Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Microsoft Office 2019 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021 Problem Types: Information Disclosure Description: Windows Graphics Component Information Disclosure Vulnerability Additional Analy
es: Information Disclosure Description: Windows Graphics Component Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26934
CVE ID: CVE-2022-26935 State: PUBLISHED Published: 2022-05-10T20:33:53 Last Updated: 2025-01-02T18:57:54.106Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2,
2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Windows WLAN AutoConfig Service Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.
bility Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26935
CVE ID: CVE-2022-26936 State: PUBLISHED Published: 2022-05-10T20:33:55 Last Updated: 2025-01-02T18:57:54.588Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2,
2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Windows Server Service Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/updat
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26936
CVE ID: CVE-2022-26937 State: PUBLISHED Published: 2022-05-10T20:33:56 Last Updated: 2025-01-02T18:57:55.251Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Se
e Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Network File System Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26937
CVE ID: CVE-2022-26938 State: PUBLISHED Published: 2022-05-10T20:33:58 Last Updated: 2025-01-02T18:57:55.943Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Elevation of Privilege Description: Storage Spaces Direct Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26938
CVE ID: CVE-2022-26939 State: PUBLISHED Published: 2022-05-10T20:33:59 Last Updated: 2025-01-02T18:57:56.468Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Elevation of Privilege Description: Storage Spaces Direct Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26939
CVE ID: CVE-2022-26940 State: PUBLISHED Published: 2022-05-10T20:34:01 Last Updated: 2025-01-02T18:57:57.069Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Remote Desktop client for Windows Desktop, Windows Server 2022, Windows 11 version 21H2 Problem Types: Information Disclosure Description: Remote Desktop Protocol Client Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26940
CVE ID: CVE-2022-26941 State: PUBLISHED Published: 2023-10-19T09:35:52.646Z Last Updated: 2024-09-12T20:28:58.903Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:X/IR:X/AR:X/MAV:A/MAC:L/MPR:N/MUI:N/MS:C/MC:H/MI:H/MA:H) Vendors: Motorola Products: Mobile Radio Problem Types: CWE-134 Description: A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitrary code execution inside the teds_app binary, which runs with root privileges. Additional Analyst No
ed to obtain arbitrary code execution inside the teds_app binary, which runs with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2022-26942 State: PUBLISHED Published: 2023-10-19T09:35:24.386Z Last Updated: 2024-08-03T05:18:38.371Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:X/IR:X/AR:X/MAV:L/MAC:L/MPR:H/MUI:N/MS:C/MC:H/MI:H/MA:H) Vendors: Motorola Products: Mobile Radio Problem Types: CWE-822 Description: The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure supervisor level code execution can exploit the issue in order to gain sec
In both modules, an adversary with non-secure supervisor level code execution can exploit the issue in order to gain secure supervisor code execution within the TEE. This constitutes a full break of the TEE module, exposing the device key as well as any TETRA cryptographic keys and the confidential TETRA cryptographic primitives. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-26943 State: PUBLISHED Published: 2023-10-19T09:34:20.646Z Last Updated: 2024-08-03T05:18:38.337Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:A/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: Motorola Products: Mobile Radio Problem Types: CWE-338 Description: The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited boottime pool entropy, an adversary can derive the contents of the ent
nerable to two attacks. First, due to the limited boottime pool entropy, an adversary can derive the contents of the entropy pool by an exhaustive search of possible values, based on an observed authentication challenge. Second, an adversary can use knowledge of the entropy pool to predict authentication challenges. As such, the unit is vulnerable to CVE-2022-24400. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-26944 State: PUBLISHED Published: 2022-06-02T17:34:40 Last Updated: 2024-08-03T05:18:38.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table. NOTE: this issue exists because of an incomplete fix for CVE-2020-10997. Additional Analyst Notes: - CVE Program Container: References: - https://jira.percona.com/browse/PXB-2722 - https://docs.percona.com/percona-xtrabackup/2.4/release-n
iner: References: - https://jira.percona.com/browse/PXB-2722 - https://docs.percona.com/percona-xtrabackup/2.4/release-notes/2.4/2.4.25.html
CVE ID: CVE-2022-26945 State: PUBLISHED Published: 2022-05-25T11:19:48 Last Updated: 2024-08-03T05:18:38.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com - https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
CVE ID: CVE-2022-26947 State: PUBLISHED Published: 2022-03-29T23:33:08 Last Updated: 2024-08-03T05:18:38.391Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and gets executed by the web browser in the context of the vulnerable web application. Additional Analyst Notes:
victim and gets executed by the web browser in the context of the vulnerable web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/general-support-information/tkb-p/information-support - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
CVE ID: CVE-2022-26948 State: PUBLISHED Published: 2022-03-29T23:33:12 Last Updated: 2024-08-03T05:18:38.384Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AC:H/AV:P/A:H/C:H/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/general-support-information/tkb-p/information-support - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-busi
upport-information/tkb-p/information-support - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
CVE ID: CVE-2022-26949 State: PUBLISHED Published: 2022-03-29T23:33:18 Last Updated: 2024-08-03T05:18:38.330Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authenticated malicious user could potentially exploit this vulnerability to gain access to files that should only be allowed by extra privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/general-support-information/tkb-p/information-support - https://www.archerirm.community/t5/secur
.archerirm.community/t5/general-support-information/tkb-p/information-support - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
CVE ID: CVE-2022-26950 State: PUBLISHED Published: 2022-03-29T23:33:23 Last Updated: 2024-08-03T05:18:38.345Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the Archer application without the victims realizing an attack occurred. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.
ms realizing an attack occurred. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/general-support-information/tkb-p/information-support - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
CVE ID: CVE-2022-26951 State: PUBLISHED Published: 2022-03-29T23:33:27 Last Updated: 2024-08-03T05:18:38.375Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer 6.x through 6.10 (6.10.0.0) contains a reflected XSS vulnerability. A remote SAML-unauthenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and gets executed by the web browser in the context of the vulnerable web application. Additional Analyst No
the victim and gets executed by the web browser in the context of the vulnerable web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/general-support-information/tkb-p/information-support - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
CVE ID: CVE-2022-26952 State: PUBLISHED Published: 2022-04-06T00:43:38 Last Updated: 2024-08-03T05:18:38.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page. Additional Analyst Notes: - CVE Program Container: References: - https://hub.digi.com/support/products/infrastructure-management/digi-passport/ - https://github.com/X-C3LL/PoC-CVEs/blob/master/CVE-2022-26952%20%26%20CVE-2022-26953/readme.md - https://hub.digi.com/dp/path=/support/asset/digi-passport-1.5.2-firmware-release-notes/
CVE ID: CVE-2022-26953 State: PUBLISHED Published: 2022-04-06T00:43:31 Last Updated: 2024-08-03T05:18:38.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body. Additional Analyst Notes: - CVE Program Container: References: - https://hub.digi.com/support/products/infrastructure-management/digi-passport/ - https://github.com/X-C3LL/PoC-CVEs/blob/master/CVE-2022-26952%20%26%20CVE-2022-26953/readme.md - https://hub.digi.com/dp/path=/support/asset/digi-pas
-CVEs/blob/master/CVE-2022-26952%20%26%20CVE-2022-26953/readme.md - https://hub.digi.com/dp/path=/support/asset/digi-passport-1.5.2-firmware-release-notes/
CVE ID: CVE-2022-26954 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T18:01:08.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in NopCommerce 4.10 through 4.50.1 allow remote attackers to conduct phishing attacks by redirecting users to attacker-controlled web sites via the returnUrl parameter, processed by the (1) ChangePassword function, (2) SignInCustomerAsync function, (3) SuccessfulAuthentication method, or (4) NopRedirectResultExecutor class. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nopSolutions/nopCommerce/releases - https://gist.git
ontainer: - CISA ADP Vulnrichment: References: - https://github.com/nopSolutions/nopCommerce/releases - https://gist.github.com/adeadfed/baea45138b7eb29e09f6505d56b56413
CVE ID: CVE-2022-26959 State: PUBLISHED Published: 2022-09-16T01:51:08 Last Updated: 2024-08-03T05:18:38.379Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp page in the /northstar/iphone/ directory. Exploitation of the SQL injection vulnerabilities allows full access to the database which contains critical data for o
Exploitation of the SQL injection vulnerabilities allows full access to the database which contains critical data for organization’s that make full use of the software suite. Additional Analyst Notes: - CVE Program Container: References: - https://www.assurainc.com/services/advisory-services/threat-vuln-assessment/ - https://assura.atlassian.net/wiki/spaces/VULNS/pages/1842675717/CVE-2022-26959+Northstar+Club+Management+software+version+6.3+-+Full+Blind+Time-based+SQL+Injection
CVE ID: CVE-2022-26960 State: PUBLISHED Published: 2022-03-21T16:52:38 Last Updated: 2024-08-03T05:18:38.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths. Additional Analyst Notes: - CVE Program Container: References: - https://www.synacktiv.com/publications.html - https://github.com/Studio-42/elFinder/commit/3b758495538a448ac8830ee3559e7fb2c260c6db - https://www.synacktiv.com/publications/elfinder-the-story-of-a-repwning.h
mit/3b758495538a448ac8830ee3559e7fb2c260c6db - https://www.synacktiv.com/publications/elfinder-the-story-of-a-repwning.html
CVE ID: CVE-2022-26964 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T15:44:42.674Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2022-0002
CVE ID: CVE-2022-26965 State: PUBLISHED Published: 2022-03-18T06:33:34 Last Updated: 2024-08-03T05:18:39.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/sN6J_X4mEbY - https://packetstormsecurity.com/files/166336/Pluck-CMS-4.7.16-Shell-Upload.html
CVE ID: CVE-2022-26966 State: PUBLISHED Published: 2022-03-12T21:30:43 Last Updated: 2024-08-03T05:18:39.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e9da0b56fe27206b49f39805f7dcda8a89379062 - https://security.netapp.com/advisory/ntap-20220419-0001/ - https://lists.debian.org/debi
7206b49f39805f7dcda8a89379062 - https://security.netapp.com/advisory/ntap-20220419-0001/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE ID: CVE-2022-26967 State: PUBLISHED Published: 2022-03-12T00:00:00 Last Updated: 2024-08-03T05:18:38.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2138 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-26969 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:53:51.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/blob/8daed9c41baeaf1d08c1e292bf9f0dcef65e48fb/docs/configuration/config-options.md - https://github.com/directus/directus/pull/12022 - https://security.snyk.io/vuln/SNYK-JS-DIRECTUS-2441822 - https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS - https://github.com/directus/directus/releases/tag/v9.7.0