Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44244 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T18:02:05.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cai-niao98/lin-cms/ - https://gist.github.com/cai-niao98/58c97899695488bd73a73d56adf44c4c
CVE ID: CVE-2022-44249 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:18:18.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-command-injection-UploadFirmwareFile-f006f70e9e6540529d262a8d34154d24
CVE ID: CVE-2022-44250 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:17:23.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-command-injection-setOpModeCfg-7133dfcdeb9c4dfb87d9b5f4490b9a07
CVE ID: CVE-2022-44251 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:16:09.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-command-injection-setUssd-f25d6489a0e44468bf455e7af1173fdb
CVE ID: CVE-2022-44252 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:14:59.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-command-injection-setUploadSetting-b6d3012a3c2f43adac79c44edd57c937
CVE ID: CVE-2022-44253 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:13:47.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setDiagnosisCfg-bdae239f42e64a48a57b070b5bf17456
CVE ID: CVE-2022-44254 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:11:36.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setSmsCfg-fd30228720dc4119911ed0b31c7c26c7
CVE ID: CVE-2022-44255 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:09:51.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-main-pre-authentication-9475d39331cd4d8bae67c8560ce279b7
CVE ID: CVE-2022-44256 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:08:15.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setLanguageCfg-ddd638b9bb2d4c72b8dba5125c293141
CVE ID: CVE-2022-44257 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:06:46.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setOpModeCfg-9dc3504e403f445b85d5db09176ac406
CVE ID: CVE-2022-44258 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:03:38.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setTracerouteCfg-cca08814d6b24733ade00b2dae1d4c1a
CVE ID: CVE-2022-44259 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:01:11.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setParentalRules-fe0c0cc8b9bd44b48c527f76e69d402a
CVE ID: CVE-2022-44260 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T19:57:38.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/LR350-bof-setIpPortFilterRules-0fad7347f4d74a919a79f5745a8c5421
CVE ID: CVE-2022-44261 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:09:17.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/AveryDennison/tree/main/AveryDennison_MonarchM9855_XSS - https://github.com/IthacaLabs/AveryDennison/blob/main/AveryDennison_MonarchM9855_XSS/AveryDennison_MonarchM9855_XSS_CVE-2022-44261.txt
CVE ID: CVE-2022-44262 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-29T14:27:44.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ff4j/ff4j/issues/624
CVE ID: CVE-2022-44263 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T17:35:30.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dentsply Sirona Sidexis <= 4.3 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://twitter.com/obikenobi1/status/1618149448919699458?cxt=HHwWhMDShbeW6fQsAAAA - https://www.chairi.it/cve/CVE-2022-44263.txt
CVE ID: CVE-2022-44264 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T17:34:23.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://twitter.com/obikenobi1/status/1618149448919699458?cxt=HHwWhMDShbeW6fQsAAAA - https://www.chairi.it/cve/CVE-2022-44264.txt
CVE ID: CVE-2022-44267 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T14:26:23.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://imagemagick.org/ - https://www.metabaseq.com/imagemagick-zero-days/ - https://www.debian.org/security/2023/dsa-5347 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV/ - https://lists.
.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2022-44268 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T14:22:26.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://imagemagick.org/ - https://www.metabaseq.com/imagemagick-zero-days/ - https://www.debian.org/security/2023/dsa-5347 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedor
s://www.debian.org/security/2023/dsa-5347 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html - http://packetstormsecurity.com/files/171727/ImageMagick-7.1.0-48-Arbitrary-File-Read.html
CVE ID: CVE-2022-44276 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T16:52:12.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HerrLeStrate/CVE-2022-44276-PoC
CVE ID: CVE-2022-44277 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:22:16.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llwyx200113/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md
CVE ID: CVE-2022-44278 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T19:55:22.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Onetpaer/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md
CVE ID: CVE-2022-44279 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T15:33:36.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Onetpaer/bug_report/blob/main/vendors/mayuri_k/garage-management-system/xss1.md
CVE ID: CVE-2022-44280 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T19:54:01.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Onetpaer/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/delete-1.md
CVE ID: CVE-2022-44283 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-25T19:52:11.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVS Audio Converter 10.3 is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/169427/AVS-Audio-Converter-10.3-Stack-Overflow.html
CVE ID: CVE-2022-44284 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-25T19:53:22.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/169531/Dinstar-FXO-Analog-VoIP-Gateway-DAG2000-16O-Cross-Site-Scripting.html
CVE ID: CVE-2022-44289 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:34:05.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/top-think/framework/issues/2772
CVE ID: CVE-2022-44290 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:20:39.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/2
CVE ID: CVE-2022-44291 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:20:00.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/1
CVE ID: CVE-2022-44294 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:36:07.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Distance10086/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-3.md
CVE ID: CVE-2022-44295 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:33:32.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Distance10086/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md
CVE ID: CVE-2022-44296 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:32:35.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Distance10086/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-2.md
CVE ID: CVE-2022-44297 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T17:24:19.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/siteserver/cms/issues/3490
CVE ID: CVE-2022-44298 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T14:49:00.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SiteServer CMS 7.1.3 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/siteserver/cms/issues/3492
CVE ID: CVE-2022-44299 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T14:40:14.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SiteServerCMS 7.1.3 sscms has a file read vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/siteserver/cms/issues/3491
CVE ID: CVE-2022-44303 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T15:07:46.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedule_job}" or "args" parameter in /resque/delayed/jobs/{schedule_job}?args={args_id} to execute javascript at client side. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://resque.com - https://trungvm.gitbook.io/cves/resque/resque-1.27.4-multiple-reflected-xss-in-resque-schedule-job
CVE ID: CVE-2022-44310 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T15:41:08.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/developmentil/ecdh/issues/3
CVE ID: CVE-2022-44311 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:16:35.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jfisteus/html2xhtml/issues/19
CVE ID: CVE-2022-44312 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:13:15.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44313 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T17:41:51.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44314 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T17:40:23.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44315 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T17:39:04.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44316 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T17:38:02.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44317 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T15:12:13.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44318 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T15:10:32.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44319 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:12:16.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48
CVE ID: CVE-2022-44320 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:11:07.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jpoirier/picoc/issues/37 - https://gitlab.com/zsaleeba/picoc/-/issues/48