Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
assword by listing processes and their arguments. NOTE: the vendor states "This is not a vulnerability of H2 Console ... Passwords should never be passed on the command line and every qualified DBA or system administrator is expected to know that." Nonetheless, the issue was fixed in 2.2.220. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sites.google.com/sonatype.com/vulnerabilities/sonatype-2022-6243 - https://github.com/h2database/h2database/blob/96832bf5a97cdc0adc1f2066ed61c54990d66ab5/h2/src/main/org/h2/server/web/WebServer.java#L346-L347 - https://github.com/h2database/h2database/issues/3686 - https://github.com/advisories/GHSA-22wj-vf
erver.java#L346-L347 - https://github.com/h2database/h2database/issues/3686 - https://github.com/advisories/GHSA-22wj-vf5f-wrvj - https://github.com/h2database/h2database/pull/3833 - https://github.com/h2database/h2database/releases/tag/version-2.2.220
CVE ID: CVE-2022-45869 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T18:57:20.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=47b0c2e4c220f2251fd8dcfbb44479819c715e15
CVE ID: CVE-2022-45871 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:57:26.724Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-45872 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T18:22:30.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: iTerm2 before 3.4.18 mishandles a DECRQSS response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iterm2.com/downloads.html
CVE ID: CVE-2022-45873 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T18:19:52.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file. Additional Analyst Notes: - CVE Program Container
nections=16 is set for the systemd/units/systemd-coredump.socket file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/systemd/systemd/commit/076b807be472630692c5348c60d0c2b7b28ad437 - https://github.com/systemd/systemd/pull/25055#issuecomment-1313733553 - https://github.com/systemd/systemd/pull/24853#issuecomment-1326561497 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MS5N5SLYAHKENLAJWYBDKU55ICU3SVZF/
CVE ID: CVE-2022-45874 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-11T15:52:48.252Z Vendors: Huawei Products: Aslan-AL10 Problem Types: Improper Authorization Description: Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-iaviahcw-21a3acd8-en
CVE ID: CVE-2022-45875 State: PUBLISHED Published: 2023-01-04T14:57:45.334Z Last Updated: 2025-04-03T15:27:57.287Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: CWE-20 Description: Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users which can login to DS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/r0wqzkjsoq17j6ww381kmpx3jjp9hb6r - ht
Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/r0wqzkjsoq17j6ww381kmpx3jjp9hb6r - http://www.openwall.com/lists/oss-security/2023/11/22/2
CVE ID: CVE-2022-45876 State: PUBLISHED Published: 2023-04-26T21:07:31.302Z Last Updated: 2025-01-17T17:10:14.204Z Vendors: VISAM Products: VBASE Problem Types: CWE-611 Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05 - https://www.visam.com/kontakt.php - https://www.vbase.net/en/download.php
CVE ID: CVE-2022-45877 State: PUBLISHED Published: 2022-12-08T00:00:00 Last Updated: 2024-08-03T14:24:03.232Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-287 Description: OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
CVE ID: CVE-2022-45878 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:36.541Z Description: No description available.
CVE ID: CVE-2022-45883 State: REJECTED Published: N/A Last Updated: 2023-01-09T00:00:00 Description: No description available.
CVE ID: CVE-2022-45884 State: PUBLISHED Published: 2022-11-25T00:00:00 Last Updated: 2024-08-03T14:24:03.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/ - https://lore.kernel.org/linux-media/20221115131822.6640-4-imv4bel%40gmail.com/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?
urity.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=627bb528b086b4136315c25d6a447a98ea9448d3
CVE ID: CVE-2022-45885 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-29T14:01:12.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/ - https://lore.kernel.org/linux-media/20221115131822.6640-2-imv4bel%40gmail.com/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/
0-2-imv4bel%40gmail.com/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6769a0b7ee0c3b31e1b22c3fadff2bfb642de23f
CVE ID: CVE-2022-45886 State: PUBLISHED Published: 2022-11-25T00:00:00 Last Updated: 2024-08-03T14:24:03.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/ - https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel%40gmail.com/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/c
s://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4172385b0c9ac366dcab78eda48c26814b87ed1a
CVE ID: CVE-2022-45887 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T19:14:57.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/ - https://lore.kernel.org/linux-media/20221115131822.6640-5-imv4bel%40gmail.com/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/to
0gmail.com/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=517a281338322ff8293f988771c98aaa7205e457
CVE ID: CVE-2022-45888 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-11-03T21:46:45.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/20221022175404.GA375335%40ubuntu/ - https://security.netapp.com/advisory/ntap-20230113-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=282a4b71816b6076029017a7bab3a9dcee12a920
CVE ID: CVE-2022-45889 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:49:14.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records stored in the database, and achieve the ability to execute arbitrary SQL commands, via Search (the StatisticsResults.aspx flt parameter). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45890 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:44:56.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting (XSS) vulnerability exists via any metadata filter field (e.g., search within Default.aspx with the r or fo parameter). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45891 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-15T14:32:26.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content uploaded by other users (View.aspx after Ajax.asmx/SaveGrantAccessList). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45892 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:43:33.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS) vulnerabilities exist: Disclaimer, Search Function, Comments, Batch editing tool, Content Creation, Related Media, Create new user, and Change Username. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45893 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:40:45.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a value that provides permanent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45894 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:33:49.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal to read arbitrary local files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45895 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:28:39.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some situations) and the WhoAmI endpoint (e.g., path disclosure). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
CVE ID: CVE-2022-45896 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T18:32:31.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/-
CVE ID: CVE-2022-45897 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T15:40:57.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://Xerox.com - https://gist.github.com/waffl3ss/eb61d38b5c44131d3586578002c63640#file-cve-2022-45897
CVE ID: CVE-2022-45907 State: PUBLISHED Published: 2022-11-26T00:00:00.000Z Last Updated: 2025-04-25T19:16:18.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pytorch/pytorch/issues/88868 - https://github.com/pytorch/pytorch/commit/767f6aa49fe20a2766b9843d01e3b7f7793df6a3
CVE ID: CVE-2022-45908 State: PUBLISHED Published: 2022-11-26T00:00:00.000Z Last Updated: 2025-04-25T19:17:23.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-002.md - https://github.com/PaddlePaddle/Paddle/commit/26c419ca386aeae3c461faf2b828d00b48e908eb
CVE ID: CVE-2022-45909 State: PUBLISHED Published: 2022-11-26T00:00:00.000Z Last Updated: 2025-04-25T19:20:12.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/drachtio/drachtio-server/commit/a63d01854987d9fd846cdc9265af38ee9eb72490 - https://github.com/drachtio/drachtio-server/compare/v0.8.18...v0.8.19 - https://github.com/drachtio/drachtio-server/pull/238
CVE ID: CVE-2022-45910 State: PUBLISHED Published: 2022-12-07T09:50:52.700Z Last Updated: 2025-04-22T21:02:38.711Z Vendors: Apache Software Foundation Products: Apache ManifoldCF Problem Types: CWE-90 Description: Improper neutralization of special elements used in an LDAP query ('LDAP Injection') vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries (DoS, additional queries, filter manipulation) during user lookup, if the username or the domain string are passed to the UserACLs servlet without validation. This issue affects Apache ManifoldCF version 2.23 and prior versions. Additiona
the UserACLs servlet without validation. This issue affects Apache ManifoldCF version 2.23 and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/m693p0dq6jvwwvmy2wnhj6k854z0s444
CVE ID: CVE-2022-45911 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:31:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbitrary JavaScript code in the username field. This occurs before the user logs into the system, which means that even if the attacker executes arbitrary JavaScript, they will not get any sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2022-45912 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:42:35.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Threonic/e90c85e11e1ac925ff57783988779e76
CVE ID: CVE-2022-45913 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:33:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2022-45914 State: PUBLISHED Published: 2022-11-27T00:00:00.000Z Last Updated: 2025-04-29T13:55:26.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ESL (Electronic Shelf Label) protocol, as implemented by (for example) the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospital storage unit, or changing retail pricing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=FQRMNjZVlHg - http://seclists.org/fulldisclosure/2022/Dec/
P Vulnrichment: References: - https://www.youtube.com/watch?v=FQRMNjZVlHg - http://seclists.org/fulldisclosure/2022/Dec/6 - http://packetstormsecurity.com/files/170177/Zhuhai-Suny-Technology-ESL-Tag-Forgery-Replay-Attacks.html
CVE ID: CVE-2022-45915 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T17:29:23.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS before 7.16 allows OS Command Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/ - http://seclists.org/fulldisclosure/2022/Dec/7 - http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
CVE ID: CVE-2022-45916 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T17:28:32.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS before 7.16 allows XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/ - http://seclists.org/fulldisclosure/2022/Dec/7 - http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
CVE ID: CVE-2022-45917 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T17:27:37.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS before 7.16 has an Open Redirect. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/ - http://seclists.org/fulldisclosure/2022/Dec/7 - http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
CVE ID: CVE-2022-45918 State: PUBLISHED Published: 2022-12-07T00:00:00 Last Updated: 2024-08-03T14:24:03.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS before 7.16 allows External Control of File Name or Path. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/ - http://seclists.org/fulldisclosure/2022/Dec/7 - http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html