Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
fixed on the `main` branch of the GitHub repository, with 1.1.0 named as a patched version. Admins can update the theme component through the admin UI. As a workaround, admins can temporarily disable discourse-mermaid-theme-component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse-mermaid-theme-component/security/advisories/GHSA-8437-hgcm-p3q3 - https://github.com/discourse/discourse-mermaid-theme-component/pull/14 - https://github.com/discourse/discourse-mermaid-theme-component/commit/c10bc4a08bf865cee20e5d5dffba535762813f0f
CVE ID: CVE-2022-46181 State: PUBLISHED Published: 2022-12-29T18:36:46.603Z Last Updated: 2025-04-10T18:02:15.686Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: gotify Products: server Problem Types: CWE-79 Description: Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Versions prior to 2.2.2 contain an XSS vulnerability that allows authenticated users to upload .html files. An attacker could execute client side scripts **if** another user opened a link. The attacker could potentially take over the account of the user that clicked the link. The Gotify UI won't natively expose such a malicious link, so an attack
r the account of the user that clicked the link. The Gotify UI won't natively expose such a malicious link, so an attacker has to get the user to open the malicious link in a context outside of Gotify. The vulnerability has been fixed in version 2.2.2. As a workaround, you can block access to non image files via a reverse proxy in the `./image` directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gotify/server/security/advisories/GHSA-xv6x-456v-24xh - https://github.com/gotify/server/pull/534 - https://github.com/gotify/server/pull/535
CVE ID: CVE-2022-46182 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46183 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46184 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46185 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46186 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46187 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46188 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46189 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46190 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46191 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46192 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46193 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46194 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46195 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46196 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46197 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46198 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46199 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46200 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46201 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46202 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46203 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46204 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46205 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46206 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46207 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46208 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46209 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46210 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46211 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46212 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46213 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46214 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46215 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46216 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46217 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46218 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46219 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46220 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46221 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46222 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46223 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46224 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46225 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46226 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46227 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46228 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46229 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46230 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46231 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46232 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46233 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46234 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46235 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46236 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46237 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46238 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46239 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46240 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46241 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46242 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46243 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46244 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-46255 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:58:08.645Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-22 Description: An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. A check was added within Pages to ensure the working directory is clean before unpacking new content to prevent an arbitrary file overwrite bug. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes
was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1
CVE ID: CVE-2022-46256 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:55:55.601Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-22 Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the instance. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5 and 3.7.2. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17 - https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12 - https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9 - https://docs.github.com/en/enterprise-server%403.6/admin/release-notes#3.6.5 - https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.2
CVE ID: CVE-2022-46257 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T14:52:44.927Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-200 Description: An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resulting in the repository names being shown in the UI. To exploit this vulnerability, an attacker would need access to the GHES instance, permissions to modify GitHub Actions runner groups, and successfully guess the obfuscated ID of private repositories. This vuln
ions to modify GitHub Actions runner groups, and successfully guess the obfuscated ID of private repositories. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7 and was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17 - https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12 - https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9 - https://docs.github.com/en/enterprise-server%403.6/admi
ithub.com/en/enterprise-server%403.5/admin/release-notes#3.5.9 - https://docs.github.com/en/enterprise-server%403.6/admin/release-notes#3.6.5
CVE ID: CVE-2022-46258 State: PUBLISHED Published: 2023-01-09T00:00:00.000Z Last Updated: 2025-04-09T13:51:10.568Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-863 Description: An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped token with read/write access to modify Action Workflow files without a Workflow scope. The Create or Update file contents API should enforce workflow scope. This vulnerability affected all versions of GitHub Enterprise Server prior to version 3.7 and was fixed in versions 3.3.16, 3.4.11, 3.5.8, and 3.6.4. This vulnerability was reported via the GitHub Bug Bounty program. Additio
in versions 3.3.16, 3.4.11, 3.5.8, and 3.6.4. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.16 - https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.11 - https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.8 - https://docs.github.com/en/enterprise-server%403.6/admin/release-notes#3.6.4
CVE ID: CVE-2022-46265 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:42:50.973Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:T/RC:C) Vendors: Siemens Products: Polarion ALM Problem Types: CWE-74 Description: A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host header injection vulnerability that could allow an attacker to spoof a Host header information and redirect users to malicious websites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-792594.pdf
CVE ID: CVE-2022-46279 State: PUBLISHED Published: 2023-05-10T13:17:01.352Z Last Updated: 2025-01-27T18:04:27.372Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Retail Edge android application Problem Types: information disclosure, CWE-284 Description: Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html
CVE ID: CVE-2022-46280 State: PUBLISHED Published: 2023-07-21T20:25:39.451Z Last Updated: 2024-08-03T14:31:44.429Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-824 Description: A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1670
CVE ID: CVE-2022-46282 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T16:04:18.711Z Vendors: OMRON Corporation Products: CX-Drive Problem Types: Use After Free Description: Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file, Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU92689335/index.html
CVE ID: CVE-2022-46283 State: REJECTED Published: N/A Last Updated: 2025-02-19T19:38:49.658Z Description: No description available.
CVE ID: CVE-2022-46285 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T14:43:37.619Z Vendors: n/a Products: libXpm Problem Types: CWE-835 Description: A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2160092 - https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9 - https://lists.x.org/archives/xorg-announce/2023-January/003
/gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9 - https://lists.x.org/archives/xorg-announce/2023-January/003312.html - https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/a3a7c6dcc3b629d7650148 - https://lists.debian.org/debian-lts-announce/2023/06/msg00021.html - http://www.openwall.com/lists/oss-security/2023/10/03/1 - http://www.openwall.com/lists/oss-security/2023/10/03/10
CVE ID: CVE-2022-46286 State: PUBLISHED Published: 2023-03-21T22:26:53.822Z Last Updated: 2025-01-17T18:54:25.847Z Vendors: VISAM Products: VBASE Problem Types: CWE-611 Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05
CVE ID: CVE-2022-46287 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:38:56.991Z Vendors: Japan Construction Information Center Products: DENSHI NYUSATSU CORE SYSTEM Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf - https://jvn.jp/en/jp/JVN96321933/index.html
CVE ID: CVE-2022-46288 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:37:40.692Z Vendors: Japan Construction Information Center Products: DENSHI NYUSATSU CORE SYSTEM Problem Types: Open Redirect Description: Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf - https://jvn.jp/en/jp/JVN96321933/index.html
CVE ID: CVE-2022-46289 State: PUBLISHED Published: 2023-07-21T20:25:41.920Z Last Updated: 2025-11-04T19:14:16.554Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-122 Description: Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms calculation wrap-around, leading to a small buffer allocation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
, leading to a small buffer allocation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665
CVE ID: CVE-2022-46290 State: PUBLISHED Published: 2023-07-21T20:25:42.003Z Last Updated: 2025-11-04T19:14:17.650Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-122 Description: Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that stores the coordinates does not check its index against nAtoms Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
inates does not check its index against nAtoms Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665
CVE ID: CVE-2022-46291 State: PUBLISHED Published: 2023-07-21T20:25:41.101Z Last Updated: 2025-11-04T19:14:18.737Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file format Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ability.This vulnerability affects the MSI file format Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE ID: CVE-2022-46292 State: PUBLISHED Published: 2023-07-21T20:25:41.190Z Last Updated: 2025-11-04T19:14:19.871Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section Additional Analyst No
ability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666