Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30758 State: PUBLISHED Published: 2022-07-11T13:33:10 Last Updated: 2024-08-03T06:56:14.052Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-276 Description: Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected information with privilege of Finder. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE ID: CVE-2022-30759 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T15:16:45.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nokia.com/networks/products/one-nds/ - https://packetstormsecurity.com/files/171971/Nokia-OneNDS-20.9-Insecure-Permissions-Privilege-Escalation.html
CVE ID: CVE-2022-30760 State: PUBLISHED Published: 2022-06-09T15:14:10 Last Updated: 2024-08-03T06:56:14.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information (final grades, study courses, degrees) by changing the student ID parameter in the HTTP POST request to the FrontControllerSS endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.ihb-eg.de/doku.php/releasenotes/fn2web2.04.09 - https://homepage.ruhr-uni-bochum.de/Christian.Krug-q97/CVE-2022-30760.html
CVE ID: CVE-2022-30763 State: PUBLISHED Published: 2022-05-16T02:13:10 Last Updated: 2024-08-03T06:56:14.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Janet before 1.22.0 mishandles arrays. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/janet-lang/janet/compare/v1.21.1...v1.22.0 - https://github.com/janet-lang/janet/releases/tag/v1.22.0 - https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter/
CVE ID: CVE-2022-30765 State: PUBLISHED Published: 2022-05-16T01:50:53 Last Updated: 2024-08-03T06:56:14.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calibre-Web before 0.6.18 allows user table SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/janeczku/calibre-web/blob/master/SECURITY.md - https://github.com/janeczku/calibre-web/releases/tag/0.6.18
CVE ID: CVE-2022-30767 State: PUBLISHED Published: 2022-05-16T02:13:47.000Z Last Updated: 2025-11-03T19:27:03.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96 - https://lists.denx.de/pipermail/u-boot/2022-May/483952.html - https://securitylab.github.com/research/uboot-rce-nfs-vulnerability/ - https
.de/pipermail/u-boot/2022-May/483952.html - https://securitylab.github.com/research/uboot-rce-nfs-vulnerability/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ - https://source.denx.de/u-boot/u-boot/-/commit/bdbf7a05e26f3c5fd437c99e2755ffde186ddc80
CVE ID: CVE-2022-30768 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T16:11:14.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZoneMinder/zoneminder/releases - https://medium.com/%40dk50u1/stored-xss-in-zo
ichment: References: - https://github.com/ZoneMinder/zoneminder/releases - https://medium.com/%40dk50u1/stored-xss-in-zoneminder-up-to-v1-36-12-f26b4bb68c31
CVE ID: CVE-2022-30769 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T16:09:27.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZoneMinder/zoneminder/releases - https://medium.com/%40dk50u1/session-fixation-in-zoneminder-up-to-v1-36-12-3c850b1fbbf3
CVE ID: CVE-2022-30770 State: PUBLISHED Published: 2022-05-16T00:00:00 Last Updated: 2024-08-03T06:56:14.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials. Additional Analyst Notes: - CVE Program Container: References: - https://docs.terminalfour.com/release-notes/83/8.html - https://docs.terminalfour.com/release-notes/82/185.html - https://docs.terminalfour.com/release-notes/82/1821.html - https://bulletproofsi.com/wp-co
m/release-notes/82/185.html - https://docs.terminalfour.com/release-notes/82/1821.html - https://bulletproofsi.com/wp-content/uploads/2022/08/Bulletproof_Vuls_Id_2022-30770.pdf - https://bulletproofsi.com/wp-content/uploads/2022/10/Bulletproof_Vuls_Id_CVE-2022-30770.pdf
CVE ID: CVE-2022-30771 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T16:08:23.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in: Kernel 5.1: Version 05.17.25 Kernel 5.2: Version 05.27.25 Kernel 5.3: Version 05.36.25 Kernel 5.4: Version 05.44.25 Kernel 5.5: Version 05.52.25 https://www.insyde.com/security-pledge/SA-2022064 Additional Analyst Notes: - CVE Prog
4.25 Kernel 5.5: Version 05.52.25 https://www.insyde.com/security-pledge/SA-2022064 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022064
CVE ID: CVE-2022-30772 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T16:07:25.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of the PnpSmm driver is passed the address and size of data to write into the SMBIOS table, but manipulation of the address could be used by malware to overwrite SMRAM or OS kernel memory. This issue was discovered by Insyde engineering during a security review. This issue is fixed in: Kernel 5.0: 05.09.41 Kernel 5.1: 05.17.43 Kernel 5.2: 05.27.30 Kernel 5.3: 05.36.30 Kernel 5.4: 05.44.
ssue is fixed in: Kernel 5.0: 05.09.41 Kernel 5.1: 05.17.43 Kernel 5.2: 05.27.30 Kernel 5.3: 05.36.30 Kernel 5.4: 05.44.30 Kernel 5.5: 05.52.30 https://www.insyde.com/security-pledge/SA-2022065 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022065
CVE ID: CVE-2022-30773 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:15:47.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). This issue was discovered by Insyde engineering. This issue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367 Additional Analyst Notes: - CVE Program Container
sue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022042
CVE ID: CVE-2022-30774 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:13:10.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) . This issue was discovered by Insyde engineering during a security review. This iss was fixed in Kernel 5.2: 05.27.29, Kernel 5.3: 05.36.25, Kernel 5.4: 05.44.25, Kernel 5.5: 05.52.
urity review. This iss was fixed in Kernel 5.2: 05.27.29, Kernel 5.3: 05.36.25, Kernel 5.4: 05.44.25, Kernel 5.5: 05.52.25. CWE-367 https://www.insyde.com/security-pledge/SA-2022043 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022043 - https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
CVE ID: CVE-2022-30775 State: PUBLISHED Published: 2022-05-16T02:54:45 Last Updated: 2024-08-03T06:56:14.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42264
CVE ID: CVE-2022-30776 State: PUBLISHED Published: 2022-05-16T13:35:42 Last Updated: 2024-08-03T06:56:14.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter. Additional Analyst Notes: - CVE Program Container: References: - https://help.atmail.com/hc/en-us/sections/115003283988 - https://medium.com/%40bhattronit96/cve-2022-30776-cd34f977c2b9
CVE ID: CVE-2022-30777 State: PUBLISHED Published: 2022-05-16T13:38:07 Last Updated: 2024-08-03T06:56:14.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter. Additional Analyst Notes: - CVE Program Container: References: - https://en.wikipedia.org/wiki/H-Sphere - https://medium.com/%40bhattronit96/cve-2022-30777-45725763ab59
CVE ID: CVE-2022-30778 State: REJECTED Published: 2022-05-16T03:22:47 Last Updated: 2022-08-12T15:16:51 Description: No description available.
CVE ID: CVE-2022-30779 State: REJECTED Published: 2022-05-16T03:22:56 Last Updated: 2022-08-12T15:14:27 Description: No description available.
CVE ID: CVE-2022-30780 State: PUBLISHED Published: 2022-06-11T14:40:53 Last Updated: 2024-08-03T06:56:14.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lighttpd/lighttpd1.4 - https://redmine.lighttpd.net/issues/3059 - https://podalirius.net/en/cves/2022-30780/ - https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service
CVE ID: CVE-2022-30781 State: PUBLISHED Published: 2022-05-16T00:00:00 Last Updated: 2024-08-03T06:56:14.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gitea before 1.16.7 does not escape git fetch remote. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/pull/19490 - https://github.com/go-gitea/gitea/pull/19487 - https://blog.gitea.io/2022/05/gitea-1.16.7-is-released/ - http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html - http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html
CVE ID: CVE-2022-30782 State: PUBLISHED Published: 2022-05-16T05:25:22 Last Updated: 2024-08-03T06:56:14.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openmoney/openmoney-api/blob/1b836e5826dfd59145223a8a48e6c45ddb325762/api/helpers/util.helper.js#L6 - https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/random
CVE ID: CVE-2022-30783 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T06:56:14.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58 - http://www.openwall.com/lists/oss-security/2022/06/07/4 - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-anno
022/06/07/4 - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/2023
age-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30784 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T06:56:14.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-annou
edoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30785 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T06:56:14.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58 - http://www.openwall.com/lists/oss-security/2022/06/07/4 - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-a
y/2022/06/07/4 - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/2
ackage-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30786 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T06:56:14.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/p
ce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30787 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T07:03:38.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58 - http://www.openwall.com/lists/oss-security/2022/06/07/4 - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6O
/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30788 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T07:03:38.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30789 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T07:03:38.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/li
nounce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/ - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2022-30790 State: PUBLISHED Published: 2022-06-08T12:32:19.000Z Last Updated: 2025-11-03T19:27:05.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/tags - https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/