Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33024 State: PUBLISHED Published: 2022-06-22T13:33:29 Last Updated: 2024-08-03T07:54:03.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/492
CVE ID: CVE-2022-33025 State: PUBLISHED Published: 2022-06-22T13:33:34 Last Updated: 2024-08-03T07:54:03.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/487
CVE ID: CVE-2022-33026 State: PUBLISHED Published: 2022-06-22T13:33:30 Last Updated: 2024-08-03T07:54:03.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/484
CVE ID: CVE-2022-33027 State: PUBLISHED Published: 2022-06-22T13:33:32 Last Updated: 2024-08-03T07:54:03.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/490
CVE ID: CVE-2022-33028 State: PUBLISHED Published: 2022-06-22T13:33:33 Last Updated: 2024-08-03T07:54:03.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/489
CVE ID: CVE-2022-33032 State: PUBLISHED Published: 2022-06-22T13:33:36 Last Updated: 2024-08-03T07:54:03.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/488
CVE ID: CVE-2022-33033 State: PUBLISHED Published: 2022-06-22T13:33:37 Last Updated: 2024-08-03T07:54:03.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/493
CVE ID: CVE-2022-33034 State: PUBLISHED Published: 2022-06-22T13:33:38 Last Updated: 2024-08-03T07:54:03.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/494
CVE ID: CVE-2022-33035 State: PUBLISHED Published: 2022-06-29T12:25:23 Last Updated: 2024-08-03T07:54:03.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsarang.com/en/xlpd-update-history/ - https://github.com/ycdxsb/Vuln/blob/main/Xlpd-Unquoted-Service-Path/XLpd-Unquoted-Service-Path.md
CVE ID: CVE-2022-33036 State: PUBLISHED Published: 2022-06-29T12:25:24 Last Updated: 2024-08-03T07:54:03.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/blob/main/Embarcadero-Dev-Cpp-CreateProcessW-Misuse-Binary-Hijack/Embarcadero-Dev-Cpp-CreateProcessW-Misuse-Binary-Hijack.md
CVE ID: CVE-2022-33037 State: PUBLISHED Published: 2022-06-29T12:25:32 Last Updated: 2024-08-03T07:54:03.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/blob/main/Orwell-Dev-Cpp-CreateProcessA-Misuse-Binary-Hijack/Orwell-Dev-Cpp-CreateProcessA-Misuse-Binary-Hijack.md
CVE ID: CVE-2022-33042 State: PUBLISHED Published: 2022-06-29T16:52:05 Last Updated: 2024-08-03T07:54:03.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/view_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/736335151/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-1.md
CVE ID: CVE-2022-33043 State: PUBLISHED Published: 2022-06-30T12:13:06 Last Updated: 2024-08-03T07:54:03.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chen-jerry-php/vim/blob/main/core_tmp.md
CVE ID: CVE-2022-33047 State: PUBLISHED Published: 2022-07-06T18:17:52 Last Updated: 2024-08-03T08:01:19.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c. Additional Analyst Notes: - CVE Program Container: References: - http://otfcc.com - https://drive.google.com/file/d/1g3MQajVLZAaZMRfIQHSLT6XRw-B4Dmz8/view?usp=sharing
CVE ID: CVE-2022-33048 State: PUBLISHED Published: 2022-06-21T13:15:31 Last Updated: 2024-08-03T08:01:19.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/view_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-1.md
CVE ID: CVE-2022-33049 State: PUBLISHED Published: 2022-06-21T13:15:32 Last Updated: 2024-08-03T08:01:19.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-2.md
CVE ID: CVE-2022-33055 State: PUBLISHED Published: 2022-06-21T13:21:54 Last Updated: 2024-08-03T08:01:19.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/manage_train.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-3.md
CVE ID: CVE-2022-33056 State: PUBLISHED Published: 2022-06-21T13:21:55 Last Updated: 2024-08-03T08:01:19.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manage_schedule.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-4.md
CVE ID: CVE-2022-33057 State: PUBLISHED Published: 2022-06-29T17:05:06 Last Updated: 2024-08-03T08:01:19.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-5.md
CVE ID: CVE-2022-33058 State: PUBLISHED Published: 2022-06-29T17:05:07 Last Updated: 2024-08-03T08:01:18.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-6.md
CVE ID: CVE-2022-33059 State: PUBLISHED Published: 2022-06-29T17:05:08 Last Updated: 2024-08-03T08:01:18.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-7.md
CVE ID: CVE-2022-33060 State: PUBLISHED Published: 2022-06-29T17:18:13 Last Updated: 2024-08-03T08:01:20.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-8.md
CVE ID: CVE-2022-33061 State: PUBLISHED Published: 2022-06-29T17:18:13 Last Updated: 2024-08-03T08:01:19.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-9.md
CVE ID: CVE-2022-33064 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:23:53.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libsndfile/libsndfile/issues/832
CVE ID: CVE-2022-33065 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:23:22.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libsndfile/libsndfile/issues/833 - https://github.com/libsndfile/libsndfile/issues/789
CVE ID: CVE-2022-33067 State: PUBLISHED Published: 2022-06-22T13:24:41 Last Updated: 2024-08-03T08:01:19.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions get_magic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/224
CVE ID: CVE-2022-33068 State: PUBLISHED Published: 2022-06-22T13:24:42 Last Updated: 2024-08-03T08:01:19.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harfbuzz/harfbuzz/issues/3557 - https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FQBJ24W6TXLSAQWCFW7IBGUMX4AJI3S4/ - https://lists.fedoraproject.org/archiv
ge-announce%40lists.fedoraproject.org/message/FQBJ24W6TXLSAQWCFW7IBGUMX4AJI3S4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQMEXOVDL3T2UXKBCON7JSOCE646G7HG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56WTC5IY4EIUHVUIHMCXA3BSBZLSZCI/ - https://security.gentoo.org/glsa/202209-11
CVE ID: CVE-2022-33069 State: PUBLISHED Published: 2022-06-22T13:24:43 Last Updated: 2024-08-03T08:01:19.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment() at SMTEncoder.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ethereum/solidity/issues/12973
CVE ID: CVE-2022-33070 State: PUBLISHED Published: 2022-06-22T13:24:44 Last Updated: 2024-08-03T08:01:19.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/protobuf-c/protobuf-c/issues/506 - https://github.com/protobuf-c/protobuf-c/pull/508 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFN2GHUEGTSHRD7J5PKQ5DRSJSE
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFN2GHUEGTSHRD7J5PKQ5DRSJSEQ2IKN/
CVE ID: CVE-2022-33075 State: PUBLISHED Published: 2022-07-05T17:33:42 Last Updated: 2024-08-03T08:01:19.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourcecodester.com - http://zoo.com - https://packetstormsecurity.com/files/167603/Zoo-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2022-33077 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:27:15.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nopcommerce.com - https://medium.com/%40rohan_pagey/cve-2022-33077-idor-to-change-address-of-any-customer-via-parameter-pollution-in-nopcommerce-4-5-2fa4bc763cc6
CVE ID: CVE-2022-33082 State: PUBLISHED Published: 2022-06-30T21:50:11 Last Updated: 2024-08-03T08:01:19.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/open-policy-agent/opa/blob/598176de326025451025225aca53e85708d5f1db/ast/compile.go#L1224
CVE ID: CVE-2022-33085 State: PUBLISHED Published: 2022-06-30T22:12:31 Last Updated: 2024-08-03T08:01:19.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_public\espcms_templates\ESPCMS_Templates. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JeakinsCheung/ESPCMS-P8/blob/66fcc7f0fcc4d2325c0e31c9668f4c3362f0c06f/Arbitrary%20code%20execution%20vulnerability%20exists%20in%20ESPCMS%20management%20system.md
CVE ID: CVE-2022-33087 State: PUBLISHED Published: 2022-06-30T22:27:55 Last Updated: 2024-08-03T08:01:19.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cilan2/iot/blob/main/4.md
CVE ID: CVE-2022-33092 State: PUBLISHED Published: 2022-06-22T18:42:09 Last Updated: 2024-08-03T08:01:19.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/index. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/6
CVE ID: CVE-2022-33093 State: PUBLISHED Published: 2022-06-22T18:42:09 Last Updated: 2024-08-03T08:01:19.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resume_list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/8
CVE ID: CVE-2022-33094 State: PUBLISHED Published: 2022-06-22T18:42:10 Last Updated: 2024-08-03T08:01:19.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/4
CVE ID: CVE-2022-33095 State: PUBLISHED Published: 2022-06-22T18:42:13 Last Updated: 2024-08-03T08:01:19.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/5
CVE ID: CVE-2022-33096 State: PUBLISHED Published: 2022-06-22T18:42:13 Last Updated: 2024-08-03T08:01:20.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/resume/index. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/9
CVE ID: CVE-2022-33097 State: PUBLISHED Published: 2022-06-22T18:42:14 Last Updated: 2024-08-03T08:01:19.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/campus/campus_job. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/7
CVE ID: CVE-2022-33098 State: PUBLISHED Published: 2022-07-07T18:58:53 Last Updated: 2024-08-03T08:01:19.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - http://magnolia.com
CVE ID: CVE-2022-33099 State: PUBLISHED Published: 2022-07-01T11:26:38 Last Updated: 2024-08-03T08:01:20.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf - https://lua-users.org/lists/lua-l/2022-05/msg00035.html - https://lua-users.org/lists/lua-l/2022-05/msg00042.html - https://lua-users.org/lists/lua-l/2022-05/msg00073.html - https://www.lua.org/bugs.html#Lua-stack%20overflow%20when%20C%20stack%20overflows%20whil
s/lua-l/2022-05/msg00073.html - https://www.lua.org/bugs.html#Lua-stack%20overflow%20when%20C%20stack%20overflows%20while%20handling%20an%20error:~:text=Lua-stack%20overflow%20when%20C%20stack%20overflows%20while%20handling%20an%20error - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHYZOEFDVLVAD6EEP4CDW6DNONIVVHPA/
CVE ID: CVE-2022-33103 State: PUBLISHED Published: 2022-07-01T11:36:55.000Z Last Updated: 2025-11-03T19:27:06.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir(). Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/CALO=DHFB+yBoXxVr5KcsK0iFdg+e7ywko4-e+72kjbcS8JBfPw%40mail.gmail.com/ - https://lore.kernel.org/all/20220609140206.297405-1-miquel.raynal%40bootlin.com/
CVE ID: CVE-2022-33105 State: PUBLISHED Published: 2022-06-22T13:13:56 Last Updated: 2024-08-03T08:01:19.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/redis/commit/4a7a4e42db8ff757cdf3f4a824f66426036034ef - https://github.com/redis/redis/pull/10753 - https://raw.githubusercontent.com/redis/redis/7.0.1/00-RELEASENOTES - https://github.com/redis/redis/pull/10829 - https://security.netapp.com/advisory/ntap-20220729-0005/ - https://security.gentoo.org/glsa/202209-17
CVE ID: CVE-2022-33106 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-16T13:42:07.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://wijungle.com - https://hexisanoob.gitbook.io/hexisanoob/cves/cve-2022-33106
CVE ID: CVE-2022-33107 State: PUBLISHED Published: 2022-06-29T11:38:41 Last Updated: 2024-08-03T08:01:19.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/top-think/framework/issues/2717
CVE ID: CVE-2022-33108 State: PUBLISHED Published: 2022-06-28T16:59:18 Last Updated: 2024-08-03T08:01:19.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42287 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42286 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42284