Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3292 State: PUBLISHED Published: 2022-09-28T20:15:13.000Z Last Updated: 2025-05-21T14:22:12.740Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-524 Description: Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d - https://github.com/ikus060/rdiffweb/commit/2406780831618405a13113377a784f3102465f40
CVE ID: CVE-2022-3293 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T15:39:25.307Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/369008 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3293.json
CVE ID: CVE-2022-3294 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T18:34:22.358Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-20 Description: Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug
ns to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server's private network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA - https://github.com/kubernetes/kubernetes/issues/113757 - https://security.netapp.com/advisory/ntap-20230505-0007/
CVE ID: CVE-2022-3295 State: PUBLISHED Published: 2022-09-26T12:20:10.000Z Last Updated: 2025-05-21T20:28:45.921Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233 - https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3
CVE ID: CVE-2022-3296 State: PUBLISHED Published: 2022-09-25T00:00:00.000Z Last Updated: 2025-05-22T14:14:10.613Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-121 Description: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/958866b8-526a-4979-9471-39392e0c9077 - https://github.com/vim/vim/commit/96b9bf8f74af8abf1e30054f996708db7dc285be - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3297 State: PUBLISHED Published: 2022-09-25T00:00:00.000Z Last Updated: 2025-05-21T19:40:02.377Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0579. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1aa9ec92-0355-4710-bf85-5bce9effa01c - https://github.com/vim/vim/commit/0ff01835a40f549c5c4a550502f62a2ac9ac447c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https://lists.fedor
archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3298 State: PUBLISHED Published: 2022-09-26T22:00:14.000Z Last Updated: 2025-05-21T15:33:10.100Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7 - https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5
CVE ID: CVE-2022-3299 State: PUBLISHED Published: 2022-09-26T12:40:11.000Z Last Updated: 2025-04-15T13:47:03.407Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of the patch is 724fa568435dae45ef0c3a48b2aabde052afae88. It is recommended to apply a patch to fix this issue. The identifier VDB-209545 was assi
5dae45ef0c3a48b2aabde052afae88. It is recommended to apply a patch to fix this issue. The identifier VDB-209545 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/open5gs/open5gs/issues/1769 - https://github.com/open5gs/open5gs/commit/724fa568435dae45ef0c3a48b2aabde052afae88 - https://vuldb.com/?id.209545
CVE ID: CVE-2022-3300 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T19:00:42.369Z Vendors: Unknown Products: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder Problem Types: CWE-89 Description: The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ddc9ed69-d942-4fad-bbf4-1be3b86460d9
CVE ID: CVE-2022-3301 State: PUBLISHED Published: 2022-09-26T11:10:09.000Z Last Updated: 2025-05-21T17:47:09.765Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-460 Description: Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a - https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e
CVE ID: CVE-2022-3302 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T19:02:36.088Z Vendors: Unknown Products: Spam protection, AntiSpam, FireWall by CleanTalk Problem Types: CWE-89 Description: The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1b5a018d-f2d4-4373-be1e-5162cc5c928b
CVE ID: CVE-2022-3303 State: PUBLISHED Published: 2022-09-27T00:00:00.000Z Last Updated: 2025-05-21T15:31:49.941Z Vendors: n/a Products: Linux kernel Problem Types: CWE-667 Description: A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8423f0b6d513b259fdab9c9
ent: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8423f0b6d513b259fdab9c9bf4aaa6188d054c2d - https://lore.kernel.org/all/CAFcO6XN7JDM4xSXGhtusQfS2mSBcx50VJKwQpCq=WeLt57aaZA%40mail.gmail.com/ - https://www.debian.org/security/2022/dsa-5257 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE ID: CVE-2022-3304 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T17:59:07.640Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1358907 - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE ID: CVE-2022-3305 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T16:26:48.446Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1319229
CVE ID: CVE-2022-3306 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T16:25:02.924Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1320139
CVE ID: CVE-2022-3307 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T16:20:30.984Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1323488
CVE ID: CVE-2022-3308 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T16:15:32.095Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1342722
CVE ID: CVE-2022-3309 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:37:08.458Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1348415
CVE ID: CVE-2022-3310 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:31:24.612Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1240065
CVE ID: CVE-2022-3311 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:07:06.509Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1302813
CVE ID: CVE-2022-3312 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:28:52.824Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1303306
CVE ID: CVE-2022-3313 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:16:01.456Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1317904
CVE ID: CVE-2022-3314 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:14:38.848Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1328708
CVE ID: CVE-2022-3315 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:07:06.413Z Vendors: Google Products: Chrome Problem Types: Type confusion Description: Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1322812
CVE ID: CVE-2022-3316 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:07:06.423Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1333623
CVE ID: CVE-2022-3317 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:07:06.495Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1300539
CVE ID: CVE-2022-3318 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:07:06.469Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1318791
CVE ID: CVE-2022-3320 State: PUBLISHED Published: 2022-10-28T09:30:17.600Z Last Updated: 2025-05-05T14:31:37.743Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L) Vendors: Cloudflare Products: WARP Problem Types: CWE-862 Description: It was possible to bypass policies configured for Zero Trust Secure Web Gateway by using warp-cli 'set-custom-endpoint' subcommand. Using this command with an unreachable endpoint caused the WARP Client to disconnect and allowed bypassing administrative restrictions on a Zero Trust enrolled endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf
CVE ID: CVE-2022-3321 State: PUBLISHED Published: 2022-10-28T09:24:40.799Z Last Updated: 2025-05-08T19:15:29.857Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L) Vendors: Cloudflare Products: WARP Problem Types: CWE-862 Description: It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch on the WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for Wi-Fi networks" switches at once in the application settings. Such configuration caused the WARP client to disconnect and allowed the user to bypass restrictions and policies enforc
Such configuration caused the WARP client to disconnect and allowed the user to bypass restrictions and policies enforced by the Zero Trust platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-4463-5p9m-3c78
CVE ID: CVE-2022-3322 State: PUBLISHED Published: 2022-10-28T09:25:55.997Z Last Updated: 2025-05-05T20:15:49.618Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L) Vendors: Cloudflare Products: WARP Problem Types: CWE-862 Description: Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by WARP iOS client, this feature could be bypassed by using the "Disable WARP" quick action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-76pg-rp9h-wmcj
CVE ID: CVE-2022-3323 State: PUBLISHED Published: 2022-09-27T13:51:02.000Z Last Updated: 2025-05-21T15:10:35.138Z Vendors: n/a Products: Advantech iView Problem Types: SQL Injection Description: An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password. Additional Analyst Notes: - CVE Prog
e, the attacker can exploit the vulnerability to retrieve the iView admin password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2022-32
CVE ID: CVE-2022-3324 State: PUBLISHED Published: 2022-09-27T00:00:00.000Z Last Updated: 2025-11-03T20:34:54.509Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-121 Description: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e414e55b-f332-491f-863b-c18dca97403c - https://github.com/vim/vim/commit/8279af514ca7e5fd3c31cf13b0864163d1a0bfeb - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/ - https://security.gentoo.org/glsa/202305-16