Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-23181 State: PUBLISHED Published: 2022-01-27T00:00:00 Last Updated: 2024-08-03T03:36:20.071Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-367 Description: The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thre
ions using the FileStore. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/l8x62p3k19yfcb208jo4zrb83k5mfwg9 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220217-0010/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00029.html - https://www.debian.org/security/2022/dsa-5265
CVE ID: CVE-2022-23182 State: PUBLISHED Published: 2022-08-18T19:52:50.000Z Last Updated: 2025-05-05T16:27:51.809Z Vendors: n/a Products: Intel(R) Data Center Manager software Problem Types: escalation of privilege Description: Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
CVE ID: CVE-2022-23183 State: PUBLISHED Published: 2022-03-31T07:20:54 Last Updated: 2024-08-03T03:36:20.034Z Vendors: Delicious Brains Products: Advanced Custom Fields Problem Types: Missing authorization Description: Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.advancedcustomfields.com/ - https://wordpress.org/plugins/advanced-custom-fields/ - https://jvn.jp/en/jp/JVN42543427/index.html
CVE ID: CVE-2022-23184 State: PUBLISHED Published: 2022-02-07T02:35:09 Last Updated: 2024-08-03T03:36:20.357Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Open Redirect Vulnerability in Octopus Server Description: In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/post/2022/sa2022-02/
CVE ID: CVE-2022-23186 State: PUBLISHED Published: 2022-02-16T16:38:17.739Z Last Updated: 2025-04-23T19:04:24.316Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-07.html
CVE ID: CVE-2022-23187 State: PUBLISHED Published: 2022-03-11T17:54:31.722Z Last Updated: 2025-04-23T18:54:59.631Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-120 Description: Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/securi
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-15.html
CVE ID: CVE-2022-23188 State: PUBLISHED Published: 2022-02-16T16:38:16.090Z Last Updated: 2025-04-23T19:04:36.095Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-120 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted malicious file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted malicious file in Illustrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
open a crafted malicious file in Illustrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-07.html
CVE ID: CVE-2022-23189 State: PUBLISHED Published: 2022-02-16T16:38:16.807Z Last Updated: 2025-04-23T19:04:30.140Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-476 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
action in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-07.html
CVE ID: CVE-2022-23190 State: PUBLISHED Published: 2022-02-16T16:38:19.263Z Last Updated: 2025-04-23T19:04:13.875Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-07.html
CVE ID: CVE-2022-23191 State: PUBLISHED Published: 2022-02-16T16:38:18.506Z Last Updated: 2025-04-23T19:04:19.037Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23192 State: PUBLISHED Published: 2022-02-16T16:38:15.306Z Last Updated: 2025-04-23T19:04:41.969Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23193 State: PUBLISHED Published: 2022-02-16T16:38:14.508Z Last Updated: 2025-04-23T19:04:48.263Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23194 State: PUBLISHED Published: 2022-02-16T16:38:20.097Z Last Updated: 2025-04-23T19:04:08.550Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23195 State: PUBLISHED Published: 2022-02-16T16:38:21.113Z Last Updated: 2025-04-23T19:04:02.721Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23196 State: PUBLISHED Published: 2022-02-16T16:38:22.123Z Last Updated: 2025-04-23T19:03:56.852Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23197 State: PUBLISHED Published: 2022-02-16T16:38:25.002Z Last Updated: 2025-04-23T19:03:38.805Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2022-23198 State: PUBLISHED Published: 2022-02-16T16:38:23.092Z Last Updated: 2025-04-23T19:03:51.268Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-476 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
CVE ID: CVE-2022-23199 State: PUBLISHED Published: 2022-02-16T16:38:24.024Z Last Updated: 2025-04-23T19:03:45.148Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-476 Description: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
CVE ID: CVE-2022-23200 State: PUBLISHED Published: 2022-02-16T16:38:27.600Z Last Updated: 2025-04-23T19:03:21.777Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-787 Description: Adobe After Effects versions 22.1.1 (and earlier) and 18.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb22-09.html - https://www.zerodayinitiative.com/advisories/ZDI-22-376/
CVE ID: CVE-2022-23201 State: PUBLISHED Published: 2022-07-15T15:46:28.500Z Last Updated: 2025-04-23T17:59:19.166Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: RoboHelp Problem Types: CWE-79 Description: Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/robohelp/apsb22-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/robohelp/apsb22-10.html
CVE ID: CVE-2022-23202 State: PUBLISHED Published: 2022-02-16T16:38:29.111Z Last Updated: 2025-04-23T19:03:15.470Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Creative Cloud (desktop component) Problem Types: CWE-427 Description: Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a malicious DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity
us DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity attack vector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/creative-cloud/apsb22-11.html
CVE ID: CVE-2022-23203 State: PUBLISHED Published: 2022-02-16T16:38:25.995Z Last Updated: 2025-04-23T19:03:32.855Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-120 Description: Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Photoshop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hel
file in Photoshop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-08.html
CVE ID: CVE-2022-23204 State: PUBLISHED Published: 2022-02-16T16:38:26.908Z Last Updated: 2025-04-23T19:03:27.196Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Premiere Rush Problem Types: CWE-125 Description: Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe
ious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_rush/apsb22-06.html
CVE ID: CVE-2022-23205 State: PUBLISHED Published: 2022-05-06T17:02:16.414Z Last Updated: 2025-04-23T18:29:21.716Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-787 Description: Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photosho
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-20.html
CVE ID: CVE-2022-23206 State: PUBLISHED Published: 2022-02-06T15:15:10 Last Updated: 2024-08-03T03:36:20.177Z Vendors: Apache Software Foundation Products: Apache Traffic Control Problem Types: CWE-918 Description: In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/lsrd2mqj29vrvwsh8g0d560vvz8n126f
CVE ID: CVE-2022-23218 State: PUBLISHED Published: 2022-01-14T00:00:00.000Z Last Updated: 2025-05-05T16:27:38.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=28768 - https://www.or
Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=28768 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.gentoo.org/glsa/202208-24 - https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
CVE ID: CVE-2022-23219 State: PUBLISHED Published: 2022-01-14T00:00:00.000Z Last Updated: 2025-05-05T16:27:25.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2022.html - https://sour
Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2022.html - https://sourceware.org/bugzilla/show_bug.cgi?id=22542 - https://security.gentoo.org/glsa/202208-24 - https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
CVE ID: CVE-2022-23220 State: PUBLISHED Published: 2022-01-21T00:00:00 Last Updated: 2024-08-03T03:36:20.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu, Debian, and Gentoo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gregkh/usbview/commit/bf374fa4e5b9a756789dfd88efa93806a395463b - https://www.openwall.com/lists/oss-security/2022/01/21/1 - htt
usbview/commit/bf374fa4e5b9a756789dfd88efa93806a395463b - https://www.openwall.com/lists/oss-security/2022/01/21/1 - https://www.debian.org/security/2022/dsa-5052 - http://www.openwall.com/lists/oss-security/2022/01/22/1 - https://security.gentoo.org/glsa/202310-15
CVE ID: CVE-2022-23221 State: PUBLISHED Published: 2022-01-19T00:00:00.000Z Last Updated: 2025-05-05T16:27:07.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h2database/h2database/security/advisories - http://seclists.org/fulldisclosure/2022/Jan/39 - https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html - https://www.d
ists.org/fulldisclosure/2022/Jan/39 - https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html - https://www.debian.org/security/2022/dsa-5076 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://github.com/h2database/h2database/releases/tag/version-2.1.210 - https://twitter.com/d0nkey_man/status/1483824727936450564 - http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20230818-0011/
CVE ID: CVE-2022-23222 State: PUBLISHED Published: 2022-01-14T00:00:00 Last Updated: 2024-08-03T03:36:20.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/01/13/1 - http://www.openwall.com/lists/oss-security/2022/01/14/1 - http://www.openwall.com/lists/oss-security/2022/01/18/2 - https://www.debian.org/security/2022/dsa-5050 - https://security.netapp.com/advisory/ntap-20220217-0002/ - h