Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eges, information disclosure, and data tampering. The scope of the impact may extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28183 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T05:48:37.258Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-28184 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T05:48:37.053Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-284 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353 - htt
nal Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-28185 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T05:48:37.342Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to denial of service and data tampering. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-28186 State: PUBLISHED Published: 2022-05-17T19:15:33 Last Updated: 2024-08-03T05:48:37.318Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-20 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service or data tampering. Additional Analyst Notes: - CVE Program Container: References:
y, which may lead to denial of service or data tampering. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28187 State: PUBLISHED Published: 2022-05-17T19:15:34 Last Updated: 2024-08-03T05:48:37.392Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-772 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where the memory management software does not release a resource after its effective lifetime has ended, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28188 State: PUBLISHED Published: 2022-05-17T19:15:35 Last Updated: 2024-08-03T05:48:37.264Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-20 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.
y, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28189 State: PUBLISHED Published: 2022-05-17T19:15:37 Last Updated: 2024-08-03T05:48:37.626Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer dereference may lead to a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28190 State: PUBLISHED Published: 2022-05-17T19:15:38 Last Updated: 2024-08-03T05:48:37.539Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-20 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where improper input validation can cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28191 State: PUBLISHED Published: 2022-05-17T19:15:40 Last Updated: 2024-08-03T05:48:37.411Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Problem Types: CWE-400 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28192 State: PUBLISHED Published: 2022-05-17T19:15:41 Last Updated: 2024-08-03T05:48:37.479Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Problem Types: CWE-416 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequence, which requires elevated privileges. Additional Analyst Notes: - CVE Program Container: References: -
s out of sequence, which requires elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5353
CVE ID: CVE-2022-28193 State: PUBLISHED Published: 2022-04-27T17:57:17 Last Updated: 2024-08-03T05:48:37.466Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX Problem Types: CWE-20 Description: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, loss of integrity, limited denial of service, and some impact to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - ht
nial of service, and some impact to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5343
CVE ID: CVE-2022-28194 State: PUBLISHED Published: 2022-04-27T17:57:27 Last Updated: 2024-08-03T05:48:37.482Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX Problem Types: CWE-119 Description: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/a
t to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5343
CVE ID: CVE-2022-28195 State: PUBLISHED Published: 2022-04-27T17:57:35 Last Updated: 2024-08-03T05:48:37.504Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX Problem Types: CWE-20 Description: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components. Addi
l of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5343
CVE ID: CVE-2022-28196 State: PUBLISHED Published: 2022-04-27T17:57:44 Last Updated: 2024-08-03T05:48:37.325Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 NX, Jetson TX2 series Problem Types: CWE-20 Description: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service. The scope of impact can extend to other components. A
ecution, limited loss of Integrity, and limited denial of service. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5343
CVE ID: CVE-2022-28197 State: PUBLISHED Published: 2022-04-27T17:57:53 Last Updated: 2024-08-03T05:48:37.465Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX Problem Types: CWE-190 Description: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow. This difficult-to-exploit vulnerability may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can ex
n of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5343
CVE ID: CVE-2022-28198 State: PUBLISHED Published: 2022-04-29T20:25:08 Last Updated: 2024-08-03T05:48:37.437Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Omniverse Nucleus, NVIDIA Omniverse Cache Problem Types: CWE-706 Description: NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5342
CVE ID: CVE-2022-28199 State: PUBLISHED Published: 2022-09-01T16:20:10 Last Updated: 2024-08-03T05:48:37.435Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA FLARE Problem Types: CWE-1284 Description: NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5389 - http://www.openwall.com/lists/oss-securi
ainer: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5389 - http://www.openwall.com/lists/oss-security/2022/09/06/2 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlx5-jbPCrqD8
CVE ID: CVE-2022-28200 State: PUBLISHED Published: 2022-07-02T00:20:10 Last Updated: 2024-08-03T05:48:37.214Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX A100 Problem Types: CWE-119 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id
ts. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5367
CVE ID: CVE-2022-28201 State: PUBLISHED Published: 2022-09-19T00:00:00 Last Updated: 2024-08-03T05:48:37.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T297571 - https://blog.legoktm.com/2022/07/03/a-belated-writeup-of-cve-2022-28201-in-mediawiki.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html - https://www.debian
e-2022-28201-in-mediawiki.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html - https://www.debian.org/security/2022/dsa-5246
CVE ID: CVE-2022-28202 State: PUBLISHED Published: 2022-03-30T00:00:00 Last Updated: 2024-08-03T05:48:37.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T297543 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PT4CHJKOQOVMI65TSNZRNV6FIWU7SGZD/ - https://lists.debian.org/debian-lts-announce/2022/0
0lists.fedoraproject.org/message/PT4CHJKOQOVMI65TSNZRNV6FIWU7SGZD/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html - https://www.debian.org/security/2022/dsa-5246 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-28203 State: PUBLISHED Published: 2022-09-19T00:00:00 Last Updated: 2024-08-03T05:48:37.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor as a condition can result in a very long running query. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T297731 - https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html - https://www.debian.org/security/2022/dsa-5246
CVE ID: CVE-2022-28204 State: PUBLISHED Published: 2022-09-19T20:48:09.000Z Last Updated: 2025-05-29T15:39:18.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T297754
CVE ID: CVE-2022-28205 State: PUBLISHED Published: 2022-03-30T00:00:00 Last Updated: 2024-08-03T05:48:37.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.wikimedia.org/r/q/Ic6ba1a37b78df5b342ceeba4c1493dbde583b81f - https://phabricator.wikimedia.org/T302248 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-28206 State: PUBLISHED Published: 2022-03-30T00:00:00 Last Updated: 2024-08-03T05:48:37.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T294256 - https://gerrit.wikimedia.org/r/q/I84be9cd3639b8ab0e037a4ec2d3f2f478f0989c5 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-28209 State: PUBLISHED Published: 2022-03-30T00:00:00 Last Updated: 2024-08-03T05:48:37.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission in the AntiSpoof extension is incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T304126 - https://gerrit.wikimedia.org/r/q/Id8c4e2e336695ce70ccdf8a51ad729bf4a99f8f7 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-28213 State: PUBLISHED Published: 2022-04-12T16:11:27 Last Updated: 2024-08-03T05:48:37.547Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-112 Description: When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/
: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3055044 - http://packetstormsecurity.com/files/167046/SAP-BusinessObjects-Intelligence-4.3-XML-Injection.html
CVE ID: CVE-2022-28214 State: PUBLISHED Published: 2022-05-11T14:54:42 Last Updated: 2024-08-03T05:48:37.497Z Vendors: SAP SE Products: SAP BusinessObjects Enterprise (Central Management Server) Problem Types: CWE-312 Description: During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication credentials are being exposed in Sysmon event logs. This Information Disclosure could cause a high impact on systems’ Confidentiality, Integrity, and Availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/no
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/2998510
CVE ID: CVE-2022-28215 State: PUBLISHED Published: 2022-04-12T16:11:33 Last Updated: 2024-08-03T05:48:37.392Z Vendors: SAP SE Products: SAP NetWeaver ABAP Server and ABAP Platform Problem Types: CWE-601 Description: SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3165333
CVE ID: CVE-2022-28216 State: PUBLISHED Published: 2022-04-12T16:11:28 Last Updated: 2024-08-03T05:48:37.559Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (BI Workspace) Problem Types: CWE-79 Description: SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation, an attacker can access certain reports causing a limited impact on confidentiality of the application data. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/
pplication data. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3150845
CVE ID: CVE-2022-28217 State: PUBLISHED Published: 2022-06-13T16:04:01 Last Updated: 2024-08-03T05:48:37.297Z Vendors: SAP SE Products: SAP NetWeaver (EP Web Page Composer) Problem Types: CWE-918 Description: Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary to exploit unprotected XML parking at endpoints, and a possibility to conduct SSRF attacks that could compromise system�s Availability by causing system to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.suppo
References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3148377
CVE ID: CVE-2022-28218 State: PUBLISHED Published: 2022-04-26T17:49:47 Last Updated: 2024-08-03T05:48:37.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA). Additional Analyst Notes: - CVE Program Container: References: - https://ciphermail.com - https://www.ciphermail.com/webmail-release-notes.html - https://lists.ciphermail.com/hyperkitty/list/security%40lists.ciphermail.com/thread/WRWHQUACXWXQA42KXXQQ6EEP6SBBM5BM/