:42.527Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unstrict verification vulnerability Description: The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29790 State: PUBLISHED Published: 2022-05-13T15:04:14 Last Updated: 2024-08-03T06:33:42.635Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Multi-threaded access to the database vulnerability Description: The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29791 State: PUBLISHED Published: 2022-05-13T15:04:30 Last Updated: 2024-08-03T06:33:42.679Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unstrict verification vulnerability Description: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29792 State: PUBLISHED Published: 2022-05-13T15:04:46 Last Updated: 2024-08-03T06:33:42.572Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Serial number obtaining vulnerability Description: The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29793 State: PUBLISHED Published: 2022-05-13T15:05:15 Last Updated: 2024-08-03T06:33:42.576Z Vendors: n/a Products: HarmonyOS;EMUI;Magic UI Problem Types: Configuration defect vulnerability Description: There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162 - https://consumer.huawei.com/en/support/bulletin/2022/6/
CVE ID: CVE-2022-29794 State: PUBLISHED Published: 2022-05-13T15:05:27 Last Updated: 2024-08-03T06:33:42.678Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: UAF vulnerability Description: The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29795 State: PUBLISHED Published: 2022-05-13T15:05:43 Last Updated: 2024-08-03T06:33:42.597Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Null pointer dereference vulnerability Description: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29796 State: PUBLISHED Published: 2022-05-13T15:05:59 Last Updated: 2024-08-03T06:33:42.618Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unstrict verification vulnerability Description: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2022-29797 State: PUBLISHED Published: 2022-06-13T18:55:10 Last Updated: 2024-08-03T06:33:42.500Z Vendors: n/a Products: CV81-WDM FW Problem Types: Buffer Overflow Description: There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220427-01-e9a493e2-en
CVE ID: CVE-2022-29798 State: PUBLISHED Published: 2022-06-13T18:55:03 Last Updated: 2024-08-03T06:33:42.847Z Vendors: n/a Products: CV81-WDM FW Problem Types: Denial of Service Description: There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220601-01-f75b152f-en
CVE ID: CVE-2022-29799 State: PUBLISHED Published: 2022-09-21T18:21:10.000Z Last Updated: 2025-05-27T20:47:58.690Z Vendors: n/a Products: networkd-dispatcher Problem Types: CWE-22 Description: A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/
CVE ID: CVE-2022-29800 State: PUBLISHED Published: 2022-09-21T18:21:17.000Z Last Updated: 2025-05-28T13:53:14.312Z Vendors: n/a Products: networkd-dispatcher Problem Types: CWE-367 Description: A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-e
ntainer: - CISA ADP Vulnrichment: References: - https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/
CVE ID: CVE-2022-29801 State: PUBLISHED Published: 2022-05-10T09:47:13 Last Updated: 2024-08-03T06:33:42.535Z Vendors: Siemens Products: Teamcenter V12.4, Teamcenter V13.0 Problem Types: CWE-611 Description: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdf
CVE ID: CVE-2022-29804 State: PUBLISHED Published: 2022-08-09T00:00:00 Last Updated: 2024-08-03T06:33:42.804Z Vendors: Go standard library Products: path/filepath Problem Types: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/401595 - https://go.googlesource.com/go/+/9cd1818a7d019c02fa4898b3e45a323e35033290 - https://go.dev/issue/52476 - https://groups.google.com/g/golang-annou
om/go/+/9cd1818a7d019c02fa4898b3e45a323e35033290 - https://go.dev/issue/52476 - https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ - https://pkg.go.dev/vuln/GO-2022-0533
CVE ID: CVE-2022-29805 State: PUBLISHED Published: 2022-08-19T11:40:49 Last Updated: 2024-08-03T06:33:42.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.fishbowlinventory.com - https://www.whiteoaksecurity.com/blog/fishbowl-disclosure-cve-2022-29805/
CVE ID: CVE-2022-29806 State: PUBLISHED Published: 2022-04-26T03:15:08 Last Updated: 2024-08-03T06:33:42.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability. Additional Analyst Notes: - CVE Program Container: References: - https://forums.zoneminder.com/viewtopic.php?t=31638 - https://github.com/ZoneMinder/zoneminder/releases/tag/1.36.13 - https://github.com/ZoneMinder/zoneminder/commit/9fee64b62fbdff5bf5ece1d617f1f53c7b1967cb - https://krastanoel.com/cve/2022-29806 - http://packetstormsecurity.com/files/166980/Zo
fbdff5bf5ece1d617f1f53c7b1967cb - https://krastanoel.com/cve/2022-29806 - http://packetstormsecurity.com/files/166980/ZoneMinder-Language-Settings-Remote-Code-Execution.html
CVE ID: CVE-2022-29807 State: PUBLISHED Published: 2022-08-02T21:42:14 Last Updated: 2024-08-03T06:33:42.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php. Additional Analyst Notes: - CVE Program Container: References: - https://support.quest.com/kb/338162 - https://support.quest.com/kace-systems-management-appliance/kb/338162/quest-response-to-kace-sma-vulnerabilities-cve-2022-29807
CVE ID: CVE-2022-29808 State: PUBLISHED Published: 2022-08-02T21:35:42 Last Updated: 2024-08-03T06:33:42.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://support.quest.com/kb/338163 - https://support.quest.com/kace-systems-management-appliance/kb/338163/quest-response-to-kace-sma-vulnerabilities-cve-2022-29808
CVE ID: CVE-2022-29810 State: PUBLISHED Published: 2022-04-27T05:50:30 Last Updated: 2024-08-03T06:33:42.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hashicorp/go-getter/pull/348 - https://github.com/hashicorp/go-getter/releases/tag/v1.5.11 - https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc
CVE ID: CVE-2022-29811 State: PUBLISHED Published: 2022-04-28T09:55:17 Last Updated: 2024-08-03T06:33:42.797Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-79 Description: In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29812 State: PUBLISHED Published: 2022-04-28T09:55:19 Last Updated: 2024-08-03T06:33:42.664Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-176 Description: In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29813 State: PUBLISHED Published: 2022-04-28T09:55:20 Last Updated: 2024-08-03T06:33:42.799Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-94 Description: In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29814 State: PUBLISHED Published: 2022-04-28T09:55:21 Last Updated: 2024-08-03T06:33:42.902Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-94 Description: In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29815 State: PUBLISHED Published: 2022-04-28T09:55:23 Last Updated: 2024-08-03T06:33:42.657Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-94 Description: In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29816 State: PUBLISHED Published: 2022-04-28T09:55:24 Last Updated: 2024-08-03T06:33:42.690Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-74 Description: In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29817 State: PUBLISHED Published: 2022-04-28T09:55:26 Last Updated: 2024-08-03T06:33:42.813Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-79 Description: In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29818 State: PUBLISHED Published: 2022-04-28T09:55:27 Last Updated: 2024-08-03T06:33:42.652Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-346 Description: In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29819 State: PUBLISHED Published: 2022-04-28T09:55:28 Last Updated: 2024-08-03T06:33:42.822Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-94 Description: In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29820 State: PUBLISHED Published: 2022-04-28T09:55:30 Last Updated: 2024-08-03T06:33:42.663Z Severity: LOW (CVSS 3 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: PyCharm Problem Types: CWE-1327 Description: In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29821 State: PUBLISHED Published: 2022-04-28T09:55:31 Last Updated: 2024-08-03T06:33:42.841Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: Rider Problem Types: CWE-94 Description: In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-29822 State: PUBLISHED Published: 2022-10-25T00:00:00 Last Updated: 2025-03-11T13:39:56.587Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Feather js Products: Feathers-Sequalize Problem Types: CWE-89 Description: Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://csirt.divd.nl/CVE-2022-29822/ - https://csirt.divd.nl/DIVD-2022-00020
CVE ID: CVE-2022-29823 State: PUBLISHED Published: 2022-10-25T00:00:00 Last Updated: 2025-03-11T13:39:49.662Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Feather js Products: Feathers-Sequalize Problem Types: CWE-1321 Description: Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application. Additional Analyst Notes: - CVE Program Container: References: - https://csirt.divd.nl/DIVD-2022-00020 - https://csirt.divd.nl/CVE-2022-29823/
CVE ID: CVE-2022-29824 State: PUBLISHED Published: 2022-05-03T00:00:00 Last Updated: 2024-08-03T06:33:42.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxslt/-/tags - https://lists.fedoraproject.org/archives/list/packa
ainer: References: - https://gitlab.gnome.org/GNOME/libxslt/-/tags - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/ - https://www.debian.org/security/2022/dsa-5142 - https://www.oracle.com/security-alerts/cpujul2022.html - https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14 - ht
42 - https://www.oracle.com/security-alerts/cpujul2022.html - https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14 - https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab - https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd - http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html - https://security.netapp.com/advisory/ntap-20220715-0006/ - https://security.gentoo.org/glsa/202210-03 - http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html
CVE ID: CVE-2022-29825 State: PUBLISHED Published: 2022-11-24T23:21:54.776Z Last Updated: 2025-11-07T06:49:29.712Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: GX Works3, GT Designer3 Version1 (GOT2000), MT Works2 Problem Types: CWE-259 Description: Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute prog
o disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf - https://jvn.jp/vu/JVNVU97244961/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
CVE ID: CVE-2022-29826 State: PUBLISHED Published: 2022-11-24T23:22:21.828Z Last Updated: 2025-04-25T17:51:52.195Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: GX Works3, Motion Control Setting(GX Works3 related software) Problem Types: CWE-312 Description: Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execut
cker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf - https://jvn.jp/vu/JVNVU97244961/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05