Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42863 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:44:53.338Z Vendors: Apple Products: tvOS, watchOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - htt
DP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - https://support.apple.com/en-us/HT213537 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/28 - http://seclists.org/fulldisclosure/2022/Dec/27 - http://www.openwall.com/lists/oss-security/2022/12/26/1 - https://security.gentoo.org/glsa/202305-32
CVE ID: CVE-2022-42864 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-23T19:59:46.015Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://supp
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213531 - https://support.apple.com/en-us/HT213536 - https://support.apple.com/en-us/HT213534 - https://support.apple.com/en-us/HT213533 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/21 - http://seclists.org/fulldisclosure/2022/Dec/25 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/24 - http://seclists.org/fulldisclosure/2022/
g/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/24 - http://seclists.org/fulldisclosure/2022/Dec/27
CVE ID: CVE-2022-42865 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:46:26.843Z Vendors: Apple Products: tvOS, watchOS Problem Types: An app may be able to bypass Privacy preferences Description: This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - http://se
ple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/27 - https://support.apple.com/kb/HT213534
CVE ID: CVE-2022-42866 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:44:42.007Z Vendors: Apple Products: tvOS, watchOS Problem Types: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/27
CVE ID: CVE-2022-42867 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:43:08.737Z Vendors: Apple Products: tvOS, watchOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https
Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - https://support.apple.com/en-us/HT213537 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/28 - http://seclists.org/fulldisclosure/2022/Dec/27 - http://www.openwall.com/lists/oss-security/2022/12/26/1 - https://security.gentoo.org/glsa/202305-32
CVE ID: CVE-2022-42878 State: PUBLISHED Published: 2023-05-10T13:16:43.137Z Last Updated: 2025-01-27T18:10:24.124Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: information disclosure, CWE-395 Description: Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00
ner: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html
CVE ID: CVE-2022-42879 State: PUBLISHED Published: 2023-11-14T19:04:22.757Z Last Updated: 2024-08-30T17:57:43.884Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) Arc(TM) Control software Problem Types: denial of service, CWE-395 Description: NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01020.html
CVE ID: CVE-2022-42880 State: PUBLISHED Published: 2023-06-13T13:50:38.125Z Last Updated: 2024-10-10T17:27:33.935Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Ali Irani Products: Auto Upload Images Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ali Irani Auto Upload Images plugin <= 3.3 versions allows Stored Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/auto-upload-images/wordpress-auto-upload-images-plugin-3-3-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss
s-auto-upload-images-plugin-3-3-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-42882 State: PUBLISHED Published: 2023-11-07T17:11:34.853Z Last Updated: 2024-09-04T16:06:10.771Z Vendors: Shambix Products: Simple CSV/XLS Exporter Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a through 1.5.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-csv-xls-exporter/wordpress-simple-csv-xls-exporter-plugin-1-5-8-authenticated-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-42883 State: PUBLISHED Published: 2022-11-18T21:46:42.880Z Last Updated: 2025-02-20T19:51:55.724Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ExpressTech Products: Quiz And Survey Master (WordPress plugin) Problem Types: CWE-200 Description: Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-10-sensitive-information-disclosure-vulnerability?_s_id=cve
CVE ID: CVE-2022-42884 State: PUBLISHED Published: 2024-01-17T18:17:27.087Z Last Updated: 2025-05-23T16:01:42.232Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: ThemeinProgress Products: WIP Custom Login Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wip-custom-login/wordpress-wip-custom-login-plugin-1-2-7-multiple-broken-access-control-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-42885 State: PUBLISHED Published: 2023-07-21T20:25:40.259Z Last Updated: 2024-08-03T13:19:05.211Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-824 Description: A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022
Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1668
CVE ID: CVE-2022-42888 State: PUBLISHED Published: 2022-12-06T20:46:30.638Z Last Updated: 2025-02-20T19:48:14.894Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Reputeinfosystems Products: ARMember Problem Types: CWE-269 Description: Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember/wordpress-armember-premium-plugin-5-5-1-unauth-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2022-42889 State: PUBLISHED Published: 2022-10-13T00:00:00 Last Updated: 2024-11-20T16:19:41.416Z Vendors: Apache Software Foundation Products: Apache Commons Text Problem Types: Unexpected variable interpolation Description: Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or c
rough 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default. Additional Analyst Notes: - CV
e to Apache Commons Text 1.10.0, which disables the problematic interpolators by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om - http://www.openwall.com/lists/oss-security/2022/10/13/4 - http://www.openwall.com/lists/oss-security/2022/10/18/1 - https://security.netapp.com/advisory/ntap-20221020-0004/ - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0022 - https://security.gentoo.org/glsa/202301-05 - http://seclists.org/fulldisclosure/2023/Feb/3 - http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html - http:/
http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html - http://packetstormsecurity.com/files/176650/Apache-Commons-Text-1.9-Remote-Code-Execution.html
CVE ID: CVE-2022-42890 State: PUBLISHED Published: 2022-10-25T00:00:00 Last Updated: 2024-08-03T13:19:05.216Z Vendors: Apache Software Foundation Products: Apache XML Graphics Problem Types: Remote code execution via batik scripting Description: A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly - http://www.openwall.com/lists/oss-security/2022/10/25/3 - https://lists.debian.org/debian-lts-annou
on008wtzhosbtxjwly - http://www.openwall.com/lists/oss-security/2022/10/25/3 - https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html - https://www.debian.org/security/2022/dsa-5264 - https://security.gentoo.org/glsa/202401-11
CVE ID: CVE-2022-42891 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T19:57:20.771Z Vendors: Siemens Products: syngo Dynamics Problem Types: CWE-73 Description: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697
CVE ID: CVE-2022-42892 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:40:44.703Z Vendors: Siemens Products: syngo Dynamics Problem Types: CWE-23 Description: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow directory listing in any folder accessible to the account assigned to the website’s application pool. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697
CVE ID: CVE-2022-42893 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:39:48.150Z Vendors: Siemens Products: syngo Dynamics Problem Types: CWE-73 Description: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697
CVE ID: CVE-2022-42894 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:38:51.901Z Vendors: Siemens Products: syngo Dynamics Problem Types: CWE-918 Description: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM credentials as well as local service enumeration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697
CVE ID: CVE-2022-42895 State: PUBLISHED Published: 2022-11-23T14:11:33.340Z Last Updated: 2025-04-21T13:46:05.829Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Linux Products: Linux Kernel Problem Types: CWE-824 Description: There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/co
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e - https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e
CVE ID: CVE-2022-42896 State: PUBLISHED Published: 2022-11-23T14:11:56.811Z Last Updated: 2025-04-21T13:45:57.600Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Linux Products: Linux Kernel Problem Types: CWE-416 Description: There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/c
oximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 - https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4
CVE ID: CVE-2022-42897 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T17:55:18.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Remote_Injection_Vulnerability_in_Array_VPN_Product_ID-11961_%20V2.1.pdf - https://support.arraynetwor
Security_Advisory_Remote_Injection_Vulnerability_in_Array_VPN_Product_ID-11961_%20V2.1.pdf - https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/fieldnotices.html
CVE ID: CVE-2022-42898 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T18:33:09.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web.mit.ed
milar bug." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web.mit.edu/kerberos/advisories/ - https://www.samba.org/samba/security/CVE-2022-42898.html - https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583 - https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c - https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt - https://web.mit.edu/kerberos/krb5-1.19/ - https://bugzilla.samba.org/show_bug.cgi?id=15203 - https://security.netapp.com/advisory/ntap-20230216-0008/ - https://security.netapp.com/advisory/ntap-20230223-0001/ - https://security.gentoo.org/glsa/202309-06 - https://security.gentoo.o
ecurity.netapp.com/advisory/ntap-20230223-0001/ - https://security.gentoo.org/glsa/202309-06 - https://security.gentoo.org/glsa/202310-06
CVE ID: CVE-2022-42899 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T17:43:16.698Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/legal/common-vulner
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0017/
CVE ID: CVE-2022-42900 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T17:41:40.786Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/legal/common-vulnerability-exposure-be
Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0019/