Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0113 State: PUBLISHED Published: 2022-02-11T23:36:03 Last Updated: 2024-08-02T23:18:41.797Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1039885 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/ar
ackage-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0114 State: PUBLISHED Published: 2022-02-11T23:36:05 Last Updated: 2024-08-02T23:18:42.000Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1267627 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VE
7627 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0115 State: PUBLISHED Published: 2022-02-11T23:36:06 Last Updated: 2024-08-02T23:18:41.719Z Vendors: Google Products: Chrome Problem Types: Uninitialized Use Description: Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1268903 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.
list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0116 State: PUBLISHED Published: 2022-02-11T23:36:08 Last Updated: 2024-08-02T23:18:41.612Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1272250 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0117 State: PUBLISHED Published: 2022-02-11T23:36:09 Last Updated: 2024-08-02T23:18:41.803Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1115847 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0118 State: PUBLISHED Published: 2022-02-11T23:36:11 Last Updated: 2024-08-02T23:18:41.596Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1238631 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0120 State: PUBLISHED Published: 2022-02-11T23:36:12 Last Updated: 2024-08-02T23:18:41.669Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1262953 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedo
/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/
CVE ID: CVE-2022-0121 State: PUBLISHED Published: 2022-01-06T02:30:10 Last Updated: 2024-08-02T23:18:41.752Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: hoppscotch Products: hoppscotch/hoppscotch Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hoppscotch hoppscotch/hoppscotch.This issue affects hoppscotch/hoppscotch before 2.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b70a6191-8226-4ac6-b817-cae7332a68ee - https://github.com/hoppscotch/hoppscotch/commit/86ef1a4e143ea5bb0c7b309574127cc39d4faa74
CVE ID: CVE-2022-0122 State: PUBLISHED Published: 2022-01-06T05:00:12 Last Updated: 2024-08-02T23:18:41.696Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: digitalbazaar Products: digitalbazaar/forge Problem Types: CWE-601 Description: forge is vulnerable to URL Redirection to Untrusted Site Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae - https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5e
CVE ID: CVE-2022-0123 State: PUBLISHED Published: 2022-03-28T18:53:06 Last Updated: 2024-08-02T23:18:41.713Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Channel accessible by non-endpoint ('man-in-the-middle') in GitLab Description: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org
these external services. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/296632 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0123.json
CVE ID: CVE-2022-0124 State: PUBLISHED Published: 2022-01-18T16:52:03 Last Updated: 2024-08-02T23:18:41.675Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issue
to slack. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/340176 - https://hackerone.com/reports/1310778 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0124.json
CVE ID: CVE-2022-0125 State: PUBLISHED Published: 2022-01-18T16:52:06 Last Updated: 2024-08-02T23:18:41.803Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not verifying that a maintainer of a project had the right access to import members from a target project. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/
project. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/345564 - https://hackerone.com/reports/1356100 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0125.json
CVE ID: CVE-2022-0128 State: PUBLISHED Published: 2022-01-06T16:45:14 Last Updated: 2024-08-02T23:18:41.963Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: vim is vulnerable to Out-of-bounds Read Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/63f51299-008a-4112-b85b-1e904aadd4ba - https://github.com/vim/vim/commit/d3a117814d6acbf0dca3eff1a7626843b9b3734a - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213256 - http://seclists.or
b/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213256 - http://seclists.org/fulldisclosure/2022/May/35 - https://support.apple.com/kb/HT213343 - http://seclists.org/fulldisclosure/2022/Jul/14 - https://security.gentoo.org/glsa/202208-32
CVE ID: CVE-2022-0129 State: PUBLISHED Published: 2022-01-11T17:10:10 Last Updated: 2024-08-02T23:18:41.751Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee TechCheck Problem Types: CWE-427 Description: Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process was run from. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/?articleId=TS103243
CVE ID: CVE-2022-0130 State: PUBLISHED Published: 2022-01-14T19:11:35 Last Updated: 2024-08-02T23:18:41.726Z Vendors: n/a Products: Tenable.sc Problem Types: Remote Code Execution Description: Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenticated attacker to execute code under special circumstances. An attacker would first have to stage a specific file type in the web server root of the Tenable.sc host prior to remote exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2022-01
CVE ID: CVE-2022-0131 State: PUBLISHED Published: 2022-01-17T09:10:24 Last Updated: 2024-08-02T23:18:41.732Z Vendors: Jimoty, Inc. Products: Jimoty App for Android Problem Types: Use of Hard-coded credentials Description: Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN49047921/index.html
CVE ID: CVE-2022-0132 State: PUBLISHED Published: 2022-01-07T10:10:10 Last Updated: 2024-08-02T23:18:41.958Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: chocobozzz Products: chocobozzz/peertube Problem Types: CWE-918 Description: peertube is vulnerable to Server-Side Request Forgery (SSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/77ec5308-5561-4664-af21-d780df2d1e4b - https://github.com/chocobozzz/peertube/commit/7b54a81cccf6b4c12269e9d6897d608b1a99537a
CVE ID: CVE-2022-0133 State: PUBLISHED Published: 2022-01-07T12:45:12 Last Updated: 2024-08-02T23:18:41.668Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: chocobozzz Products: chocobozzz/peertube Problem Types: CWE-284 Description: peertube is vulnerable to Improper Access Control Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/80aabdc1-89fe-47b8-87ca-9d68107fc0b4 - https://github.com/chocobozzz/peertube/commit/795212f7acc690c88c86d0fab8772f6564d59cb8
CVE ID: CVE-2022-0134 State: PUBLISHED Published: 2022-02-21T10:45:59 Last Updated: 2024-08-02T23:18:41.696Z Vendors: Unknown Products: AnyComment Problem Types: CWE-352 Description: The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fa09ea9b-d5a0-4773-a692-9ff0200bcd85
CVE ID: CVE-2022-0135 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-02T23:18:41.602Z Vendors: n/a Products: virglrenderer Problem Types: CWE-787 Description: An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2037790 - https://security.gentoo.org/glsa/202210-05 - https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
CVE ID: CVE-2022-0136 State: PUBLISHED Published: 2022-03-28T18:53:10 Last Updated: 2024-08-02T23:18:41.630Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the Project Import feature. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/28561 - https://hackerone.com/reports/560658 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0136.json
CVE ID: CVE-2022-0137 State: PUBLISHED Published: 2022-11-14T17:01:45.131Z Last Updated: 2025-04-25T19:53:06.011Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: michaelrsweet Products: htmldoc Problem Types: CWE-119 Description: A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/michaelrsweet/htmldoc/issues/461 - https://github.com/michaelrsweet/htmldoc/commit/71fe87878c9cbc3db429f5e5c70f28e4b3d96e3b
CVE ID: CVE-2022-0138 State: PUBLISHED Published: 2022-02-18T17:50:17.867Z Last Updated: 2025-04-16T16:45:42.169Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Airspan Networks Products: MMP, PTP C-series, PTMP C-series and A5x Problem Types: CWE-502 Description: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-0
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02
CVE ID: CVE-2022-0139 State: PUBLISHED Published: 2022-02-08T18:40:10 Last Updated: 2024-08-02T23:18:41.675Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-416 Description: Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/commit/37897226a1a31f982bfefdc4aeefc2e50355c73c - https://huntr.dev/bounties/3dcb6f40-45cd-403b-929f-db123fde32c0
CVE ID: CVE-2022-0140 State: PUBLISHED Published: 2022-04-12T11:15:20 Last Updated: 2024-08-02T23:18:41.793Z Vendors: Unknown Products: Visual Form Builder Problem Types: CWE-306 Missing Authentication for Critical Function Description: The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9fa2b3b6-2fe3-40f0-8f71-371dd58fe336 - https://www.fortiguard.com/zeroday/FG-VD-21-082
CVE ID: CVE-2022-0141 State: PUBLISHED Published: 2022-04-12T11:15:22 Last Updated: 2024-08-02T23:18:41.711Z Vendors: Unknown Products: Visual Form Builder Problem Types: CWE-352 Description: The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2adc8390-bb19-4adf-9805-e9c462d14d22 - https://www.fortiguard.com/zeroday/FG-VD-21-081
CVE ID: CVE-2022-0142 State: PUBLISHED Published: 2022-04-12T11:15:23 Last Updated: 2024-08-02T23:18:41.999Z Vendors: Unknown Products: Visual Form Builder Problem Types: CWE-1236 Description: The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/03210390-2054-40c0-9508-39d168087878 - https://www.fortiguard.com/zeroday/FG-VD-21-080
CVE ID: CVE-2022-0143 State: PUBLISHED Published: 2022-09-19T21:15:51.349Z Last Updated: 2025-05-29T15:29:12.450Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: ForgeRock Products: LDAP Connector Problem Types: CWE-284 Description: When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://backstage.forgerock.com/knowledge/kb/article/a11380515 - https://bac
ner: - CISA ADP Vulnrichment: References: - https://backstage.forgerock.com/knowledge/kb/article/a11380515 - https://backstage.forgerock.com/downloads/browse/idm/featured/connectors
CVE ID: CVE-2022-0144 State: PUBLISHED Published: 2022-01-11T06:45:10 Last Updated: 2024-08-02T23:18:41.918Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: shelljs Products: shelljs/shelljs Problem Types: CWE-269 Description: shelljs is vulnerable to Improper Privilege Management Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c - https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c
CVE ID: CVE-2022-0145 State: PUBLISHED Published: 2022-03-24T10:35:10 Last Updated: 2024-08-02T23:18:41.722Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: forkcms Products: forkcms/forkcms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b5b8c680-3cd9-4477-bcd9-3a29657ba7ba - https://github.com/forkcms/forkcms/commit/981730f1a3d59b423ca903b1f4bf79b848a1766e
CVE ID: CVE-2022-0147 State: PUBLISHED Published: 2022-03-14T14:41:17 Last Updated: 2024-08-02T23:18:41.797Z Vendors: Unknown Products: Cookie Information | Free GDPR Consent Solution Problem Types: CWE-79 Description: The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2c735365-69c0-4652-b48e-c4a192dfe0d1 - https://plugins.trac.wordpress.org/changeset/2681371
CVE ID: CVE-2022-0148 State: PUBLISHED Published: 2022-02-07T15:47:25 Last Updated: 2024-08-02T23:18:42.011Z Vendors: Unknown Products: All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs – My Sticky Elements Problem Types: CWE-79 Description: The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/37665ee1-c57f-4445-9596-df4f7d72c8cd - https://plugins.trac.wordpress.org/changeset/2654453/mystickyelements