Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/protocolbuffers/protobuf/commit/db7c17803320525722f45c1d26fc08bc41d1bf48
CVE ID: CVE-2022-3511 State: PUBLISHED Published: 2022-11-28T13:47:23.952Z Last Updated: 2025-04-25T20:00:55.736Z Vendors: Unknown Products: Awesome Support Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request, allowing a low privileged user, such as subscriber to download arbitrary exported tickets via an IDOR vector Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9e57285a-0023-4711-874c-6e7b3c2673d1
CVE ID: CVE-2022-3512 State: PUBLISHED Published: 2022-10-28T09:22:08.121Z Last Updated: 2025-05-06T19:36:53.722Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L) Vendors: Cloudflare Products: WARP Problem Types: CWE-862 Description: Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf
CVE ID: CVE-2022-3513 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-11T16:12:28.033Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted
eflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377970 - https://hackerone.com/reports/1728015 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3513.json
CVE ID: CVE-2022-3514 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T15:55:39.078Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in the submodule URL parser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
he submodule URL parser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377978 - https://hackerone.com/reports/1727201 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3514.json
CVE ID: CVE-2022-3515 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T15:48:31.667Z Vendors: n/a Products: libksba Problem Types: CWE-190 Description: A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2135610 - https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html - https://dev.gnupg.org/rK4b7d9cd4
show_bug.cgi?id=2135610 - https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html - https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b - https://access.redhat.com/security/cve/CVE-2022-3515 - https://security.netapp.com/advisory/ntap-20230706-0008/
CVE ID: CVE-2022-3516 State: PUBLISHED Published: 2022-11-20T00:00:00.000Z Last Updated: 2025-04-25T20:38:08.863Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c - https://huntr.dev/bounties/734bb5eb-715c-4b64-bd33-280300a63748
CVE ID: CVE-2022-3517 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T13:41:10.565Z Vendors: n/a Products: minimatch Problem Types: CWE-400 Description: A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6 - https://github.com/grafana/grafana-image-renderer/issues/329 - https://lists.debian.org/debian-lts-announce/2023/01/msg00011.htm
github.com/grafana/grafana-image-renderer/issues/329 - https://lists.debian.org/debian-lts-announce/2023/01/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/
CVE ID: CVE-2022-3518 State: PUBLISHED Published: 2022-10-15T00:00:00.000Z Last Updated: 2025-04-15T13:44:41.148Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component User Creation Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-211014 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to launch the attack remotely. VDB-211014 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.211014 - https://github.com/lohith19/CVE-2022-3518/blob/main/POC
CVE ID: CVE-2022-3519 State: PUBLISHED Published: 2022-10-15T00:00:00.000Z Last Updated: 2025-04-15T13:44:29.888Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-707 Description: A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-211015. Additional Analyst Notes: - CVE Pr
be launched remotely. The associated identifier of this vulnerability is VDB-211015. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.211015
CVE ID: CVE-2022-3520 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-23T18:32:44.163Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c1db3b70-f4fe-481f-8a24-0b1449c94246 - https://github.com/vim/vim/commit/36343ae0fb7247e060abfd35fb8e4337b33abb4b - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3521 State: PUBLISHED Published: 2022-10-16T00:00:00.000Z Last Updated: 2025-04-15T13:44:23.128Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-362 Description: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.
erability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec7eede369fe5b0d085ac51fdbb95184f87bfc6c - https://vuldb.com/?id.211018 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-3522 State: REJECTED Published: N/A Last Updated: 2023-01-24T00:00:00 Description: No description available.
CVE ID: CVE-2022-3523 State: PUBLISHED Published: 2022-10-16T00:00:00.000Z Last Updated: 2025-04-15T13:44:14.454Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
er of this vulnerability is VDB-211020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=16ce101db85db694a91380aa4c89b25530871d33 - https://vuldb.com/?id.211020
CVE ID: CVE-2022-3524 State: PUBLISHED Published: 2022-10-16T00:00:00.000Z Last Updated: 2025-04-15T13:44:06.029Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
-211021 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c52c6bb831f6335c176a0fc7214e26f43adbd11 - https://vuldb.com/?id.211021 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-3525 State: PUBLISHED Published: 2022-11-20T00:00:00.000Z Last Updated: 2025-04-24T20:14:53.750Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-502 Description: Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ed048e8d-87af-440a-a91f-be1e65a40330 - https://github.com/librenms/librenms/commit/ae3925b09ad3c5d0f7a9d5a26ae2f2f778834948
CVE ID: CVE-2022-3526 State: PUBLISHED Published: 2022-10-16T00:00:00.000Z Last Updated: 2025-04-14T15:58:29.131Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
tifier of this vulnerability is VDB-211024. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=e16b859872b87650bb55b12cca5a5fcdc49c1442 - https://vuldb.com/?id.211024
CVE ID: CVE-2022-3527 State: REJECTED Published: 2022-10-16T18:25:18.022Z Last Updated: 2025-02-13T15:46:29.689Z Description: No description available.
CVE ID: CVE-2022-3528 State: REJECTED Published: N/A Last Updated: 2022-10-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-3529 State: REJECTED Published: N/A Last Updated: 2022-10-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-3530 State: REJECTED Published: N/A Last Updated: 2022-10-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-3531 State: REJECTED Published: N/A Last Updated: 2022-12-17T00:00:00 Description: No description available.
CVE ID: CVE-2022-3532 State: REJECTED Published: N/A Last Updated: 2022-12-17T00:00:00 Description: No description available.
CVE ID: CVE-2022-3533 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-04-15T13:43:54.567Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_arg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument reg_name leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211031. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
is vulnerability is VDB-211031. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=0dc9254e03704c75f2ebc9cbef2ce4de83fba603 - https://vuldb.com/?id.211031
CVE ID: CVE-2022-3534 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-11-03T19:27:10.646Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93c660ca40b5d2f7c1b1626e955a8e9fa30e0749 - https://vuldb.com/?id.211032
CVE ID: CVE-2022-3535 State: REJECTED Published: N/A Last Updated: 2022-12-21T00:00:00 Description: No description available.
CVE ID: CVE-2022-3536 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T19:26:42.686Z Vendors: Unknown Products: Role Based Pricing for WooCommerce Problem Types: CWE-502, CWE-352 Description: The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization attacks when they can upload a file, and a suitable gadget chain is present on the blog Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6af63aab-b
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6af63aab-b7a6-4ef6-8604-4b4b99467a34
CVE ID: CVE-2022-3537 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T19:25:31.411Z Vendors: Unknown Products: Role Based Pricing for WooCommerce Problem Types: CWE-434, CWE-352 Description: The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/696868f7-409d-422d-87f4-92fc6bf6e74e
CVE ID: CVE-2022-3538 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:33:06.336Z Vendors: Unknown Products: Webmaster Tools Verification Problem Types: CWE-862, CWE-352 Description: The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/337ee7ed-9ade-4567-b976-88386cbcf036
CVE ID: CVE-2022-3539 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:31:27.984Z Vendors: Unknown Products: Testimonials, Testimonial Pro Problem Types: CWE-79 Description: The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ab3b0052-1a74-4ba3-b6d2-78cfe56029db
CVE ID: CVE-2022-3540 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T13:56:30.468Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: The hunter2 Contributors Products: hunter2 Problem Types: Information exposure in hunter2 Description: An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input allows an authenticated attacker to extract other users email addresses Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/hunter2.app/hunter2/-/issues/529 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-35
https://gitlab.com/hunter2.app/hunter2/-/issues/529 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3540.json
CVE ID: CVE-2022-3541 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-04-15T13:43:37.165Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_address of the file drivers/net/ethernet/sunplus/spl2sw_driver.c of the component BPF. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211041 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
1 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=12aece8b01507a2d357a1861f470e83621fbb6f2 - https://vuldb.com/?id.211041 - https://security.netapp.com/advisory/ntap-20221228-0001/
CVE ID: CVE-2022-3542 State: REJECTED Published: N/A Last Updated: 2022-12-21T00:00:00 Description: No description available.
CVE ID: CVE-2022-3543 State: PUBLISHED Published: 2022-10-17T00:00:00 Last Updated: 2024-08-03T01:14:02.530Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unix_sock_destructor/unix_release_sock of the file net/unix/af_unix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211043. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org
his vulnerability is VDB-211043. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=7a62ed61367b8fd01bae1e18e30602c25060d824 - https://vuldb.com/?id.211043
CVE ID: CVE-2022-3544 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-04-15T13:43:27.007Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damon_sysfs_add_target of the file mm/damon/sysfs.c of the component Netfilter. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211044. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/
4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git/commit/?id=1c8e2349f2d033f634d046063b704b2ca6c46972 - https://vuldb.com/?id.211044
CVE ID: CVE-2022-3545 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-04-15T13:43:19.382Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA
The identifier VDB-211045 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a - https://vuldb.com/?id.211045 - https://security.netapp.com/advisory/ntap-20221223-0003/ - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html