Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
web-based management interface. An attacker could exploit this vulnerability by manipulating requests to the web-based management interface to contain operating system commands. A successful exploit could allow the attacker to execute arbitrary operating system commands on the underlying operating system with the privileges of the web services user. Cisco has not yet released software updates that address this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx
CVE ID: CVE-2022-20965 State: PUBLISHED Published: 2023-01-18T17:44:34.798Z Last Updated: 2024-08-03T02:31:58.772Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-648 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interface. This vulnerability is due to improper access control on a feature within the web-based management interface of the affected system. An attacker could exploit this vulnerability by accessing features through
management interface of the affected system. An attacker could exploit this vulnerability by accessing features through direct requests, bypassing checks within the application. A successful exploit could allow the attacker to take privileged actions within the web-based management interface that should be otherwise restricted. {{value}} ["%7b%7bvalue%7d%7d"])}]] Additional Analyst Notes: - CVE Program Container: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx
CVE ID: CVE-2022-20966 State: PUBLISHED Published: 2023-01-18T17:46:16.640Z Last Updated: 2024-08-03T02:31:58.663Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface. This vulnerability is due to improper validation of input to an application feature before storage within the web-based management interface. An attacker could exploit
n of input to an application feature before storage within the web-based management interface. An attacker could exploit this vulnerability by creating entries within the application interface that contain malicious HTML or script code. A successful exploit could allow the attacker to store malicious HTML or script code within the application interface for use in further cross-site scripting attacks. Cisco has not yet released software updates that address this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx
CVE ID: CVE-2022-20967 State: PUBLISHED Published: 2023-01-18T17:48:19.668Z Last Updated: 2024-08-03T02:31:59.863Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface. This vulnerability is due to improper validation of input to an application feature before storage within the web-based management interface. An attacker could exploit
CVE ID: CVE-2022-20968 State: PUBLISHED Published: 2022-12-08T16:13:11.258Z Last Updated: 2024-08-03T02:31:58.569Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Cisco Products: Cisco Session Initiation Protocol (SIP) Software Problem Types: CWE-787 Description: A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Proto
Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device. Additional Analyst Notes: - CVE Program Container: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipp-oobwrite-8cMF5r7U
CVE ID: CVE-2022-20969 State: PUBLISHED Published: 2022-11-03T19:31:00.307Z Last Updated: 2024-11-20T14:32:11.608Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Umbrella Dashboard Problem Types: CWE-79 Description: A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Cisco Umbrella dashboard. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom JavaScript to the web application and persuading a user of the interface to click a maliciousl
lity by submitting custom JavaScript to the web application and persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-xss-LfeYQV3
CVE ID: CVE-2022-21122 State: PUBLISHED Published: 2022-06-03T20:05:12.139900Z Last Updated: 2024-09-16T19:56:29.255Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P) Vendors: n/a Products: metacalc Problem Types: Arbitrary Code Execution Description: The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constructor. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-METACALC-2826197 - https://github.com/metarhia/metacalc/pull/16 - https://github
erences: - https://snyk.io/vuln/SNYK-JS-METACALC-2826197 - https://github.com/metarhia/metacalc/pull/16 - https://github.com/metarhia/metacalc/commit/625c23d63eabfa16fc815f5832b147b08d2144bd
CVE ID: CVE-2022-21123 State: PUBLISHED Published: 2022-06-15T19:59:35.000Z Last Updated: 2025-05-05T16:40:07.901Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html - http://www.openwall.com/lists/oss-security/2022/06/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject
m/lists/oss-security/2022/06/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ - https://security.netapp.com/advisory/ntap-20220624-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173 - https://www.debian.org/security/2022/dsa-5178 - https://www.debian.org/security/2022/dsa-
n.org/security/2022/dsa-5173 - https://www.debian.org/security/2022/dsa-5178 - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-21124 State: PUBLISHED Published: 2022-03-07T09:00:32 Last Updated: 2024-08-03T02:31:59.702Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Out-of-bounds write Description: Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25234. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU90121984/index.html - http://www.openwall.com/lists/oss-security/2022/06/14/4 - http://xenbits.xen
s://jvn.jp/en/vu/JVNVU90121984/index.html - http://www.openwall.com/lists/oss-security/2022/06/14/4 - http://xenbits.xen.org/xsa/advisory-404.html - http://www.openwall.com/lists/oss-security/2022/06/16/1
CVE ID: CVE-2022-21125 State: PUBLISHED Published: 2022-06-15T20:01:10.000Z Last Updated: 2025-05-05T16:39:56.071Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://xenbits.xen.org/xsa/advisory-404.html - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html - http://www.openwall.com/lists/oss-security/2022/06/16/1 - https://lists.fedoraproject.org/
dvisory/intel-sa-00615.html - http://www.openwall.com/lists/oss-security/2022/06/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ - https://security.netapp.com/advisory/ntap-20220624-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173 - https://www.debian.org/security/2022/
s-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173 - https://www.debian.org/security/2022/dsa-5178 - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-21126 State: PUBLISHED Published: 2022-11-29T16:50:19.233Z Last Updated: 2025-04-24T18:34:51.291Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: com.github.samtools:htsjdk Problem Types: Creation of Temporary File in Directory with Insecure Permissions Description: The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDir() function in util/IOUtil.java not checking for the existence of the temporary directory before attempting to create it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
before attempting to create it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JAVA-COMGITHUBSAMTOOLS-3149901 - https://github.com/samtools/htsjdk/commit/4a4024a97ee3e87096df6ad9b22c8260bd527772 - https://github.com/samtools/htsjdk/pull/1617
CVE ID: CVE-2022-21127 State: PUBLISHED Published: 2022-06-15T20:02:28.000Z Last Updated: 2025-05-05T16:39:45.321Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html - http://www.openwall.com/lists/oss-security/2022/06/16/1 - https://security.netapp.com/advisory/ntap-20220624-0008/ - https://w
/www.openwall.com/lists/oss-security/2022/06/16/1 - https://security.netapp.com/advisory/ntap-20220624-0008/ - https://www.debian.org/security/2022/dsa-5178
CVE ID: CVE-2022-21128 State: PUBLISHED Published: 2022-05-12T16:35:49.000Z Last Updated: 2025-05-05T16:39:34.692Z Vendors: n/a Products: Intel(R) Advisor software Problem Types: escalation of privilege Description: Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00661.html
CVE ID: CVE-2022-21129 State: PUBLISHED Published: 2023-01-31T05:00:01.701Z Last Updated: 2025-03-27T17:15:46.697Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: nemo-appium Problem Types: CWE-78 Description: Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. **Note:** In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747 - https
ogram Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747 - https://github.com/paypal/nemo-appium/blob/master/index.js%23L27 - https://github.com/paypal/nemo-appium/commit/aa271d36dd5c81baae3c43aa2616c84f0ee4195f
CVE ID: CVE-2022-21131 State: PUBLISHED Published: 2022-05-12T16:35:44.000Z Last Updated: 2025-05-05T16:39:21.345Z Vendors: n/a Products: Intel(R) Xeon(R) Processors Problem Types: information disclosure Description: Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html
CVE ID: CVE-2022-21132 State: PUBLISHED Published: 2022-03-07T09:00:34 Last Updated: 2024-08-03T02:31:59.823Z Vendors: pfSense Products: pfSense-pkg-WireGuard Problem Types: Directory traversal Description: Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pfSense-pkg-WireGuard 0.1.6 versions prior to 0.1.6_1 allows a remote authenticated attacker to lead a pfSense user to view a file outside the public folder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pfsense/FreeBSD-ports/commits/devel/net/pfSense-pkg-WireGuard - https://jvn.jp/en/jp/JVN85572374/index.html
CVE ID: CVE-2022-21133 State: PUBLISHED Published: 2022-02-09T22:04:48.000Z Last Updated: 2025-05-05T16:39:08.553Z Vendors: n/a Products: Intel(R) Trace Analyzer and Collector Problem Types: denial of service Description: Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html
CVE ID: CVE-2022-21134 State: PUBLISHED Published: 2022-01-28T19:10:06.000Z Last Updated: 2025-04-15T19:21:40.779Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: CWE-347 Description: A firmware update vulnerability exists in the &quot;update&quot; firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447
CVE ID: CVE-2022-21135 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:18:59.589Z Description: No description available.
CVE ID: CVE-2022-21136 State: PUBLISHED Published: 2022-05-12T16:35:45.000Z Last Updated: 2025-05-05T16:38:55.607Z Vendors: n/a Products: Intel(R) Xeon(R) Processors Problem Types: denial of service Description: Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html
CVE ID: CVE-2022-21137 State: PUBLISHED Published: 2022-01-14T19:10:44.165Z Last Updated: 2025-04-16T18:01:51.446Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Omron Products: CX-One Problem Types: CWE-121 Description: Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-006-01 - https://www.zerodayinitiative.com/advisories/ZDI-22-373/ - https://www.zerodayinitiative.com/advisories/ZDI-22-374/
CVE ID: CVE-2022-21138 State: REJECTED Published: N/A Last Updated: 2025-05-27T15:09:41.372Z Description: No description available.
CVE ID: CVE-2022-21139 State: PUBLISHED Published: 2022-08-18T19:41:02.000Z Last Updated: 2025-05-05T16:38:43.771Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi products Problem Types: escalation of privilege Description: Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2022-21140 State: PUBLISHED Published: 2022-08-18T19:43:39.000Z Last Updated: 2025-05-05T16:38:32.056Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products Problem Types: information disclosure Description: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2022-21141 State: PUBLISHED Published: 2022-02-18T17:50:20.915Z Last Updated: 2025-04-16T16:45:01.196Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Airspan Networks Products: MMP, PTP C-series, PTMP C-series and A5x Problem Types: CWE-863 Description: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these functions and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information. Additional Analyst Notes: -
mote code execution, create a denial-of-service condition, and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02
CVE ID: CVE-2022-21142 State: PUBLISHED Published: 2022-02-24T09:50:26 Last Updated: 2024-08-03T02:31:59.241Z Vendors: appleple inc. Products: a-blog cms Problem Types: Authentication bypass Description: Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass authentication under the specific condition. Additional Analyst Notes: - CVE Program Container: References: - https://developer.a-blogcms.jp/blog/news/security-202202.html - https://jvn.jp/en/jp/JVN14
gram Container: References: - https://developer.a-blogcms.jp/blog/news/security-202202.html - https://jvn.jp/en/jp/JVN14706307/index.html
CVE ID: CVE-2022-21143 State: PUBLISHED Published: 2022-02-18T17:50:19.316Z Last Updated: 2025-04-16T16:45:21.573Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Airspan Networks Products: MMP, PTP C-series, PTMP C-series and A5x Problem Types: CWE-78 Description: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-2
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02
CVE ID: CVE-2022-21144 State: PUBLISHED Published: 2022-05-01T15:25:10.325859Z Last Updated: 2024-09-16T23:06:44.496Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: libxmljs Problem Types: Denial of Service (DoS) Description: This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-LIBXMLJS-2348756 - https://github.com/libxmljs/libxmljs/pull/594
Container: References: - https://snyk.io/vuln/SNYK-JS-LIBXMLJS-2348756 - https://github.com/libxmljs/libxmljs/pull/594 - https://github.com/libxmljs/libxmljs/commit/2501807bde9b38cfaed06d1e140487516d91379d
CVE ID: CVE-2022-21145 State: PUBLISHED Published: 2022-04-14T19:56:34.061Z Last Updated: 2025-04-15T19:06:04.378Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Lansweeper Products: lansweeper Problem Types: CWE-80 Description: A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442