Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-47930 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T14:50:01.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session id, context, or random nonce in the generation of the challenge. This could allow a malicious user or an eavesdropper to replay a valid proof sent in the past. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
esdropper to replay a valid proof sent in the past. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0 - https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b
CVE ID: CVE-2022-47931 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T14:34:40.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: IO FinNet tss-lib before 2.0.0 allows a collision of hash values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0 - https://github.com/IoFinnet/tss-lib/commit/369ec50be1437588a9733443bcb2f15b794601d4 - https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b
CVE ID: CVE-2022-47932 State: PUBLISHED Published: 2022-12-24T00:00:00.000Z Last Updated: 2025-04-15T13:45:02.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/brave/brave-core/commit/e73309665508c17e48a67e302d3ab02a38d3ef50 - https://github.com/brave/brave-core/pull/14211 - https://github.com/brave/brave-browser/issues/24093 - https://hackerone.com/report
hub.com/brave/brave-core/pull/14211 - https://github.com/brave/brave-browser/issues/24093 - https://hackerone.com/reports/1636430
CVE ID: CVE-2022-47933 State: PUBLISHED Published: 2022-12-24T00:00:00.000Z Last Updated: 2025-04-15T13:36:05.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequest_IPFSRedirectWork() in ipfs_redirect_network_delegate_helper.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/brave/brave-core/commit/7ef8cb2f232abdf59ec9c3c99a086a14b972bc56 - https://github.com/brave/brave-core/pull/13989 - h
om/brave/brave-core/commit/7ef8cb2f232abdf59ec9c3c99a086a14b972bc56 - https://github.com/brave/brave-core/pull/13989 - https://github.com/brave/brave-browser/issues/23646 - https://github.com/brave/brave-browser/issues/24378 - https://hackerone.com/reports/1610343
CVE ID: CVE-2022-47934 State: PUBLISHED Published: 2022-12-24T00:00:00.000Z Last Updated: 2025-04-15T13:34:56.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/brave/brave-core/commit/82d8e39043e691e0492519126437275511ee87e8 - https://github.com/brave/brave-browser/issues/24211 - https://github.com/brave/brave-browser/issu
19126437275511ee87e8 - https://github.com/brave/brave-browser/issues/24211 - https://github.com/brave/brave-browser/issues/25106 - https://github.com/brave/brave-core/pull/14313 - https://hackerone.com/reports/1646204
CVE ID: CVE-2022-47935 State: PUBLISHED Published: 2023-01-10T11:39:47.238Z Last Updated: 2025-04-08T20:04:25.738Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities, Solid Edge Problem Types: CWE-119 Description: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19078) Additional Analyst Notes: - CVE Pro
vulnerability to execute code in the context of the current process. (ZDI-CAN-19078) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-936212.pdf
CVE ID: CVE-2022-47936 State: PUBLISHED Published: 2023-02-14T10:36:21.369Z Last Updated: 2025-03-20T20:07:30.206Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Parasolid V35.1 Problem Types: CWE-121 Description: A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vuln
rsions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf
CVE ID: CVE-2022-47937 State: PUBLISHED Published: 2023-05-15T09:20:23.238Z Last Updated: 2024-10-10T20:47:45.503Z Vendors: Apache Software Foundation Products: org.apache.sling.commons.json Problem Types: CWE-20 Description: Improper input validation in the Apache Sling Commons JSON bundle allows an attacker to trigger unexpected errors by supplying specially-crafted input. The org.apache.sling.commons.json bundle has been deprecated as of March 2017 and should not be used anymore. Consumers are encouraged to consider the Apache Sling Commons Johnzon OSGi bundle provided by the Apache Sling project, but may of course use other JSON libraries. Additional Analyst Notes: - CVE Program Containe
y the Apache Sling project, but may of course use other JSON libraries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://issues.apache.org/jira/browse/SLING-6536 - https://github.com/apache/sling-org-apache-sling-commons-johnzon - https://lists.apache.org/thread/sws7z50x47gv0c38q4kx6ktqrvrrg1pm - https://www.openwall.com/lists/oss-security/2023/05/15/2
CVE ID: CVE-2022-47938 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:20:08.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 - https://github.com/torvalds/linux/commit/824d4f64c20093275f72fc8101394d75ff6a249e - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=824d4f64c20093275f72fc8101394d75ff6a249e - https:
s://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=824d4f64c20093275f72fc8101394d75ff6a249e - https://www.zerodayinitiative.com/advisories/ZDI-22-1689/ - http://www.openwall.com/lists/oss-security/2022/12/23/10
CVE ID: CVE-2022-47939 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-14T18:38:27.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 - https://github.com/torvalds/linux/commit/cf6531d98190fa2cf92a6d8bbc8af0a4740a223c - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf6531d98190fa2cf92a6d8bbc8af0a4740a223c - http://ww
/git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf6531d98190fa2cf92a6d8bbc8af0a4740a223c - http://www.openwall.com/lists/oss-security/2022/12/23/10 - https://www.zerodayinitiative.com/advisories/ZDI-22-1690/ - https://www.secpod.com/blog/zero-day-server-message-block-smb-server-in-linux-kernel-5-15-has-a-critical-vulnerability-patch-ksmbd-immediately/
CVE ID: CVE-2022-47940 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-14T18:37:29.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.18 - https://github.com/torvalds/linux/commit/158a66b245739e15858de42c0ba60fcf3de9b8e6 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=158a66b245739e15858de42c0ba60fcf3de9b8e6 -
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=158a66b245739e15858de42c0ba60fcf3de9b8e6 - http://www.openwall.com/lists/oss-security/2022/12/23/10
CVE ID: CVE-2022-47941 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:59:03.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions, aka a memory leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 - https://github.com/torvalds/linux/commit/aa7253c2393f6dcd6a1468b0792f6da76edad917 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa7253c2393f6dcd6a1
a1468b0792f6da76edad917 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa7253c2393f6dcd6a1468b0792f6da76edad917 - http://www.openwall.com/lists/oss-security/2022/12/23/10 - https://www.zerodayinitiative.com/advisories/ZDI-22-1687/
CVE ID: CVE-2022-47942 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:57:25.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 - https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/
linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f0541186e9ad1b62accc9519cc2b7a7240272a7 - http://www.openwall.com/lists/oss-security/2022/12/23/10 - https://www.zerodayinitiative.com/advisories/ZDI-22-1688/
CVE ID: CVE-2022-47943 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:55:30.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 - https://github.com/torvalds/linux/commit/ac60778b87e45576d7bfdbd6f53df902654e6f09 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac60778b87e45
45576d7bfdbd6f53df902654e6f09 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac60778b87e45576d7bfdbd6f53df902654e6f09 - http://www.openwall.com/lists/oss-security/2022/12/23/10 - https://www.zerodayinitiative.com/advisories/ZDI-22-1691/ - https://security.netapp.com/advisory/ntap-20230216-0006/
CVE ID: CVE-2022-47945 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:52:17.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tttang.com/archive/1865/ - https://github.com/top-think/framework/commit/c4acb8b4001b98a0078eda25840d33e295a7f099 - https://github.co
chive/1865/ - https://github.com/top-think/framework/commit/c4acb8b4001b98a0078eda25840d33e295a7f099 - https://github.com/top-think/framework/compare/v6.0.13...v6.0.14
CVE ID: CVE-2022-47946 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:50:55.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
mplementation of io_sqpoll_wait_sq. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2022/12/22/2 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.161&id=0f544353fec8e717d37724d95b92538e1de79e86 - http://www.openwall.com/lists/oss-security/2022/12/27/1
CVE ID: CVE-2022-47949 State: PUBLISHED Published: 2022-12-24T00:00:00.000Z Last Updated: 2025-04-14T18:36:52.377Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoo
efore 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PabloMK7/ENLBufferPwn
CVE ID: CVE-2022-47950 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T15:48:20.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://l
actively developed). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.net/bugs/1998625 - https://security.openstack.org/ossa/OSSA-2023-001.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00021.html - https://www.debian.org/security/2023/dsa-5327
CVE ID: CVE-2022-47951 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T16:49:31.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
in unauthorized access to potentially sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.net/bugs/1996188 - https://security.openstack.org/ossa/OSSA-2023-002.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html - https://www.debian.org/security/2023/dsa-5336 - https://www.debian.org/security/2023/dsa-5338 - https://www.debian.org/security/2023/dsa-5337
CVE ID: CVE-2022-47952 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-10T19:16:28.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates that a file exists. NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556 fix design was based on the premise that "we will report back to the user that the open() failed but the user has no way of knowing why it
d on the premise that "we will report back to the user that the open() failed but the user has no way of knowing why it failed"; however, in many realistic cases, there are no plausible reasons for failing except that the file does not exist. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lxc/lxc/blob/0b83d71c2c8f3bac9503f894cd84584f79258bb3/lxc.spec.in#L274 - https://github.com/lxc/lxc/blob/0b83d71c2c8f3bac9503f894cd84584f79258bb3/src/lxc/cmd/lxc_user_nic.c#L1085-L1104 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1783591/comments/45 - https://github.com/MaherAzzouzi/CVE-2022-47952 - https://lists.debian.org/debian-lts-ann
/lxc/+bug/1783591/comments/45 - https://github.com/MaherAzzouzi/CVE-2022-47952 - https://lists.debian.org/debian-lts-announce/2023/08/msg00025.html
CVE ID: CVE-2022-47965 State: PUBLISHED Published: 2024-01-10T22:03:10.131Z Last Updated: 2025-06-20T15:34:44.546Z Vendors: Apple Products: macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-47966 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-10-21T23:15:28.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelf
Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. Serv
before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/santuario-xml-security-java/tags?after=1.4.6 - https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html - http://packetstormsecurity.com/files/1
=1.4.6 - https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html - http://packetstormsecurity.com/files/170882/Zoho-ManageEngine-ServiceDesk-Plus-14003-Remote-Code-Execution.html - http://packetstormsecurity.com/files/170925/ManageEngine-ADSelfService-Plus-Unauthenticated-SAML-Remote-Code-Execution.html - http://packetstormsecurity.com/files/170943/Zoho-ManageEngine-Endpoint-Central-MSP-10.1.2228.10-Remote-Code-Execution.html - https://blog.viettelcybersecurity.com/saml-show-stopper/ - https://github.com/horizon3ai/CVE-2022-47966 - https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/ - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-250a - ht
ageengine-cve-2022-47966-technical-deep-dive/ - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-250a - https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis
CVE ID: CVE-2022-47967 State: PUBLISHED Published: 2023-01-10T11:39:48.279Z Last Updated: 2025-04-08T14:21:08.390Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge Problem Types: CWE-119 Description: A vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.si