Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sts.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1899 State: PUBLISHED Published: 2022-05-26T16:25:10 Last Updated: 2024-08-03T00:17:00.930Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8a3dc5cb-08b3-4807-82b2-77f08c137a04 - https://github.com/radareorg/radare2/commit/193f4fe01d7f626e2ea937450f2e0c4604420e9d
CVE ID: CVE-2022-1900 State: PUBLISHED Published: 2022-06-13T12:47:42.000Z Last Updated: 2025-05-05T16:40:51.251Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: robmcvey Products: Copify Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Copify plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.0. This is due to missing nonce validation on the CopifySettings page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking
web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e92c6374-d11d-458c-b089-0ee79c33e4a6?source=cve - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1900
CVE ID: CVE-2022-1901 State: PUBLISHED Published: 2022-08-19T07:55:08 Last Updated: 2024-08-03T00:17:00.930Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Sensitive Variable Exposure Description: In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/post/2022/sa2022-09/
CVE ID: CVE-2022-1902 State: PUBLISHED Published: 2022-09-01T19:54:44 Last Updated: 2024-08-03T00:17:00.984Z Vendors: n/a Products: Red Hat Advanced Cluster Security for Kubernetes Problem Types: CWE-497 Description: A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2090957 - https://access.redhat.com/security/cve/CVE-2022-1902 - https://github.com/stackrox/sta
hat.com/show_bug.cgi?id=2090957 - https://access.redhat.com/security/cve/CVE-2022-1902 - https://github.com/stackrox/stackrox/pull/1803
CVE ID: CVE-2022-1903 State: PUBLISHED Published: 2022-06-27T08:58:19 Last Updated: 2024-08-03T00:17:00.971Z Vendors: Unknown Products: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup Problem Types: CWE-862 Description: The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/28d26aa6-a8db-4c20-9ec7-39821c606a08
CVE ID: CVE-2022-1904 State: PUBLISHED Published: 2022-06-27T08:58:25 Last Updated: 2024-08-03T00:17:00.911Z Vendors: Unknown Products: Pricing Tables WordPress Plugin – Easy Pricing Tables Problem Types: CWE-79 Description: The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/92215d07-d129-49b4-a838-0de1a944c06b
CVE ID: CVE-2022-1905 State: PUBLISHED Published: 2022-06-20T10:26:17 Last Updated: 2024-08-03T00:17:00.944Z Vendors: Unknown Products: Events Made Easy Problem Types: CWE-89 Description: The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ff5fd894-aff3-400a-8eec-fad9d50f788e
CVE ID: CVE-2022-1906 State: PUBLISHED Published: 2022-08-01T12:48:28 Last Updated: 2024-08-03T00:17:00.966Z Vendors: Unknown Products: Copyright Proof Problem Types: CWE-79 Description: The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/af4f459e-e60b-4384-aad9-0dc18aa3b338
CVE ID: CVE-2022-1907 State: PUBLISHED Published: 2022-05-27T08:30:13 Last Updated: 2024-08-03T00:17:00.917Z Severity: LOW (CVSS 3.6 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: bfabiszewski Products: bfabiszewski/libmobi Problem Types: CWE-126 Description: Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012 - https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba
CVE ID: CVE-2022-1908 State: PUBLISHED Published: 2022-05-27T08:35:16 Last Updated: 2024-08-03T00:17:00.944Z Severity: LOW (CVSS 3.6 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: bfabiszewski Products: bfabiszewski/libmobi Problem Types: CWE-126 Description: Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba - https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8
CVE ID: CVE-2022-1909 State: PUBLISHED Published: 2022-05-27T08:35:11 Last Updated: 2024-08-03T00:17:00.876Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8f83eb8f-51a8-41c0-bc7d-077f48faebdc - https://github.com/causefx/organizr/commit/d5245cab1f4b9180856330266911d6ceda14858b
CVE ID: CVE-2022-1910 State: PUBLISHED Published: 2022-07-11T12:56:28 Last Updated: 2024-08-03T00:17:00.886Z Vendors: Unknown Products: Shortcodes and extra features for Phlox theme Problem Types: CWE-79 Description: The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8afe1638-66fa-44c7-9d02-c81573193b47
CVE ID: CVE-2022-1911 State: PUBLISHED Published: 2022-11-30T14:35:17.470Z Last Updated: 2024-08-28T18:16:01.070Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: M-Files Products: M-Files Server Problem Types: CWE-200 Description: Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.m-files.com/about/trust-center/security-advisories/cve-2022-1911/ - https://product.m-files.com/security-advisories/cve-2022-1911/
CVE ID: CVE-2022-1912 State: PUBLISHED Published: 2022-07-18T16:16:27.000Z Last Updated: 2025-05-05T16:40:39.499Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: smartsoftbuttonwidget Products: Button Widget Smartsoft Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Button Widget Smartsoft plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation on the smartsoftbutton_settings page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site
kers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53757567-5024-46cc-b2ae-04b5fc55a35c?source=cve - https://plugins.trac.wordpress.org/browser/smartsoftbutton-widget-de-botones-de-chat/trunk/admin/pages/settings.php#L60 - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1912
CVE ID: CVE-2022-1913 State: PUBLISHED Published: 2022-06-27T08:58:29 Last Updated: 2024-08-03T00:17:00.938Z Vendors: Unknown Products: Add Post URL Problem Types: CWE-352 Description: The Add Post URL WordPress plugin through 2.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2cafef43-e64a-4897-8c41-f0ed473d7ead
CVE ID: CVE-2022-1914 State: PUBLISHED Published: 2022-06-27T08:58:35 Last Updated: 2024-08-03T00:17:00.972Z Vendors: Unknown Products: Clean-Contact Problem Types: CWE-352 Description: The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8c8dad47-8591-47dc-b84f-8c5cb18b2d78
CVE ID: CVE-2022-1915 State: PUBLISHED Published: 2022-06-20T10:26:19 Last Updated: 2024-08-03T00:17:00.931Z Vendors: Unknown Products: WP Zillow Review Slider Problem Types: CWE-79 Description: The WP Zillow Review Slider WordPress plugin before 2.4 does not escape a settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c3c28edf-19bc-4f3a-b58e-f1c67557aa29
CVE ID: CVE-2022-1916 State: PUBLISHED Published: 2022-06-27T08:58:38 Last Updated: 2024-08-03T00:17:00.927Z Vendors: Unknown Products: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Problem Types: CWE-79 Description: The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d16a0c3d-
te Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d16a0c3d-4318-4ecd-9e65-fc4165af8808
CVE ID: CVE-2022-1918 State: PUBLISHED Published: 2022-06-13T12:46:38 Last Updated: 2024-08-03T00:17:00.908Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: miguelo2008 Products: ToolBar to Share Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing nonce validation on the plugin_toolbar_comparte page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an
ngs and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fbda7670-179a-41ed-8ec9-ae7f5102e645?source=cve - https://plugins.trac.wordpress.org/browser/toolbar-to-share/trunk/toolbartoshare.php - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1918
CVE ID: CVE-2022-1919 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:17:01.039Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1313709 - https://security.gentoo.org/glsa/202208-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-1920 State: PUBLISHED Published: 2022-07-19T19:08:30 Last Updated: 2024-08-03T00:17:00.985Z Vendors: n/a Products: GStreamer Problem Types: CWE-122 Description: Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226 - https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html - https://www.debian.org/security/2022/dsa-5204
CVE ID: CVE-2022-1921 State: PUBLISHED Published: 2022-07-19T00:00:00 Last Updated: 2024-08-03T00:17:00.938Z Vendors: n/a Products: GStreamer Problem Types: CWE-190 Description: Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1224 - https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html - https://www.debian.org/security/2022/dsa-5204
CVE ID: CVE-2022-1922 State: PUBLISHED Published: 2022-07-19T19:09:22 Last Updated: 2024-08-03T00:17:00.943Z Vendors: n/a Products: GStreamer Problem Types: CWE-122 Description: DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce t
S supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html - https://www.debian.org/security/2022/dsa-5204
CVE ID: CVE-2022-1923 State: PUBLISHED Published: 2022-07-19T19:13:29 Last Updated: 2024-08-03T00:17:00.909Z Vendors: n/a Products: GStreamer Problem Types: CWE-122 Description: DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of
mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html - https://www.debian.org/security/2022/dsa-5204
CVE ID: CVE-2022-1924 State: PUBLISHED Published: 2022-07-19T19:13:35 Last Updated: 2024-08-03T00:17:00.985Z Vendors: n/a Products: GStreamer Problem Types: CWE-122 Description: DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of t
map, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html - https://www.debian.org/security/2022/dsa-5204
CVE ID: CVE-2022-1925 State: PUBLISHED Published: 2022-07-19T19:10:49 Last Updated: 2024-08-03T00:17:00.947Z Vendors: n/a Products: GStreamer Problem Types: CWE-122 Description: DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 - https://lists.debian.org/debian-lts-announce/
nces: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html - https://www.debian.org/security/2022/dsa-5204
CVE ID: CVE-2022-1926 State: PUBLISHED Published: 2022-05-31T08:30:12 Last Updated: 2024-08-03T00:17:00.968Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-190 Description: Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3fda8902-68ee-4734-86a3-9551ab17c893 - https://github.com/polonel/trudesk/commit/b7c15180b6d4e556ad05d0881eb72d8b2f1637a0
CVE ID: CVE-2022-1927 State: PUBLISHED Published: 2022-05-29T00:00:00 Last Updated: 2024-08-03T00:17:00.945Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-126 Description: Buffer Over-read in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777 - https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/ - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1928 State: PUBLISHED Published: 2022-05-29T00:00:00 Last Updated: 2024-08-03T00:17:00.935Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: go-gitea Products: go-gitea/gitea Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2 - https://github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c - https://security.gentoo.org/glsa/202210-14
CVE ID: CVE-2022-1929 State: PUBLISHED Published: 2022-06-01T16:47:58.826173Z Last Updated: 2024-09-16T23:11:15.683Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: devcert Products: devcert Problem Types: CWE-1333 Description: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method Additional Analyst Notes: - CVE Program Container: References: - https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/