Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28142 State: PUBLISHED Published: 2022-03-29T12:30:58 Last Updated: 2024-08-03T05:48:37.099Z Vendors: Jenkins project Products: Jenkins Proxmox Plugin Description: Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS issues. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2081 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28143 State: PUBLISHED Published: 2022-03-29T12:30:59 Last Updated: 2024-08-03T05:48:37.160Z Vendors: Jenkins project Products: Jenkins Proxmox Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/
s. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2082 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28144 State: PUBLISHED Published: 2022-03-29T12:31:01 Last Updated: 2024-08-03T05:48:36.863Z Vendors: Jenkins project Products: Jenkins Proxmox Plugin Description: Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www
ollback with attacker-specified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2082 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28145 State: PUBLISHED Published: 2022-03-29T12:31:03 Last Updated: 2024-08-03T05:48:37.289Z Vendors: Jenkins project Products: Jenkins Continuous Integration with Toad Edge Plugin Description: Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1892 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28146 State: PUBLISHED Published: 2022-03-29T12:31:05 Last Updated: 2024-08-03T05:48:36.756Z Vendors: Jenkins project Products: Jenkins Continuous Integration with Toad Edge Plugin Description: Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2633 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28147 State: PUBLISHED Published: 2022-03-29T12:31:07 Last Updated: 2024-08-03T05:48:37.427Z Vendors: Jenkins project Products: Jenkins Continuous Integration with Toad Edge Plugin Description: A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2635 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28148 State: PUBLISHED Published: 2022-03-29T12:31:08 Last Updated: 2024-08-03T05:48:37.874Z Vendors: Jenkins project Products: Jenkins Continuous Integration with Toad Edge Plugin Description: The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2654 - http://www.openwall.com/lists/oss-security/2022/03/29
tps://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2654 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28149 State: PUBLISHED Published: 2022-03-29T12:31:10 Last Updated: 2024-08-03T05:48:37.384Z Vendors: Jenkins project Products: Jenkins Job and Node ownership Plugin Description: Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2285 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28150 State: PUBLISHED Published: 2022-03-29T12:31:11 Last Updated: 2024-08-03T05:48:36.847Z Vendors: Jenkins project Products: Jenkins Job and Node ownership Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2062%20%281%29 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28151 State: PUBLISHED Published: 2022-03-29T12:31:13 Last Updated: 2024-08-03T05:48:37.176Z Vendors: Jenkins project Products: Jenkins Job and Node ownership Plugin Description: A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2062%20%281%29 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28152 State: PUBLISHED Published: 2022-03-29T12:31:14 Last Updated: 2024-08-03T05:48:36.816Z Vendors: Jenkins project Products: Jenkins Job and Node ownership Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2062%20%282%29 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28153 State: PUBLISHED Published: 2022-03-29T12:31:16 Last Updated: 2024-08-03T05:48:37.236Z Vendors: Jenkins project Products: Jenkins SiteMonitor Plugin Description: Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1932 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28154 State: PUBLISHED Published: 2022-03-29T12:31:18 Last Updated: 2024-08-03T05:48:37.426Z Vendors: Jenkins project Products: Jenkins Coverage/Complexity Scatter Plot Plugin Description: Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1899 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28155 State: PUBLISHED Published: 2022-03-29T12:31:19 Last Updated: 2024-08-03T05:48:37.266Z Vendors: Jenkins project Products: Jenkins Pipeline: Phoenix AutoTest Plugin Description: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1897 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28156 State: PUBLISHED Published: 2022-03-29T12:31:21 Last Updated: 2024-08-03T05:48:37.350Z Vendors: Jenkins project Products: Jenkins Pipeline: Phoenix AutoTest Plugin Description: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2683 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28157 State: PUBLISHED Published: 2022-03-29T12:31:22 Last Updated: 2024-08-03T05:48:37.133Z Vendors: Jenkins project Products: Jenkins Pipeline: Phoenix AutoTest Plugin Description: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2684 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28158 State: PUBLISHED Published: 2022-03-29T12:31:24 Last Updated: 2024-08-03T05:48:37.486Z Vendors: Jenkins project Products: Jenkins Pipeline: Phoenix AutoTest Plugin Description: A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2685 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28159 State: PUBLISHED Published: 2022-03-29T12:31:25 Last Updated: 2024-08-03T05:48:37.379Z Vendors: Jenkins project Products: Jenkins Tests Selector Plugin Description: Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2262 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28160 State: PUBLISHED Published: 2022-03-29T12:31:27 Last Updated: 2024-08-03T05:48:37.311Z Vendors: Jenkins project Products: Jenkins Tests Selector Plugin Description: Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2338 - http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE ID: CVE-2022-28161 State: PUBLISHED Published: 2022-05-09T16:33:41 Last Updated: 2024-08-03T05:48:37.343Z Vendors: n/a Products: Brocade SANNav Problem Types: Exposure of Sensitive Information Description: An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need to have valid user credentials and turn on debug mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisor
Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1840
CVE ID: CVE-2022-28162 State: PUBLISHED Published: 2022-05-09T16:31:49 Last Updated: 2024-08-03T05:48:37.091Z Vendors: n/a Products: Brocade SANNav Problem Types: Cleartext Transmission of Sensitive Information Description: Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1841
CVE ID: CVE-2022-28163 State: PUBLISHED Published: 2022-05-06T16:01:38 Last Updated: 2024-08-03T05:48:37.289Z Vendors: n/a Products: Brocade SANNav Problem Types: SQL Injection Description: In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1842
CVE ID: CVE-2022-28164 State: PUBLISHED Published: 2022-05-06T16:01:05 Last Updated: 2024-08-03T05:48:36.887Z Vendors: n/a Products: Brocade SANNav Problem Types: Inadequate Encryption Strength Description: Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1843
CVE ID: CVE-2022-28165 State: PUBLISHED Published: 2022-05-06T16:08:34 Last Updated: 2024-08-03T05:48:37.237Z Vendors: n/a Products: Brocade SANNav Problem Types: Improper Access Control Description: A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because restrictions are not performed on Server side to ensure the user has required permission before processing requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.br
d permission before processing requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1844
CVE ID: CVE-2022-28166 State: PUBLISHED Published: 2022-06-27T17:51:51 Last Updated: 2024-08-03T05:48:37.389Z Vendors: n/a Products: Brocade SANnav Problem Types: Inadequate Encryption Strength Description: In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers (ssl-static-key-ciphers) on ports 443 & 18082. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1977 - https://security.netapp.com/advisory/ntap-20220627-0001/
CVE ID: CVE-2022-28167 State: PUBLISHED Published: 2022-06-27T17:51:56 Last Updated: 2024-08-03T05:48:37.349Z Vendors: n/a Products: Brocade SANnav Problem Types: Plaintext Storage of a Password Description: Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1978 - https://security.netapp.com/advisory/ntap-20220627-0002/
CVE ID: CVE-2022-28168 State: PUBLISHED Published: 2022-06-27T17:52:02 Last Updated: 2024-08-03T05:48:37.470Z Vendors: n/a Products: Brocade SANnav Problem Types: Inadequate Encryption Strength. Description: In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1979 - https://security.netapp.com/advisory/ntap-20220627-0003/
CVE ID: CVE-2022-28169 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T16:45:57.898Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Privilege escalation Description: Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypt
tor session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator's authorization header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2075 - https://security.netapp.com/advisory/ntap-20230127-0001/
CVE ID: CVE-2022-28170 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T16:56:22.036Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Insertion of Sensitive Information Into Debugging Code Description: Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2076 - https://security.netapp.c
com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2076 - https://security.netapp.com/advisory/ntap-20230127-0002/
CVE ID: CVE-2022-28171 State: PUBLISHED Published: 2022-06-27T17:48:51.569864Z Last Updated: 2024-09-16T17:03:49.464Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: hikvision Products: DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D, DS-A71024/48R-CVS,DS-A72024/48R-CVS Problem Types: CWE-78 Description: The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device. Additional Analyst Notes: - CVE Program Con
commands by sending messages with malicious commands to the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/ - http://packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html - http://packetstormsecurity.com/files/173653/Hikvision-Hybrid-SAN-Ds-a71024-SQL-Injection.html
CVE ID: CVE-2022-28172 State: PUBLISHED Published: 2022-06-27T17:50:40.922725Z Last Updated: 2024-09-17T01:10:46.622Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: hikvision Products: DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D, DS-A71024/48R-CVS,DS-A72024/48R-CVS Problem Types: CWE-79 Description: The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device. Additional Analyst Notes: - CVE Program Container: Referen
ding messages with malicious commands to the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/ - http://packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html
CVE ID: CVE-2022-28173 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-16T14:41:08.395Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: hikvision Products: DS-3WF0AC-2NT, DS-3WF01C-2N/O Problem Types: CWE-284 Description: The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/access-control-
ISA ADP Vulnrichment: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/access-control-vulnerability-in-some-hikvision-wireless-bridge-products/
CVE ID: CVE-2022-28181 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T05:48:37.362Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components. Additional Analyst Notes: - CVE Pr
sclosure, and data tampering. The scope of the impact may extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-28182 State: PUBLISHED Published: 2022-05-17T19:15:27 Last Updated: 2024-08-03T05:48:37.490Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components. Additional Ana