Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1123 State: PUBLISHED Published: 2022-08-29T14:40:24 Last Updated: 2024-08-02T23:55:23.402Z Vendors: Unknown Products: Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) Problem Types: CWE-89 Description: The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/03e0d4d5-0184-4a15-b8ac-fdc2010e4812
CVE ID: CVE-2022-1124 State: PUBLISHED Published: 2022-05-11T14:50:29 Last Updated: 2024-08-02T23:55:24.360Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/323552 - https://hackerone.com/reports/1113405 - https://gitlab.com/gitl
- https://gitlab.com/gitlab-org/gitlab/-/issues/323552 - https://hackerone.com/reports/1113405 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1124.json
CVE ID: CVE-2022-1125 State: PUBLISHED Published: 2022-07-22T23:35:49 Last Updated: 2024-08-02T23:55:23.969Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1292261 - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1127 State: PUBLISHED Published: 2022-07-22T23:36:02 Last Updated: 2024-08-02T23:55:23.604Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1291891 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1128 State: PUBLISHED Published: 2022-07-22T23:36:15 Last Updated: 2024-08-02T23:55:24.338Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1301920 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1129 State: PUBLISHED Published: 2022-07-22T23:36:29 Last Updated: 2024-08-02T23:55:23.928Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1300253 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1130 State: PUBLISHED Published: 2022-07-22T23:36:45 Last Updated: 2024-08-02T23:55:23.397Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1142269 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1131 State: PUBLISHED Published: 2022-07-22T23:36:58 Last Updated: 2024-08-02T23:55:24.317Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1297404 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1132 State: PUBLISHED Published: 2022-07-22T23:37:10 Last Updated: 2024-08-02T23:55:24.416Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1303410 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1133 State: PUBLISHED Published: 2022-07-22T23:37:24 Last Updated: 2024-08-02T23:55:24.221Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1305776 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1134 State: PUBLISHED Published: 2022-07-22T00:00:00 Last Updated: 2024-08-02T23:55:24.094Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1308360 - https://security.gentoo.org/glsa/202208-25 - http://packetstormsecurity.com/files/172851/Chrome-Renderer-Type-Confusion-Remote-Code-Execution.html
CVE ID: CVE-2022-1135 State: PUBLISHED Published: 2022-07-22T23:37:51 Last Updated: 2024-08-02T23:55:24.275Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via standard feature user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1285601 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1136 State: PUBLISHED Published: 2022-07-22T23:38:04 Last Updated: 2024-08-02T23:55:24.096Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific set of user gestures. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1280205 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1137 State: PUBLISHED Published: 2022-07-22T23:38:18 Last Updated: 2024-08-02T23:55:24.066Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to leak potentially sensitive information via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1289846 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1138 State: PUBLISHED Published: 2022-07-22T23:38:30 Last Updated: 2024-08-02T23:55:23.618Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1246188 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1139 State: PUBLISHED Published: 2022-07-22T23:38:44 Last Updated: 2024-08-02T23:55:24.329Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1268541 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1141 State: PUBLISHED Published: 2022-07-22T23:39:00 Last Updated: 2024-08-02T23:55:24.597Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user gesture. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1303253 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1142 State: PUBLISHED Published: 2022-07-22T23:39:16 Last Updated: 2024-08-02T23:55:24.622Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1303613 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1143 State: PUBLISHED Published: 2022-07-22T23:39:29 Last Updated: 2024-08-02T23:55:24.311Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1303615 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1144 State: PUBLISHED Published: 2022-07-22T23:39:43 Last Updated: 2024-08-02T23:55:24.237Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1304145 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1145 State: PUBLISHED Published: 2022-07-22T23:39:56 Last Updated: 2024-08-02T23:55:24.371Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interaction and profile destruction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1304545 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1146 State: PUBLISHED Published: 2022-07-22T23:40:10 Last Updated: 2024-08-02T23:55:24.330Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html - https://crbug.com/1290150 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1148 State: PUBLISHED Published: 2022-04-04T19:46:13 Last Updated: 2024-08-02T23:55:24.266Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to steal a user's access token on an attacker-controlled private GitLab Pages website and reuse that token on the victim's other private websites Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/
s other private websites Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/350687 - https://hackerone.com/reports/1439552 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1148.json
CVE ID: CVE-2022-1152 State: PUBLISHED Published: 2022-04-25T15:51:18 Last Updated: 2024-08-02T23:55:24.353Z Vendors: Unknown Products: Menubar Problem Types: CWE-79 Description: The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1c55fda9-e938-4267-be77-a6d73ee46af3
CVE ID: CVE-2022-1153 State: PUBLISHED Published: 2022-04-25T15:51:19 Last Updated: 2024-08-02T23:55:24.085Z Vendors: Unknown Products: LayerSlider Problem Types: CWE-79 Description: The LayerSlider WordPress plugin before 7.1.2 does not sanitise and escape Project's slug before outputting it back in various place, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1d9d5516-f1c3-4134-b6bf-7f2f890533c4
CVE ID: CVE-2022-1154 State: PUBLISHED Published: 2022-03-30T00:00:00 Last Updated: 2024-08-02T23:55:24.251Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425 - https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/ - https://lists.fedoraproject.org/a
package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.gentoo.org/glsa/202208-32 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1155 State: PUBLISHED Published: 2022-03-30T12:20:14 Last Updated: 2024-08-02T23:55:24.248Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-840 Description: Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ebc26354-2414-4f72-88aa-f044aec2b2e1 - https://github.com/snipe/snipe-it/commit/bdabbbd4e98e88ee01e728ceb4fd512661fbd38d
CVE ID: CVE-2022-1156 State: PUBLISHED Published: 2022-04-25T15:51:21 Last Updated: 2024-08-02T23:55:24.366Z Vendors: Unknown Products: Books & Papers Problem Types: CWE-79 Description: The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/76ad4273-6bf4-41e9-99a8-bf6d634608ac
CVE ID: CVE-2022-1157 State: PUBLISHED Published: 2022-04-11T19:38:26 Last Updated: 2024-08-02T23:55:24.358Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Inclusion of sensitive information in log files in GitLab Description: Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab CE/EE causes potential sensitive values in invalid URLs to be logged Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/37261 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1157.json
CVE ID: CVE-2022-1158 State: PUBLISHED Published: 2022-08-05T00:00:00 Last Updated: 2024-08-02T23:55:24.234Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2069793 - https://www.openwall.com/lists/oss-sec
am Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2069793 - https://www.openwall.com/lists/oss-security/2022/04/08/4 - https://security.netapp.com/advisory/ntap-20230214-0003/
CVE ID: CVE-2022-1159 State: PUBLISHED Published: 2022-04-01T22:17:51.000Z Last Updated: 2025-04-16T17:57:50.739Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: Studio 5000 Logix Designer Problem Types: CWE-94 Description: Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07
CVE ID: CVE-2022-1160 State: PUBLISHED Published: 2022-03-30T00:00:00 Last Updated: 2024-08-02T23:55:24.278Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a6f3222d-2472-439d-8881-111138a5694c - https://github.com/vim/vim/commit/2bdad6126778f907c0b98002bfebf0e611a3f5db - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/ - https://lists.fedorap
chives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1161 State: PUBLISHED Published: 2022-04-11T19:38:14.725Z Last Updated: 2025-04-16T16:31:12.359Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: 1768 CompactLogix controllers, 1769 CompactLogix controllers, CompactLogix 5370 controllers, CompactLogix 5380 controllers, CompactLogix 5480 controllers, Compact GuardLogix 5370 controllers, Compact GuardLogix 5380 controllers, ControlLogix 5550 controllers, ControlLogix 5560 controllers, ControlLogix 5570 controllers, ControlLogix 5580 controllers, GuardLogix 5560 controllers, GuardLogix 5570 controllers, GuardLogix 5580 controllers, FlexLogix 1794-L34 controllers, D
GuardLogix 5560 controllers, GuardLogix 5570 controllers, GuardLogix 5580 controllers, FlexLogix 1794-L34 controllers, DriveLogix 5730 controllers, SoftLogix 5800 controllers Problem Types: CWE-829 Description: An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-05
CVE ID: CVE-2022-1162 State: PUBLISHED Published: 2022-04-04T19:46:14 Last Updated: 2024-08-02T23:55:24.375Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Use of hard-coded credentials in GitLab Description: A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/357210 - https://gitlab.com/gitlab-org/cves/-/blob/m
tainer: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/357210 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1162.json - http://packetstormsecurity.com/files/166828/Gitlab-14.9-Authentication-Bypass.html