Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1021 State: PUBLISHED Published: 2022-08-19T12:40:10 Last Updated: 2024-08-02T23:47:43.285Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: chatwoot Products: chatwoot/chatwoot Problem Types: CWE-922 Description: Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a8187478-75e1-4d62-b894-651269401ca3 - https://github.com/chatwoot/chatwoot/commit/24b20c10cebd25e61de8d4266c63fde94772e889
CVE ID: CVE-2022-1022 State: PUBLISHED Published: 2022-04-21T14:25:12 Last Updated: 2024-08-02T23:47:43.300Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: chatwoot Products: chatwoot/chatwoot Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2e4ac6b5-7357-415d-9633-65c636b20e94 - https://github.com/chatwoot/chatwoot/commit/27ddd77a1b621f503fe89a436a49f44b0b1204b5
CVE ID: CVE-2022-1023 State: PUBLISHED Published: 2022-04-11T14:41:09 Last Updated: 2024-08-02T23:47:43.233Z Vendors: Unknown Products: Podcast Importer SecondLine Problem Types: CWE-89 Description: The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/163069cd-98a8-4cfb-8b58-a6727a7d5c48 - https://plugins.trac.wordpress.org/changeset/2696254
CVE ID: CVE-2022-1024 State: REJECTED Published: 2022-08-29T14:03:07 Last Updated: 2022-08-29T14:03:07 Description: No description available.
CVE ID: CVE-2022-1025 State: PUBLISHED Published: 2022-07-12T20:39:54 Last Updated: 2024-08-02T23:47:43.277Z Vendors: n/a Products: ArgoCD Problem Types: CWE-284 Description: All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-2f5v-8r3f-8pww
CVE ID: CVE-2022-1026 State: PUBLISHED Published: 2022-04-04T14:15:18.324284Z Last Updated: 2024-09-16T20:06:43.800Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Kyocera Products: Multifunction Printer Net Viewer Problem Types: CWE-522 Description: Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. Additional Analyst Notes: - CVE Program Container: References: - https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html - https://www.rapid7.com/blog/post
www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/
CVE ID: CVE-2022-1027 State: PUBLISHED Published: 2022-04-25T15:51:14 Last Updated: 2024-08-02T23:47:43.333Z Vendors: Unknown Products: Page Restriction WordPress (WP) – Protect WP Pages/Post Problem Types: CWE-79 Description: The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrator privileges to the settings page to inject Javascript code to its settings leading to stored Cross-Site Scripting that will only affect administrator users. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9dbb0d6d-bc84-4b85-8aa5-fa2a8e6fa5e3
CVE ID: CVE-2022-1028 State: PUBLISHED Published: 2022-06-27T08:56:06 Last Updated: 2024-08-02T23:47:43.295Z Vendors: Unknown Products: WordPress Security – Firewall, Malware Scanner, Secure Login and Backup Problem Types: CWE-79 Description: The WordPress Security Firewall, Malware Scanner, Secure Login and Backup plugin before 4.2.1 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/16fc08ec-8476-
setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/16fc08ec-8476-4f3c-93ea-6a51ed880dd5
CVE ID: CVE-2022-1029 State: PUBLISHED Published: 2022-06-27T08:56:11 Last Updated: 2024-08-02T23:47:43.277Z Vendors: Unknown Products: Limit Login Attempts Problem Types: CWE-79 Description: The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0e74eeb4-89e2-4873-904f-ad4f25c4a8ba
CVE ID: CVE-2022-1030 State: PUBLISHED Published: 2022-03-23T19:46:14 Last Updated: 2024-08-02T23:47:43.281Z Vendors: Okta Products: Advanced Server Access Client Problem Types: Command Injection Description: Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system. Additional Analyst Notes: - CVE Program Container: References: - https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2022-1030
CVE ID: CVE-2022-1031 State: PUBLISHED Published: 2022-03-22T19:40:10 Last Updated: 2024-08-02T23:47:43.266Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-416 Description: Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/37da2cd6-0b46-4878-a32e-acbfd8f6f457 - https://github.com/radareorg/radare2/commit/a7ce29647fcb38386d7439696375e16e093d6acb
CVE ID: CVE-2022-1032 State: PUBLISHED Published: 2022-03-29T07:40:10 Last Updated: 2024-08-02T23:47:43.242Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: crater-invoice Products: crater-invoice/crater Problem Types: CWE-502 Description: Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/cb9a0393-be34-4021-a06c-00c7791c7622 - https://github.com/crater-invoice/crater/commit/7cde971f8b79579951df98384a5210d25f698af5
CVE ID: CVE-2022-1033 State: PUBLISHED Published: 2022-03-23T07:45:13 Last Updated: 2024-08-02T23:47:43.238Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: crater-invoice Products: crater-invoice/crater Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4d7d4fc9-e0cf-42d3-b89c-6ea57a769045 - https://github.com/crater-invoice/crater/commit/88035ea49082f7053a37ef07bf3587e09d9d22b4
CVE ID: CVE-2022-1034 State: PUBLISHED Published: 2022-03-22T07:55:10 Last Updated: 2024-08-02T23:47:43.259Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-434 Description: There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7 - https://github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b
CVE ID: CVE-2022-1035 State: PUBLISHED Published: 2022-03-21T00:00:00 Last Updated: 2024-08-02T23:47:43.281Z Severity: LOW (CVSS 2.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: gpac Products: gpac/gpac Problem Types: CWE-476 Description: Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/851942a4-1d64-4553-8fdc-9fccd167864b - https://github.com/gpac/gpac/commit/3718d583c6ade191dc7979c64f48c001ca6f0243 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-1036 State: PUBLISHED Published: 2022-03-22T12:40:10 Last Updated: 2024-08-02T23:47:43.350Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-190 Description: Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/db615581-d5a9-4ca5-a3e9-7a39eceaa424 - https://github.com/microweber/microweber/commit/82be4f0b4729be870ccefdae99a04833f134aa6a
CVE ID: CVE-2022-1037 State: PUBLISHED Published: 2022-04-18T17:10:46 Last Updated: 2024-08-02T23:47:43.287Z Vendors: Unknown Products: EXMAGE – WordPress Image Links Problem Types: CWE-918 Description: The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bd8555bd-8086-41d0-a1f7-3557bc3af957
CVE ID: CVE-2022-1038 State: PUBLISHED Published: 2022-11-21T20:38:03.349Z Last Updated: 2025-04-29T04:49:24.379Z Vendors: HP Inc. Products: HP Jumpstart Problem Types: n/a Description: A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6189329-6189528-16/hpsbhf03791
CVE ID: CVE-2022-1039 State: PUBLISHED Published: 2022-04-20T15:30:34.344Z Last Updated: 2025-04-16T17:55:12.150Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Red Lion Products: DA50N Problem Types: CWE-521 Description: The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su com
pport root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03
CVE ID: CVE-2022-1040 State: PUBLISHED Published: 2022-03-25T12:10:10.000Z Last Updated: 2025-10-21T23:15:43.601Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Firewall Problem Types: n/a Description: An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce - http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html
-sfos-rce - http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html - https://www.exploit-db.com/exploits/51006
CVE ID: CVE-2022-1041 State: PUBLISHED Published: 2022-07-26T04:25:10.049119Z Last Updated: 2024-09-17T00:11:32.744Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-787 Description: In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p449-9hv9-pj38
CVE ID: CVE-2022-1042 State: PUBLISHED Published: 2022-07-26T04:25:22.458272Z Last Updated: 2024-09-16T20:17:50.329Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-787 Description: In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j7v7-w73r-mm5x
CVE ID: CVE-2022-1043 State: PUBLISHED Published: 2022-08-29T00:00:00 Last Updated: 2024-08-02T23:47:43.283Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1997328 - https://www.zerodayinitiative.com/advisories/ZDI-22-362/ - https://github.com/torvalds/linux/commit/a30f895ad3239f45012e860d4f94c1a388b36d14 - https://access.redhat.com/security/cve/CVE-2022-1043 - http://packetstormsecurity.
95ad3239f45012e860d4f94c1a388b36d14 - https://access.redhat.com/security/cve/CVE-2022-1043 - http://packetstormsecurity.com/files/170834/io_uring-Same-Type-Object-Reuse-Privilege-Escalation.html
CVE ID: CVE-2022-1044 State: PUBLISHED Published: 2022-05-12T08:10:10 Last Updated: 2024-08-02T23:47:43.298Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-922 Description: Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ff878be9-563a-4d0e-99c1-fc3c767f6d3e - https://github.com/polonel/trudesk/commit/097b4823935c4fa524e71ab2dd107cf2056922b0
CVE ID: CVE-2022-1045 State: PUBLISHED Published: 2022-04-11T06:15:20 Last Updated: 2024-08-02T23:47:43.328Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-434 Description: Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b0c4f992-4ac8-4479-82f4-367ed1a2a826 - https://github.com/polonel/trudesk/commit/c4b262c2613d4a8865de0b3252112544bd81997a
CVE ID: CVE-2022-1046 State: PUBLISHED Published: 2022-05-02T16:05:48 Last Updated: 2024-08-02T23:47:43.426Z Vendors: Unknown Products: Visual Form Builder Problem Types: CWE-79 Description: The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a1ae4512-0b5b-4f36-8334-14633bf24758
CVE ID: CVE-2022-1047 State: PUBLISHED Published: 2022-05-09T16:50:44 Last Updated: 2024-08-02T23:47:43.257Z Vendors: Unknown Products: themify-ptb-search Problem Types: CWE-79 Description: The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/078bd5f6-64f7-4665-825b-9fd0c2b7b91b
CVE ID: CVE-2022-1048 State: PUBLISHED Published: 2022-04-29T15:34:44 Last Updated: 2024-08-02T23:47:43.301Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2066706 - https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be
m/show_bug.cgi?id=2066706 - https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3 - https://www.debian.org/security/2022/dsa-5127 - https://security.netapp.com/advisory/ntap-20220629-0001/ - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-1049 State: PUBLISHED Published: 2022-03-25T18:03:01 Last Updated: 2024-08-02T23:47:43.257Z Vendors: n/a Products: clusterlabs/pcs Problem Types: CWE-287 Description: A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5 - https://www.debian.org/security/2022/dsa-5226 - https://lists.debian.org/debian-lts-announce/2022/09/msg00017.html
CVE ID: CVE-2022-1050 State: PUBLISHED Published: 2022-03-29T00:00:00 Last Updated: 2024-08-02T23:47:43.236Z Vendors: n/a Products: QEMU Problem Types: CWE-416 Description: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2069625 - https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE ID: CVE-2022-1051 State: PUBLISHED Published: 2022-05-16T14:30:33 Last Updated: 2024-08-02T23:47:43.261Z Vendors: Unknown Products: WPQA Builder Plugin Problem Types: CWE-79 Description: The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cb2fa587-da2f-460e-a402-225df7744765
CVE ID: CVE-2022-1052 State: PUBLISHED Published: 2022-03-24T13:05:10 Last Updated: 2024-08-02T23:47:43.292Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-122 Description: Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3b3b7f77-ab8d-4de3-999b-eeec0a3eebe7 - https://github.com/radareorg/radare2/commit/0052500c1ed5bf8263b26b9fd7773dbdc6f170c4
CVE ID: CVE-2022-1053 State: PUBLISHED Published: 2022-05-06T16:45:03 Last Updated: 2024-08-02T23:47:43.276Z Vendors: n/a Products: keylime Problem Types: CWE-20 Description: Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an AK of a software TPM. A successful attack breaks the entire chain of trust because a not validated AK is used by the verifier. This issue is worse if the validation happens first and then the agent gets added to the verifier be
ed by the verifier. This issue is worse if the validation happens first and then the agent gets added to the verifier because the timing is easier and the verifier does not validate the regcount entry being equal to 1, Additional Analyst Notes: - CVE Program Container: References: - https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5d - https://bugzilla.redhat.com/show_bug.cgi?id=2065024%2C - https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5%2C - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/ - https://lists.fedoraproject.org/archives/list/package-announc
oraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/
CVE ID: CVE-2022-1054 State: PUBLISHED Published: 2022-04-18T17:10:47 Last Updated: 2024-08-02T23:47:43.258Z Vendors: Unknown Products: RSVP and Event Management Plugin Problem Types: CWE-862 Description: The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and has the export function hooked to the init action. As a result, unauthenticated attackers could call it and retrieve PII such as first name, last name and email address of user registered for events Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d
CVE ID: CVE-2022-1055 State: PUBLISHED Published: 2022-03-29T15:05:13 Last Updated: 2024-08-02T23:47:43.302Z Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 - https://syzkaller.appspot.com/bug?id=2212474c958978ab86525f
ux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 - https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc - https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 - https://security.netapp.com/advisory/ntap-20220506-0007/ - http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html