Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41979 State: PUBLISHED Published: 2023-05-10T13:17:13.480Z Last Updated: 2025-01-24T17:35:45.866Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) DCM software Problem Types: escalation of privilege, CWE-693 Description: Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00806.html
CVE ID: CVE-2022-41980 State: PUBLISHED Published: 2022-11-08T18:34:38.860359Z Last Updated: 2024-09-16T23:11:35.679Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Carlos Doral Products: Mantenimiento web (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mantenimiento-web/wordpress-mantenimiento-web-plugin-0-13-auth-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/mantenimiento-web/
CVE ID: CVE-2022-41981 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-14T18:52:50.659Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelli
rability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1628
CVE ID: CVE-2022-41982 State: PUBLISHED Published: 2023-05-10T13:16:37.989Z Last Updated: 2025-01-27T18:12:05.455Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VTune(TM) Profiler software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00771.html
CVE ID: CVE-2022-41983 State: PUBLISHED Published: 2022-10-19T21:26:09.588Z Last Updated: 2025-05-08T18:08:24.000Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-319 Description: On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even with an SSL Profile applied. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/articl
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K31523465
CVE ID: CVE-2022-41984 State: PUBLISHED Published: 2023-08-11T02:36:58.992Z Last Updated: 2024-10-02T14:02:17.944Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition Problem Types: denial of service, CWE-693 Description: Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/securit
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html
CVE ID: CVE-2022-41985 State: PUBLISHED Published: 2023-05-10T15:23:52.853Z Last Updated: 2025-01-24T18:05:37.345Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Weston Embedded Products: uC-FTPs Problem Types: CWE-303 Description: An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00. A specially crafted set of network packets can lead to authentication bypass and denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulne
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1680 - https://github.com/weston-embedded/uC-FTPs/pull/1
CVE ID: CVE-2022-41986 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T16:14:08.390Z Vendors: Internet Initiative Japan Inc. Products: IIJ SmartKey Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=jp.ad.iij.smartkey2 - https://jvn.jp/en/jp/JVN74534998/index.html
CVE ID: CVE-2022-41987 State: PUBLISHED Published: 2023-05-25T10:13:51.245Z Last Updated: 2025-01-08T21:59:33.545Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: LearningTimes Products: BadgeOS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in LearningTimes BadgeOS plugin <= 3.7.1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/badgeos/wordpress-badgeos-plugin-3-7-1-6-multiple-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41988 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-14T19:11:45.555Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-125 Description: An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnera
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1643 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33
CVE ID: CVE-2022-41989 State: PUBLISHED Published: 2023-01-18T00:30:13.790Z Last Updated: 2025-01-16T22:00:32.860Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Sewio Products: RTLS Studio Problem Types: CWE-787 Description: Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during communication. This allows an attacker to send an exceedingly long payload, resulting in an out-of-bounds write to cause a denial-of-service condition or code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/us
ution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01
CVE ID: CVE-2022-41990 State: PUBLISHED Published: 2024-01-17T16:18:58.872Z Last Updated: 2025-05-23T16:01:55.316Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Vinoj Cardoza Products: 3D Tag Cloud Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cardoza-3d-tag-cloud/wordpress-3d-tag-cloud-plugin-3-8-stored-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability?_s_id=cv
press-3d-tag-cloud-plugin-3-8-stored-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41991 State: PUBLISHED Published: 2023-01-26T21:24:35.543Z Last Updated: 2025-03-05T19:28:05.087Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-16
gram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1639
CVE ID: CVE-2022-41992 State: PUBLISHED Published: 2022-12-19T10:00:54.974Z Last Updated: 2025-04-15T18:38:21.849Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: PowerISO Products: PowerISO Problem Types: CWE-787 Description: A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1644
CVE ID: CVE-2022-41993 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:58:14.571Z Vendors: Japan Construction Information Center Products: DENSHI NYUSATSU CORE SYSTEM Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf - https://jvn.jp/en/jp/JVN96321933/index.html
CVE ID: CVE-2022-41994 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:28:32.166Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://basercms.net/security/JVN_53682526 - https://jvn.jp/en/jp/JVN53682526/index.html
CVE ID: CVE-2022-41995 State: PUBLISHED Published: 2025-01-02T14:51:05.557Z Last Updated: 2025-01-03T18:57:49.774Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Galleryape Products: Gallery Images Ape Problem Types: CWE-862 Description: Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gallery-images-ape/vulnerability/wordpress-gallery-images-ape-plugin-2-2-8-auth-broken-access-control-vulnera
ess/plugin/gallery-images-ape/vulnerability/wordpress-gallery-images-ape-plugin-2-2-8-auth-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-41996 State: PUBLISHED Published: 2022-10-27T16:51:42.567Z Last Updated: 2025-02-20T19:58:04.580Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ThemeFusion Products: Avada (premium WordPress theme) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin installation/activation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/avada/wordpress-avada-premium-theme-7-8-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://them
ability/avada/wordpress-avada-premium-theme-7-8-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://theme-fusion.com/documentation-assets/avada/changelog.txt - https://themeforest.net/item/avada-responsive-multipurpose-theme/2833226
CVE ID: CVE-2022-41997 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:01.157Z Description: No description available.
CVE ID: CVE-2022-41998 State: PUBLISHED Published: 2023-05-10T13:17:12.476Z Last Updated: 2025-01-27T18:00:47.539Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DCM software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00806.html
CVE ID: CVE-2022-41999 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-14T19:11:14.162Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-476 Description: A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1
ogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1635 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33
CVE ID: CVE-2022-42000 State: PUBLISHED Published: 2022-11-15T14:24:50.697Z Last Updated: 2025-04-28T20:13:51.117Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hallo Welt! GmbH Products: BlueSpice Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-04
CVE ID: CVE-2022-42001 State: PUBLISHED Published: 2022-11-15T14:24:50.942Z Last Updated: 2025-04-29T15:51:06.904Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hallo Welt! GmbH Products: BlueSpice Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-05
CVE ID: CVE-2022-42002 State: PUBLISHED Published: 2022-09-30T23:53:19 Last Updated: 2024-08-03T12:56:39.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/blog/graphql-security-static-analysis-snyk-code/ - https://github.com/lane711/sonicjs/tags
CVE ID: CVE-2022-42003 State: PUBLISHED Published: 2022-10-02T00:00:00 Last Updated: 2024-08-03T12:56:39.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FasterXML/jackson-databind/issues/3590 - https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5
ckson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020 - https://security.gentoo.org/glsa/202210-21 - https://www.debian.org/security/2022/dsa-5283 - https://security.netapp.com/advisory/ntap-20221124-0004/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
CVE ID: CVE-2022-42004 State: PUBLISHED Published: 2022-10-02T00:00:00 Last Updated: 2024-08-03T12:56:39.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FasterXML/jackson-databind/issues/3582 - https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88 - https://bugs.chromium.org/p/oss-fuzz/
b.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490 - https://security.gentoo.org/glsa/202210-21 - https://www.debian.org/security/2022/dsa-5283 - https://security.netapp.com/advisory/ntap-20221118-0008/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
CVE ID: CVE-2022-42009 State: PUBLISHED Published: 2023-07-12T09:58:19.752Z Last Updated: 2024-10-04T13:49:38.984Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Apache Ambari Problem Types: CWE-917 Description: SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/6xf477ttz1oxmg0bx0tpdoz2mlqd7sbc
CVE ID: CVE-2022-42010 State: PUBLISHED Published: 2022-10-09T00:00:00.000Z Last Updated: 2025-06-09T15:06:45.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/dbus/dbus/-/issues/418 - https://www.openwall.com/lists/oss-security/2022/10/06/1 - https://lists.fedoraproject.org/archives/list/package-ann
8 - https://www.openwall.com/lists/oss-security/2022/10/06/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQCSLMCK2XGX23R2DKW2MSAICQAK6MT2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG/ - https://security.gentoo.org/glsa/202305-08
CVE ID: CVE-2022-42011 State: PUBLISHED Published: 2022-10-09T00:00:00.000Z Last Updated: 2025-06-09T15:05:41.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/dbus/dbus/-/issues/413 - https://www.openwall.com/lists/oss-security/2022/10/06/1 - https://lists.fedorapr
eedesktop.org/dbus/dbus/-/issues/413 - https://www.openwall.com/lists/oss-security/2022/10/06/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQCSLMCK2XGX23R2DKW2MSAICQAK6MT2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG/ - https://security.gentoo.org/glsa/202305-08
CVE ID: CVE-2022-42012 State: PUBLISHED Published: 2022-10-09T00:00:00.000Z Last Updated: 2025-06-09T15:04:43.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/dbus/dbus/-/issues/417 - https://www.openwall.com/lists/oss-security/2022/10/06/1 - https://lists.fedoraproject.org/archives/li
us/-/issues/417 - https://www.openwall.com/lists/oss-security/2022/10/06/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQCSLMCK2XGX23R2DKW2MSAICQAK6MT2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG/ - https://security.gentoo.org/glsa/202305-08
CVE ID: CVE-2022-42021 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T15:42:19.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/623085881/bug_report/blob/main/vendors/mayuri_k/Best%20Student%20Result%20Management%20System/SQLi-1.md