Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46799 State: PUBLISHED Published: 2023-05-08T11:44:29.653Z Last Updated: 2025-01-09T15:26:09.428Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: Easy Testimonial Slider and Form Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin <= 1.0.15 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-testimonial-rotator/wordpress-easy-testimonial-slider-and-form-plugin-1-0-15-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-46800 State: PUBLISHED Published: 2023-05-25T08:53:20.933Z Last Updated: 2025-01-08T22:01:16.670Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: LiteSpeed Technologies Products: LiteSpeed Cache Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache plugin <= 5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-46801 State: PUBLISHED Published: 2023-11-07T16:11:31.510Z Last Updated: 2024-09-04T18:36:24.032Z Vendors: Paul Ryley Products: Site Reviews Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/site-reviews/wordpress-site-reviews-plugin-6-2-0-unauth-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-46802 State: PUBLISHED Published: 2023-11-07T16:07:32.082Z Last Updated: 2024-09-04T19:04:54.383Z Vendors: WebToffee Products: Product Reviews Import Export for WooCommerce Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects Product Reviews Import Export for WooCommerce: from n/a through 1.4.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/product-reviews-import-export-for-woocommerce/wordpress-product-reviews-import-export-for-woocommerce-plugin-1-4-8-u
ity/product-reviews-import-export-for-woocommerce/wordpress-product-reviews-import-export-for-woocommerce-plugin-1-4-8-unauth-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-46803 State: PUBLISHED Published: 2023-11-07T16:40:45.392Z Last Updated: 2024-09-04T18:13:34.266Z Vendors: Noptin Newsletter Products: Simple Newsletter Plugin – Noptin Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/newsletter-optin-box/wordpress-simple-newsletter-plugin-noptin-plugin-1-9-5-unauth-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-46804 State: PUBLISHED Published: 2023-11-07T16:43:31.142Z Last Updated: 2024-09-04T17:47:06.446Z Vendors: Narola Infotech Solutions LLP Products: Export Users Data Distinct Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/export-users-data-distinct/wordpress-export-users-data-distinct-plugin-1-3-csv-injection?_s_id=cve
CVE ID: CVE-2022-46805 State: PUBLISHED Published: 2023-03-01T14:08:53.994Z Last Updated: 2025-01-13T15:54:23.557Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Lauri Karisola / WP Trio Products: Conditional Shipping for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 leading to activation/deactivation of plugin rulesets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/conditional-payments-for-woocommerce/wordpress-conditional-payments-for-woo
ttps://patchstack.com/database/vulnerability/conditional-payments-for-woocommerce/wordpress-conditional-payments-for-woocommerce-plugin-2-3-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46806 State: PUBLISHED Published: 2023-03-01T14:16:34.972Z Last Updated: 2025-01-13T15:54:17.202Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: VillaTheme Products: Cart All In One For WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-cart-all-in-one/wordpress-cart-all-in-one-for-woocommerce-plugin-1-1-10-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46807 State: PUBLISHED Published: 2024-12-13T14:22:07.251Z Last Updated: 2024-12-13T21:22:42.242Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Lauri Karisola / WP Trio Products: Stock Sync for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Sync for WooCommerce: from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stock-sync-for-woocommerce/vulnerability/wordpress-stock-
References: - https://patchstack.com/database/wordpress/plugin/stock-sync-for-woocommerce/vulnerability/wordpress-stock-sync-for-woocommerce-plugin-2-3-2-broken-access-control-csrf?_s_id=cve
CVE ID: CVE-2022-46808 State: PUBLISHED Published: 2023-11-03T12:36:47.083Z Last Updated: 2024-09-05T18:13:15.613Z Vendors: Repute Infosystems Products: ARMember Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-3-4-11-sql-injection?_s_id=cve
CVE ID: CVE-2022-46809 State: PUBLISHED Published: 2023-11-07T16:37:50.679Z Last Updated: 2024-09-04T18:29:46.550Z Vendors: WPDeveloper Products: ReviewX – Multi-criteria Rating & Reviews for WooCommerce Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/reviewx/wordpress-reviewx-plugin-1-6-6-csv-injection?_s_id=cve
CVE ID: CVE-2022-46810 State: PUBLISHED Published: 2023-05-25T11:18:45.414Z Last Updated: 2025-01-08T21:57:50.505Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: VillaTheme Products: Thank You Page Customizer for WooCommerce – Increase Your Sales Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin <= 1.0.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-thank-you-page-customizer/wordpress-thank-you-page-customizer-for-woocommerce-increase-yo
com/database/vulnerability/woo-thank-you-page-customizer/wordpress-thank-you-page-customizer-for-woocommerce-increase-your-sales-plugin-1-0-13-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46811 State: PUBLISHED Published: 2024-12-13T14:22:07.796Z Last Updated: 2024-12-13T21:21:50.087Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: VillaTheme(villatheme.com) Products: ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in VillaTheme(villatheme.com) ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/a through 1.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment
d Fulfillment for AliExpress and WooCommerce: from n/a through 1.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-alidropship/vulnerability/wordpress-ald-dropshipping-and-fulfillment-for-aliexpress-and-woocommerce-plugin-1-0-21-broken-access-control-csrf?_s_id=cve
CVE ID: CVE-2022-46812 State: PUBLISHED Published: 2023-05-25T08:48:57.552Z Last Updated: 2025-01-08T22:01:27.508Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: VillaTheme Products: Thank You Page Customizer for WooCommerce – Increase Your Sales Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin <= 1.0.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-thank-you-page-customizer/wordpress-thank-you-page-customizer-for-woocommerce-increase-yo
CVE ID: CVE-2022-46813 State: PUBLISHED Published: 2023-05-23T14:49:32.552Z Last Updated: 2025-01-08T22:04:26.039Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Younes JFR. Products: Advanced Database Cleaner Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner plugin <= 3.1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-database-cleaner/wordpress-advanced-database-cleaner-plugin-3-1-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46814 State: PUBLISHED Published: 2023-05-25T11:09:45.600Z Last Updated: 2025-01-08T21:58:01.786Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Pierre Lebedel Products: Kodex Posts likes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Pierre Lebedel Kodex Posts likes plugin <= 2.4.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kodex-posts-likes/wordpress-kodex-posts-likes-plugin-2-4-3-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46815 State: PUBLISHED Published: 2023-02-02T16:21:26.566Z Last Updated: 2025-01-13T15:58:07.842Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Lauri Karisola / WP Trio Products: Conditional Shipping for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/conditional-shipping-for-woocommerce/wordpress-conditional-shipping-for-woocommerce-plugin-2-3-1-cross-site-request-forg
conditional-shipping-for-woocommerce/wordpress-conditional-shipping-for-woocommerce-plugin-2-3-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46816 State: PUBLISHED Published: 2023-05-24T15:45:22.966Z Last Updated: 2025-01-08T22:04:12.620Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Booking Ultra Pro Products: Booking Ultra Pro Appointments Booking Calendar Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-plugin-1-1-4-cross-site-request-f
ity/booking-ultra-pro/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-plugin-1-1-4-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-46817 State: PUBLISHED Published: 2023-05-10T09:21:11.495Z Last Updated: 2025-01-09T15:18:50.915Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Flyzoo Products: Flyzoo Chat Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Flyzoo Flyzoo Chat plugin <= 2.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/flyzoo/wordpress-flyzoo-chat-plugin-2-3-3-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-46818 State: PUBLISHED Published: 2023-11-03T15:58:23.831Z Last Updated: 2024-09-05T18:19:02.979Z Vendors: Gopi Ramasamy Products: Email posts to subscribers Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a through 6.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/email-posts-to-subscribers/wordpress-email-posts-to-subscribers-plugin-6-2-sql-injection?_s_id=cve
CVE ID: CVE-2022-46819 State: PUBLISHED Published: 2023-05-10T09:17:57.638Z Last Updated: 2025-01-09T15:19:01.568Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Gopi Ramasamy Products: Continuous announcement scroller Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin <= 13.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/continuous-announcement-scroller/wordpress-continuous-announcement-scroller-plugin-13-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-46820 State: PUBLISHED Published: 2023-05-25T11:04:32.781Z Last Updated: 2025-01-08T21:58:13.088Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPJoli Products: Joli Table Of Contents Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPJoli Joli Table Of Contents plugin <= 1.3.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/joli-table-of-contents/wordpress-joli-table-of-contents-plugin-1-3-9-cross-site-request-forgery-csrf-on-reset-settings?_s_id=cve
CVE ID: CVE-2022-46821 State: PUBLISHED Published: 2023-11-07T16:47:17.461Z Last Updated: 2024-09-04T17:41:50.424Z Vendors: Jackmail & Sarbacane Products: Emails & Newsletters with Jackmail Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Jackmail & Sarbacane Emails & Newsletters with Jackmail.This issue affects Emails & Newsletters with Jackmail: from n/a through 1.2.22. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jackmail-newsletters/wordpress-emails-newsletters-with-jackmail-plugin-1-2-22-csv-injection?_s_id=cve
CVE ID: CVE-2022-46822 State: PUBLISHED Published: 2023-05-09T11:12:08.508Z Last Updated: 2025-01-09T15:22:41.621Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: JC Development Team Products: WooCommerce JazzCash Gateway Plugin Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in JC Development Team WooCommerce JazzCash Gateway Plugin plugin <= 2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jazzcash-woocommerce-gateway/wordpress-woocommerce-jazzcash-gateway-plugin-plugin-2-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-46823 State: PUBLISHED Published: 2023-01-10T11:39:46.211Z Last Updated: 2025-04-09T14:01:27.985Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Mendix SAML (Mendix 8 compatible), Mendix SAML (Mendix 9 compatible, New Track), Mendix SAML (Mendix 9 compatible, Upgrade Track) Problem Types: CWE-79 Description: A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.8). The affected module is vulnerabl
9), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.8). The affected module is vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-496604.pdf
CVE ID: CVE-2022-46824 State: PUBLISHED Published: 2022-12-08T17:37:52.175Z Last Updated: 2025-04-23T14:23:49.885Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-120 Description: In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46825 State: PUBLISHED Published: 2022-12-08T17:37:54.716Z Last Updated: 2025-04-23T14:23:30.467Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-200 Description: In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46826 State: PUBLISHED Published: 2022-12-08T17:37:56.568Z Last Updated: 2025-04-23T14:23:02.640Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-35 Description: In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46827 State: PUBLISHED Published: 2022-12-08T17:37:58.458Z Last Updated: 2025-04-22T18:07:59.925Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-611 Description: In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46828 State: PUBLISHED Published: 2022-12-08T17:37:59.846Z Last Updated: 2025-04-22T18:33:56.630Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-691 Description: In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46829 State: PUBLISHED Published: 2022-12-08T17:38:01.714Z Last Updated: 2025-04-23T14:22:42.082Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: JetBrains Products: JetBrains Gateway Problem Types: CWE-287 Description: In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46830 State: PUBLISHED Published: 2022-12-08T17:38:03.499Z Last Updated: 2025-04-23T14:22:12.749Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-918 Description: In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46831 State: PUBLISHED Published: 2022-12-08T17:38:04.997Z Last Updated: 2025-04-22T18:03:30.596Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: JetBrains Products: TeamCity Problem Types: CWE-453 Description: In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-46832 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T15:40:10.356Z Vendors: n/a Products: SICK RFU62x Firmware Problem Types: CWE-327 Description: Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt
CVE ID: CVE-2022-46833 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:30:31.109Z Vendors: n/a Products: SICK RFU63x Firmware Problem Types: CWE-327 Description: Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt