Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1431 State: PUBLISHED Published: 2022-05-10T20:27:54 Last Updated: 2024-08-03T00:03:06.272Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to cause uncontrolled resource consumption. Additional Analyst Notes: - CVE Program Container: References: - https://git
to cause uncontrolled resource consumption. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/262724 - https://hackerone.com/reports/996850 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1431.json
CVE ID: CVE-2022-1432 State: PUBLISHED Published: 2022-05-18T10:10:10 Last Updated: 2024-08-03T00:03:06.351Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: octoprint Products: octoprint/octoprint Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/cb545c63-a3c1-4d57-8f06-e4593ab389bf - https://github.com/octoprint/octoprint/commit/6d259d7e6f5b0de9a1c762831537a386e53978d3
CVE ID: CVE-2022-1433 State: PUBLISHED Published: 2022-05-11T14:27:44 Last Updated: 2024-08-03T00:03:06.378Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute. Additional Analyst
tial payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/357930 - https://hackerone.com/reports/1528829 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1433.json
CVE ID: CVE-2022-1434 State: PUBLISHED Published: 2022-05-03T15:15:23.387791Z Last Updated: 2024-09-17T04:19:38.052Z Vendors: OpenSSL Products: OpenSSL Problem Types: Incorrect MAC key Description: The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such that the modified data would still pass the MAC integrity check. Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0 endpoint will always be rejected by the recipient and the conn
ta sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0 endpoint will always be rejected by the recipient and the connection will fail at that point. Many application protocols require data to be sent from the client to the server first. Therefore, in such a case, only an OpenSSL 3.0 server would be impacted when talking to a non-OpenSSL 3.0 client. If both endpoints are OpenSSL 3.0 then the attacker could modify data being sent in both directions. In this case both clients and servers could be affected, regardless of the application protocol. Note that in the absence of an attacker this bug means that an OpenSSL 3.0 endpoint communicating with a non-OpenSSL 3.0 endpoint will fail to compl
an attacker this bug means that an OpenSSL 3.0 endpoint communicating with a non-OpenSSL 3.0 endpoint will fail to complete the handshake when using this ciphersuite. The confidentiality of data is not impacted by this issue, i.e. an attacker cannot decrypt data that has been encrypted using this ciphersuite - they can only modify it. In order for this attack to work both endpoints must legitimately negotiate the RC4-MD5 ciphersuite. This ciphersuite is not compiled by default in OpenSSL 3.0, and is not available within the default provider or the default ciphersuite list. This ciphersuite will never be used if TLSv1.3 has been negotiated. In order for an OpenSSL 3.0 endpoint to use this cip
This ciphersuite will never be used if TLSv1.3 has been negotiated. In order for an OpenSSL 3.0 endpoint to use this ciphersuite the following must have occurred: 1) OpenSSL must have been compiled with the (non-default) compile time option enable-weak-ssl-ciphers 2) OpenSSL must have had the legacy provider explicitly loaded (either through application code or via configuration) 3) The ciphersuite must have been explicitly added to the ciphersuite list 4) The libssl security level must have been set to 0 (default is 1) 5) A version of SSL/TLS below TLSv1.3 must have been negotiated 6) Both endpoints must negotiate the RC4-MD5 ciphersuite in preference to any others that both endpoints have
egotiated 6) Both endpoints must negotiate the RC4-MD5 ciphersuite in preference to any others that both endpoints have in common Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20220503.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7d56a74a96828985db7354a55227a511615f732b - https://security.netapp.com/advisory/ntap-20220602-0009/ - https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
CVE ID: CVE-2022-1435 State: PUBLISHED Published: 2022-05-16T14:31:03 Last Updated: 2024-08-03T00:03:06.273Z Vendors: Unknown Products: WPCargo Track & Trace Problem Types: CWE-79 Description: The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ef5aa8a7-23a7-4ce0-bb09-d9c986386114
CVE ID: CVE-2022-1436 State: PUBLISHED Published: 2022-05-16T14:31:05 Last Updated: 2024-08-03T00:03:06.267Z Vendors: Unknown Products: WPCargo Track & Trace Problem Types: CWE-79 Description: The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d5c6f894-6ad1-46f4-bd77-17ad9234cfc3
CVE ID: CVE-2022-1437 State: PUBLISHED Published: 2022-04-22T14:00:15 Last Updated: 2024-08-03T00:03:06.283Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/af6c3e9e-b7df-4d80-b48f-77fdd17b4038 - https://github.com/radareorg/radare
ner: References: - https://huntr.dev/bounties/af6c3e9e-b7df-4d80-b48f-77fdd17b4038 - https://github.com/radareorg/radare2/commit/669a404b6d98d5db409a5ebadae4e94b34ef5136
CVE ID: CVE-2022-1438 State: PUBLISHED Published: 2023-09-20T13:34:22.495Z Last Updated: 2024-09-24T15:06:01.676Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers Problem Types: CWE-79 Description: A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
g (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:1043 - https://access.redhat.com/errata/RHSA-2023:1044 - https://access.redhat.com/errata/RHSA-2023:1045 - https://access.redhat.com/errata/RHSA-2023:1047 - https://access.redhat.com/errata/RHSA-2023:1049 - https://access.redhat.com/security/cve/CVE-2022-1438 - https://bugzilla.redhat.com/show_bug.cgi?id=2031904
CVE ID: CVE-2022-1439 State: PUBLISHED Published: 2022-04-22T16:30:14 Last Updated: 2024-08-03T00:03:06.181Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that runs without user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/86f6a762-0f3d-443d-a676-20f8496907e0 - ht
alyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/86f6a762-0f3d-443d-a676-20f8496907e0 - https://github.com/microweber/microweber/commit/ad3928f67b2cd4443f4323d858b666d35a919ba8
CVE ID: CVE-2022-1440 State: PUBLISHED Published: 2022-04-22T17:30:13 Last Updated: 2024-08-03T00:03:06.306Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: yarkeev Products: yarkeev/git-interface Problem Types: CWE-78 Description: Command Injection vulnerability in git-interface@2.1.1 in GitHub repository yarkeev/git-interface prior to 2.1.2. If both are provided by user input, then the use of a `--upload-pack` command-line argument feature of git is also supported for `git clone`, which would then allow for any operating system command to be spawned by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounti
to be spawned by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/cdc25408-d3c1-4a9d-bb45-33b12a715ca1 - https://github.com/yarkeev/git-interface/commit/f828aa790016fee3aa667f7b44cf94bf0aa8c60d
CVE ID: CVE-2022-1441 State: PUBLISHED Published: 2022-04-25T00:00:00 Last Updated: 2024-08-03T00:03:06.255Z Vendors: n/a Products: gpac Problem Types: CWE-119 Description: MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content read from `bs` is controllable by user, so is the length, which causes a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2175 - https://github.com/gpac/gpac/commit/3dbe11b37d65c8472
ontainer: References: - https://github.com/gpac/gpac/issues/2175 - https://github.com/gpac/gpac/commit/3dbe11b37d65c8472faf0654410068e5500b3adb - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-1442 State: PUBLISHED Published: 2022-05-10T19:30:12.000Z Last Updated: 2025-05-05T16:42:28.370Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: xpeedstudio Products: Metform Elementor Contact Form Builder Problem Types: CWE-862 Missing Authorization Description: The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3.
e that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/04a46249-b5b2-4082-b520-cdc4a1370bb1?source=cve - https://plugins.trac.wordpress.org/changeset/2711944/metform/trunk/core/forms/action.php - https://gist.github.com/Xib3rR4dAr/6e6c6e5fa1f8818058c7f03de1eda6bf
CVE ID: CVE-2022-1443 State: REJECTED Published: N/A Last Updated: 2024-08-19T15:06:36.478Z Description: No description available.
CVE ID: CVE-2022-1444 State: PUBLISHED Published: 2022-04-23T21:20:10 Last Updated: 2024-08-03T00:03:06.253Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-416 Description: heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b438a940-f8a4-4872-b030-59bdd1ab72aa - https://github.com/radareorg/radare2/commit/14189710859c27981adb4c2c2aed2863c1859ec5
CVE ID: CVE-2022-1445 State: PUBLISHED Published: 2022-04-24T14:30:12 Last Updated: 2024-08-03T00:03:06.250Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-79 Description: Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f4420149-5236-4051-a458-5d4f1d5b7abd - https://github.com/snipe/snipe-it/commit/f623d05d0c3487ae24c4f13907e4709484e5bf41
CVE ID: CVE-2022-1451 State: PUBLISHED Published: 2022-04-24T20:50:16 Last Updated: 2024-08-03T00:03:06.292Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-788 Description: Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html). Additional Analyst Notes: - CVE
ils see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html). Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/229a2e0d-9e5c-402f-9a24-57fa2eb1aaa7 - https://github.com/radareorg/radare2/commit/0927ed3ae99444e7b47b84e43118deb10fe37529
CVE ID: CVE-2022-1452 State: PUBLISHED Published: 2022-04-24T20:50:10 Last Updated: 2024-08-03T00:03:06.295Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-125 Description: Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html). Additional Analyst Notes: - C
etails see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html). Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c8f4c2de-7d96-4ad4-857a-c099effca2d6 - https://github.com/radareorg/radare2/commit/ecc44b6a2f18ee70ac133365de0e509d26d5e168
CVE ID: CVE-2022-1453 State: PUBLISHED Published: 2022-05-10T19:29:20.000Z Last Updated: 2025-05-05T16:42:18.137Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: davidfcarr Products: RSVPMaker Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5. Add
or unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6031edec-4274-4e42-9e3a-ce0c94958b17?source=cve - https://github.com/davidfcarr/rsvpmaker/commit/bfb189f49af7ab0d34499a2da772e3266f72167d - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1453 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2714389%40rsvpmaker&new=2714389%40rsvpmaker&sfp_email=&sfph_mail=
CVE ID: CVE-2022-1455 State: PUBLISHED Published: 2022-05-16T14:31:07 Last Updated: 2024-08-03T00:03:06.275Z Vendors: Unknown Products: Call Now Button Problem Types: CWE-79 Description: The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8267046e-870e-4ccd-b920-340233ed3b93
CVE ID: CVE-2022-1456 State: PUBLISHED Published: 2022-05-30T08:35:47 Last Updated: 2024-08-03T00:03:06.277Z Vendors: Unknown Products: Poll Maker Problem Types: CWE-79 Description: The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privilege users such as admin to perform Store Cross-Site Scripting attack even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1f41fc5c-18d0-493d-9a7d-8b521ab49f85
CVE ID: CVE-2022-1457 State: PUBLISHED Published: 2022-04-25T09:40:10 Last Updated: 2024-08-03T00:03:06.274Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: neorazorx Products: neorazorx/facturascripts Problem Types: CWE-79 Description: Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies, allowing them to perform any action allowed by the us
Attackers can masquerade as authorized users via session cookies, allowing them to perform any action allowed by the user account. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8c80caa0-dc89-43f2-8f5f-db02d2669046 - https://github.com/neorazorx/facturascripts/commit/b3e7527d1e100898c15fec067825b6bc738613df
CVE ID: CVE-2022-1458 State: PUBLISHED Published: 2022-04-25T09:50:10 Last Updated: 2024-08-03T00:03:06.266Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/78674078-0796-4102-a81e-f699cd6981b0 - https://github.com/openemr/openemr/commit/31f08005e53b17d1bc921d23f7ee774930ad416d
CVE ID: CVE-2022-1459 State: PUBLISHED Published: 2022-04-25T09:55:10 Last Updated: 2024-08-03T00:03:06.273Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-1118 Description: Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/9023ca9b-a601-4e5d-8952-640c60d029f1 - https://github.com/openemr/openemr/commit/8f8a97724c0e8fcc4096b4b30af9aaf064ada45a
CVE ID: CVE-2022-1460 State: PUBLISHED Published: 2022-05-11T14:45:11 Last Updated: 2024-08-03T00:03:06.291Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a pipeline in the context of another user. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/g
ne in the context of another user. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/118782 - https://hackerone.com/reports/755078 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1460.json
CVE ID: CVE-2022-1461 State: PUBLISHED Published: 2022-04-25T10:15:12 Last Updated: 2024-08-03T00:03:06.297Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-1220 Description: Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/690a8ec5-64fc-4180-9f1f-c3c599bae0a9 - https://github.com/openemr/openemr/commit/3af1f4a28a8df0e446043232214ed08cc8e0889d
CVE ID: CVE-2022-1462 State: PUBLISHED Published: 2022-05-31T00:00:00 Last Updated: 2024-08-03T00:03:06.282Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2078466 - https://lists.debian.org/debian-lts-announce/2022/10/msg
rences: - https://bugzilla.redhat.com/show_bug.cgi?id=2078466 - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html - https://seclists.org/oss-sec/2022/q2/155
CVE ID: CVE-2022-1463 State: PUBLISHED Published: 2022-05-10T19:37:41.000Z Last Updated: 2025-02-13T20:42:52.167Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpdevelop Products: Booking Calendar Problem Types: CWE-502 Description: The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode in versions up to, and including, 9.1. This could be exploited by subscriber-level users and above to call arbitrary PHP objects on a vulnerable site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/blog/2022/04/php-object-injection-in-booking-c
ntainer: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/blog/2022/04/php-object-injection-in-booking-calendar-plugin/