Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ave been restricted to Project Maintainers, Group Owners, and above. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/374926 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3413.json
CVE ID: CVE-2022-3414 State: PUBLISHED Published: 2022-10-07T00:00:00.000Z Last Updated: 2025-04-15T13:46:23.454Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Web-Based Student Clearance System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210246 is t
is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210246 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jianshu.com/p/8f7b7b532c02 - https://vuldb.com/?id.210246
CVE ID: CVE-2022-3415 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:31:45.744Z Vendors: Unknown Products: Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back Problem Types: CWE-79 Description: The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/012c5b64-ef76-4539-afd8-40f6c329ae88
CVE ID: CVE-2022-3416 State: PUBLISHED Published: 2023-01-09T22:13:28.101Z Last Updated: 2025-04-09T19:14:07.353Z Vendors: Unknown Products: WPtouch Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f927dbe0-3939-4882-a469-1309ac737ee6
CVE ID: CVE-2022-3417 State: PUBLISHED Published: 2023-01-09T22:13:31.413Z Last Updated: 2025-04-09T19:09:23.184Z Vendors: Unknown Products: WPtouch Problem Types: CWE-502 Deserialization of Untrusted Data Description: The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import (intentionally or not) a malicious settings file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/55772932-eebd-475b-b5df-e80fab288ee5
CVE ID: CVE-2022-3418 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T20:44:44.308Z Vendors: Unknown Products: Import any XML or CSV File to WordPress Problem Types: CWE-94 Description: The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ccbb74f5-1b8f-4ea6-96bc-ddf62af7f94d
CVE ID: CVE-2022-3419 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T20:12:09.630Z Vendors: Unknown Products: Automatic User Roles Switcher Problem Types: CWE-269, CWE-352 Description: The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5909a423-9841-449c-a569-f687c609817b
CVE ID: CVE-2022-3420 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T20:09:54.364Z Vendors: Unknown Products: Official Integration for Billingo Problem Types: CWE-79 Description: The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ce5fac6e-8da1-4042-9cf8-7988613f92a5
CVE ID: CVE-2022-3421 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-04-21T13:47:49.429Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L) Vendors: Google LLC Products: Drive for Desktop MacOS Problem Types: CWE-264 Description: An attacker can pre-create the `/Applications/Google\ Drive.app/Contents/MacOS` directory which is expected to be owned by root to be owned by a non-root user. When the Drive for Desktop installer is run for the first time, it will place a binary in that directory with execute permissions and set its setuid bit. Since the attacker owns the directory, the attacker can replace the binary with a symlink, causing the instal
etuid bit. Since the attacker owns the directory, the attacker can replace the binary with a symlink, causing the installer to set the setuid bit on the symlink. When the symlink is executed, it will run with root permissions. We recommend upgrading past version 64.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.google.com/a/answer/7577057?hl=en
CVE ID: CVE-2022-3422 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T01:07:06.576Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: tooljet Products: tooljet/tooljet Problem Types: CWE-269 Description: Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/02da53ab-f613-4171-8766-96b31c671551 - https://github.com/tooljet/tooljet/commit/7879d8a76000c014533a97a22bc276afe3ae3e54
CVE ID: CVE-2022-3423 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T01:07:06.706Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H) Vendors: nocodb Products: nocodb/nocodb Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95 - https://huntr.dev/bounties/94639d8e-8301-4432-ab80-e76e1346e631
CVE ID: CVE-2022-3424 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T20:27:57.425Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2132640 - https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6
- https://bugzilla.redhat.com/show_bug.cgi?id=2132640 - https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc - https://lore.kernel.org/all/20221019031445.901570-1-zyytlz.wz%40163.com/ - https://www.spinics.net/lists/kernel/msg4518970.html - https://security.netapp.com/advisory/ntap-20230406-0005/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2022-3425 State: PUBLISHED Published: 2023-01-23T14:31:44.767Z Last Updated: 2025-04-02T15:33:54.549Z Vendors: Unknown Products: Analyticator Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/df1c36bb-9861-4272-89c9-ae76e62f687c
CVE ID: CVE-2022-3426 State: PUBLISHED Published: 2022-12-05T16:50:34.151Z Last Updated: 2025-04-24T13:21:26.780Z Vendors: Unknown Products: Advanced WP Columns Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Advanced WP Columns WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bc90594e-1018-494a-b473-6416e274c59f
CVE ID: CVE-2022-3427 State: PUBLISHED Published: 2022-12-15T04:02:40.319Z Last Updated: 2025-01-23T20:27:31.256Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: codepeople Products: Corner Ad Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56. This is due to missing or incorrect nonce validation on its corner_ad_settings_page function. This makes it possible for unauthenticated attackers to trigger the deletion of ads via forged request granted they can trick a site administrator into performing an action such as clicking
letion of ads via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a6c5e9a-754f-41c8-b27b-caa133b5070f - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2765630%40corner-ad%2Ftrunk&old=2719671%40corner-ad%2Ftrunk&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/browser/corner-ad/trunk/corner-ad.php?rev=2782613#L240
CVE ID: CVE-2022-3428 State: REJECTED Published: N/A Last Updated: 2024-07-02T16:16:11.786Z Description: No description available.
CVE ID: CVE-2022-3429 State: PUBLISHED Published: 2023-10-27T18:57:50.748Z Last Updated: 2024-09-09T19:33:08.586Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Printer GM265DN (production date June 2022 and before), Printer GM265DN (production date July 2022 and later), Printer GM266DNS, Printer G263DNS Problem Types: CWE-20 Description: A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly. Additional Analyst Notes: - CVE Program Containe
ses a display error and prevents the printer from functioning properly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/205041.html
CVE ID: CVE-2022-3430 State: PUBLISHED Published: 2023-01-23T16:11:41.102Z Last Updated: 2025-04-02T15:01:31.058Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-276 Description: A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-94952
CVE ID: CVE-2022-3431 State: PUBLISHED Published: 2023-10-09T18:18:54.016Z Last Updated: 2024-09-19T14:36:08.273Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-276 Description: A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-94952
CVE ID: CVE-2022-3432 State: PUBLISHED Published: 2023-01-23T16:27:12.970Z Last Updated: 2025-04-01T19:50:37.421Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-276 Description: A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-94952
CVE ID: CVE-2022-3433 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T01:07:06.587Z Vendors: n/a Products: aeson Problem Types: CWE-328 Description: The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://cs-syd.eu/posts/2021-09-11-json-vulnerability
CVE ID: CVE-2022-3434 State: PUBLISHED Published: 2022-10-08T00:00:00.000Z Last Updated: 2025-04-15T13:46:15.956Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Web-Based Student Clearance System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210356. Additional Anal
it has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210356. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jianshu.com/p/489bca847079 - https://vuldb.com/?id.210356
CVE ID: CVE-2022-3435 State: PUBLISHED Published: 2022-10-08T00:00:00.000Z Last Updated: 2025-04-15T13:46:07.987Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - C
ue. The identifier VDB-210357 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/netdev/20221005181257.8897-1-dsahern%40kernel.org/T/#u - https://vuldb.com/?id.210357 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ - https://lists.debian.org/debian-l
package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
CVE ID: CVE-2022-3436 State: PUBLISHED Published: 2022-10-09T00:00:00 Last Updated: 2024-08-03T01:07:06.643Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Web-Based Student Clearance System Problem Types: CWE-266 Description: A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367. Additional Analyst Notes: - CVE Program C
nched remotely. The associated identifier of this vulnerability is VDB-210367. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.210367 - http://packetstormsecurity.com/files/176007/Online-Student-Clearance-System-1.0-Shell-Upload.html
CVE ID: CVE-2022-3437 State: PUBLISHED Published: 2023-01-12T00:00:00 Last Updated: 2024-10-28T18:59:39.543Z Vendors: n/a Products: samba Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment:
application, possibly resulting in a denial of service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2137774 - https://www.samba.org/samba/security/CVE-2022-3437.html - https://access.redhat.com/security/cve/CVE-2022-3437 - http://www.openwall.com/lists/oss-security/2023/02/08/1 - https://security.netapp.com/advisory/ntap-20230216-0008/ - https://security.gentoo.org/glsa/202309-06 - https://security.gentoo.org/glsa/202310-06 - https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
CVE ID: CVE-2022-3438 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T01:07:06.543Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-601 Description: Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67 - https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7
CVE ID: CVE-2022-3439 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:36:36.521Z Severity: MEDIUM (CVSS 4.5 CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311 - https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7
CVE ID: CVE-2022-3440 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T20:09:09.143Z Vendors: Unknown Products: Rock Convert Problem Types: CWE-79 Description: The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present on a page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e39fcf30-1e69-4399-854c-4c5b6ccc22a2
CVE ID: CVE-2022-3441 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T20:06:09.088Z Vendors: Unknown Products: Rock Convert Problem Types: CWE-79 Description: The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7b51b1f0-17ca-46b7-ada1-20bd926f3023
CVE ID: CVE-2022-3442 State: PUBLISHED Published: 2022-10-10T00:00:00.000Z Last Updated: 2025-04-15T13:45:59.407Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Crealogix Products: EBICS Problem Types: CWE-707 Description: A vulnerability was found in Crealogix EBICS 7.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /ebics-server/ebics.aspx. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.1 is able to address this issue. It is recommended to upgrade the affected component. VDB-210374 is
rading to version 7.1 is able to address this issue. It is recommended to upgrade the affected component. VDB-210374 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pentagrid.ch/en/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/ - https://vuldb.com/?id.210374
CVE ID: CVE-2022-3443 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:07:06.577Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1243802 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L
1243802 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/