Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0364 State: PUBLISHED Published: 2022-03-21T18:55:43 Last Updated: 2024-08-02T23:25:40.524Z Vendors: Unknown Products: Modern Events Calendar Lite Problem Types: CWE-79 Description: The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0eb40cd5-838e-4b53-994d-22cf7c8a6c50
CVE ID: CVE-2022-0365 State: PUBLISHED Published: 2022-02-04T22:29:28.772Z Last Updated: 2025-04-16T16:46:22.522Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Ricon Products: Industrial Cellular Router Problem Types: CWE-78 Description: The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-032-01
CVE ID: CVE-2022-0366 State: PUBLISHED Published: 2022-02-02T11:31:20 Last Updated: 2024-08-02T23:25:40.563Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-console-sqli
CVE ID: CVE-2022-0367 State: PUBLISHED Published: 2022-08-29T14:03:05.000Z Last Updated: 2025-11-03T20:34:24.383Z Vendors: n/a Products: libmodbus Problem Types: CWE-119 Description: A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stephane/libmodbus/issues/614 - https://bugzilla.redhat.com/show_bug.cgi?id=2045571 - https://github.com/stephane/libmodbus/commit/b4ef4c17d618eba0adccc4c7d9e9a1ef809fc9b6 - https://lists.debian.org/debian-lts-announce/2022/09/msg00007.html
CVE ID: CVE-2022-0368 State: PUBLISHED Published: 2022-01-26T00:00:00 Last Updated: 2024-08-02T23:25:40.203Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bca9ce1f-400a-4bf9-9207-3f3187cb3fa9 - https://github.com/vim/vim/commit/8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baa - https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213444 - https://support.apple.com/k
.html - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213444 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - http://seclists.org/fulldisclosure/2022/Oct/43 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2022-0369 State: PUBLISHED Published: 2024-05-07T22:54:55.247Z Last Updated: 2024-08-02T23:25:40.264Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Triangle MicroWorks Products: SCADA Data Gateway Problem Types: CWE-22 Description: Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Restore Work
s vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Restore Workspace feature. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17227. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-450/
CVE ID: CVE-2022-0370 State: PUBLISHED Published: 2022-01-27T05:55:09 Last Updated: 2024-08-02T23:25:40.269Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fbe4b376-57ce-42cd-a9a9-049c4099b3ca - https://github.com/livehelperchat/livehelperchat/commit/9f5bc33c943349bd765b991db0b7f6b6ef05cfdb
CVE ID: CVE-2022-0371 State: PUBLISHED Published: 2022-03-28T18:53:01 Last Updated: 2024-08-02T23:25:40.560Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitLab search may allow authenticated users to search other users by their respective private emails even if a user set their email to private. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gi
user set their email to private. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/350476 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0371.json
CVE ID: CVE-2022-0372 State: PUBLISHED Published: 2022-01-27T07:35:10 Last Updated: 2024-08-02T23:25:40.244Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: crater-invoice Products: crater-invoice/crater Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/crater-invoice/crater/commit/cdc913d16cf624aee852bc9163a7c6ffc8d1da9d - https://huntr.dev/bounties/563232b9-5a93-4f4d-8389-ed805b262ef1
CVE ID: CVE-2022-0373 State: PUBLISHED Published: 2022-04-01T22:17:37 Last Updated: 2024-08-02T23:25:40.164Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/349881 - https://hackerone.com/reports/1439254 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0373.json
CVE ID: CVE-2022-0374 State: PUBLISHED Published: 2022-01-26T09:15:11 Last Updated: 2024-08-02T23:25:40.539Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f8b560a6-aa19-4262-8ae4-cf88204310ef - https://github.com/livehelperchat/livehelperchat/commit/bbfaa26ce54a2a86ce1a42a16496038f5bdfc102
CVE ID: CVE-2022-0375 State: PUBLISHED Published: 2022-01-26T09:30:10 Last Updated: 2024-08-02T23:25:40.238Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/livehelperchat/livehelperchat/commit/bbfaa26ce54a2a86ce1a42a16496038f5bdfc102 - https://huntr.dev/bounties/28e1c356-6eaa-4d93-af56-938e3b4d40a7
CVE ID: CVE-2022-0376 State: PUBLISHED Published: 2022-05-30T08:35:34 Last Updated: 2024-08-02T23:25:40.272Z Vendors: Unknown Products: User Meta – User Profile Builder and User management plugin Problem Types: CWE-79 Description: The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels before outputting them in the admin dashboard when editing a form, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a3ca2ed4-11ea-4d78-aa4c-4ed58f258932
CVE ID: CVE-2022-0377 State: PUBLISHED Published: 2022-02-28T09:06:50 Last Updated: 2024-08-02T23:25:40.554Z Vendors: Unknown Products: LearnPress Problem Types: CWE-327 Use of a Broken or Risky Cryptographic Algorithm Description: Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request, the name of the user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image is JPG or PNG
user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image is JPG or PNG. An attacker can use this vulnerability in order to rename an arbitrary image file. By doing this, they could destroy the design of the web site. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0d95ada6-53e3-4a80-a395-eacd7b090f26 - https://bozogullarindan.com/en/2022/01/wordpress-learnpress-plugin-4.1.4.1-arbitrary-image-renaming/ - https://github.com/LearnPress/learnpress/commit/d1dc4af7ef2950f1000abc21bd9520fb3eb98faf
CVE ID: CVE-2022-0378 State: PUBLISHED Published: 2022-01-26T15:25:16 Last Updated: 2024-08-02T23:25:40.237Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/529b65c0-5be7-49d4-9419-f905b8153d31 - https://github.com/microweber/microweber/commit/fc7e1a026735b93f0e0047700d08c44954fce9ce
CVE ID: CVE-2022-0379 State: PUBLISHED Published: 2022-01-26T15:25:10 Last Updated: 2024-08-02T23:25:40.536Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/933f94b8-c5e7-4c3a-92e0-4d1577d5fee6 - https://github.com/microweber/microweber/commit/f017cbfbd5c4f097d2c78c5e15b6c8a9da479d7b
CVE ID: CVE-2022-0380 State: PUBLISHED Published: 2022-02-04T22:29:24.000Z Last Updated: 2025-02-10T14:54:33.832Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Fotobook Products: Fotobook Problem Types: CWE-79 Description: The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 3.2.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-20
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-03801 - https://plugins.trac.wordpress.org/browser/fotobook/tags/3.2.3/options-fotobook.php#L128
CVE ID: CVE-2022-0381 State: PUBLISHED Published: 2022-02-04T22:29:25.000Z Last Updated: 2025-02-10T14:54:18.160Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Embed Swagger Products: Embed Swagger Problem Types: CWE-79 Description: The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 1.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulne
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0381 - https://gist.github.com/Xib3rR4dAr/4b3ea7960914e23c3a875b973a5b37a3 - https://plugins.trac.wordpress.org/browser/embed-swagger/trunk/swagger-iframe.php#L59
CVE ID: CVE-2022-0382 State: PUBLISHED Published: 2022-02-11T00:00:00 Last Updated: 2024-08-02T23:25:40.604Z Vendors: n/a Products: kernel Problem Types: CWE-909 Description: An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d6d86830705f173fca6087a3e67cea
st Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d6d86830705f173fca6087a3e67ceaf68db80523
CVE ID: CVE-2022-0383 State: PUBLISHED Published: 2022-02-28T09:06:51 Last Updated: 2024-08-02T23:25:40.563Z Vendors: Unknown Products: WP Review Slider Problem Types: CWE-89 Description: The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e0402753-3a80-455b-9fab-a7d2a7687193 - https://plugins.trac.wordpress.org/changeset/2666513
CVE ID: CVE-2022-0384 State: PUBLISHED Published: 2022-03-07T08:16:29 Last Updated: 2024-08-02T23:25:40.210Z Vendors: Unknown Products: Video Conferencing with Zoom Problem Types: CWE-200 Description: The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/91c44c45-994b-4aed-b9f9-7db45924eeb4 - https://plugins.trac.wordpress.org/changeset/2671219
CVE ID: CVE-2022-0385 State: PUBLISHED Published: 2022-02-28T09:06:53 Last Updated: 2024-08-02T23:25:40.210Z Vendors: Unknown Products: Crazy Bone Problem Types: CWE-79 Description: The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/60067b8b-9fa5-40d1-817a-929779947891
CVE ID: CVE-2022-0386 State: PUBLISHED Published: 2022-03-21T23:45:14 Last Updated: 2024-08-02T23:25:40.274Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Sophos Products: Sophos UTM Problem Types: n/a Description: A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220321-utm-9710
CVE ID: CVE-2022-0387 State: PUBLISHED Published: 2022-01-27T05:20:09 Last Updated: 2024-08-02T23:25:40.561Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2e09035b-8f98-4930-b7e8-7abe5f722b98 - https://github.com/livehelperchat/livehelperchat/commit/ff70c7dd641b68b9afb170b89ec1ef003a4e3444
CVE ID: CVE-2022-0388 State: PUBLISHED Published: 2022-03-28T17:22:42 Last Updated: 2024-08-02T23:25:40.406Z Vendors: Unknown Products: Interactive Medical Drawing of Human Body Problem Types: CWE-79 Description: The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7d4ad1f3-6d27-4655-9796-ce370ef5fced
CVE ID: CVE-2022-0389 State: PUBLISHED Published: 2022-03-07T08:16:30 Last Updated: 2024-08-02T23:25:40.399Z Vendors: Unknown Products: WP Time Slots Booking Form Problem Types: CWE-79 Description: The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/788ead78-9aa2-49a3-b191-12114be8270b
CVE ID: CVE-2022-0390 State: PUBLISHED Published: 2022-04-01T22:17:36 Last Updated: 2024-08-02T23:25:40.347Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details when it was linked to an item from the vulnerability dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/330030 - https://hackerone.com/reports/1179733 - https://gitlab.com/gitlab-org/cves/-/blob
om/gitlab-org/gitlab/-/issues/330030 - https://hackerone.com/reports/1179733 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0390.json
CVE ID: CVE-2022-0391 State: PUBLISHED Published: 2022-02-09T00:00:00.000Z Last Updated: 2025-11-03T21:45:36.139Z Vendors: n/a Products: python Problem Types: CWE-74 Description: A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14. Additional Analyst Notes: - CVE Program Container: References: - https://
to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue43882 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220225-0009/ - https://security.gentoo.org/glsa/202305-02 - https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
CVE ID: CVE-2022-0392 State: PUBLISHED Published: 2022-01-28T00:00:00.000Z Last Updated: 2025-11-03T20:34:27.304Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d00a2acd-1935-4195-9d5b-4115ef6b3126 - https://github.com/vim/vim/commit/806d037671e133bd28a7864248763f643967973a - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213444 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41
/support.apple.com/kb/HT213444 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - http://seclists.org/fulldisclosure/2022/Oct/43 - https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html
CVE ID: CVE-2022-0393 State: PUBLISHED Published: 2022-01-28T21:30:26 Last Updated: 2024-08-02T23:25:40.452Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ecc8f488-01a0-477f-848f-e30b8e524bba - https://github.com/vim/vim/commit/a4bc2dd7cccf5a4a9f78b58b6f35a45d17164323 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/ - https://lists.fedoraproject.org/archives/list/pack
40lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/ - https://security.gentoo.org/glsa/202208-32
CVE ID: CVE-2022-0394 State: PUBLISHED Published: 2022-01-28T10:16:27.000Z Last Updated: 2025-06-09T15:00:58.653Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e13823d0-271c-448b-a0c5-8549ea7ea272 - https://github.com/livehelperchat/livehelperchat/commit/d7b85466c217b3750eaccc8703ce54ba8785c4d3
CVE ID: CVE-2022-0395 State: PUBLISHED Published: 2022-01-28T21:31:31 Last Updated: 2024-08-02T23:25:40.326Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/36abbd6e-239e-4739-8c77-ba212b946a4a - https://github.com/livehelperchat/livehelperchat/commit/8fdb4f67ac1a095331aa0fb4630ef9dfe8e75dcb