Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2549 State: PUBLISHED Published: 2022-07-27T14:51:57 Last Updated: 2024-08-03T00:39:08.111Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c93083dc-177c-4ba0-ba83-9d7fb29a5537 - https://github.com/gpac/gpac/commit/0102c5d4db7fdbf08b5b591b2a6264de33867a07
CVE ID: CVE-2022-2550 State: PUBLISHED Published: 2022-07-27T14:52:32 Last Updated: 2024-08-03T00:39:08.090Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-78 Description: OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6ab4384d-bcbe-4d98-bf67-35c3535fc5c7 - https://github.com/hestiacp/hestiacp/commit/3d4c309cf138943cfd1e71ae51556406987aa4bf
CVE ID: CVE-2022-2551 State: PUBLISHED Published: 2022-08-22T15:03:52 Last Updated: 2024-08-03T00:39:08.049Z Vendors: Unknown Products: Duplicator – WordPress Migration Plugin Problem Types: CWE-425 Description: The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site backup without authenticating. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f27d753e-861a-4d8d-9b9a-6c99a8a7ebe0 - https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2551
CVE ID: CVE-2022-2552 State: PUBLISHED Published: 2022-08-22T15:04:02 Last Updated: 2024-08-03T00:39:08.064Z Vendors: Unknown Products: Duplicator Problem Types: CWE-862 Missing Authorization, CWE-306 Missing Authentication for Critical Function Description: The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698 - https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552
CVE ID: CVE-2022-2553 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T00:39:08.049Z Vendors: n/a Products: Booth Problem Types: CWE-287 Description: The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ClusterLabs/booth/commit/35bf0b7b048d715f671eb68974fb6b4af6528c67 - https://www.debian.org/security/2022/dsa-5194 - https://lists.fedoraproject.org/archives/list/package-annou
4af6528c67 - https://www.debian.org/security/2022/dsa-5194 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4T4TTXAABVUCMPUL7XQ2PH5EYYOOQZY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHDOFX7NQFH3UGZZA3SGW5SVMDDHIUVD/
CVE ID: CVE-2022-2554 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T00:39:08.043Z Vendors: Unknown Products: Enable Media Replace Problem Types: CWE-22 Description: The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5872f4bf-f423-4ace-b8b6-d4cc4f6ca8d9
CVE ID: CVE-2022-2555 State: PUBLISHED Published: 2022-08-22T15:04:12 Last Updated: 2024-08-03T00:39:07.995Z Vendors: Unknown Products: Yotpo Reviews for WooCommerce (Unofficial) Problem Types: CWE-352 Description: The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7ec9e493-bc48-4a5d-8c7e-34beaba892ae
CVE ID: CVE-2022-2556 State: PUBLISHED Published: 2022-08-29T17:15:36 Last Updated: 2024-08-03T00:39:07.985Z Vendors: Unknown Products: Mailchimp for WooCommerce Problem Types: CWE-918 Description: The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f2a59eaa-6b44-4098-912f-823289cf33b0
CVE ID: CVE-2022-2557 State: PUBLISHED Published: 2022-08-22T15:04:22 Last Updated: 2024-08-03T00:39:08.000Z Vendors: Unknown Products: Team – WordPress Team Members Showcase Plugin Problem Types: CWE-22 Description: The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c043916a-92c9-4d02-8cca-1a90e5382b7e
CVE ID: CVE-2022-2558 State: PUBLISHED Published: 2022-08-22T15:04:40 Last Updated: 2024-08-03T00:39:08.163Z Vendors: Unknown Products: Simple Job Board Problem Types: CWE-200 Description: The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6e096269-eedc-4614-88ce-6795c4adf32f
CVE ID: CVE-2022-2559 State: PUBLISHED Published: 2022-08-29T17:15:36 Last Updated: 2024-08-03T00:39:08.111Z Vendors: Unknown Products: Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin Problem Types: CWE-89 Description: The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec
CVE ID: CVE-2022-2560 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:39:04.144Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: EnterpriseDT Products: CompleteFTP Problem Types: CWE-22 Description: This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files in the co
upplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files in the context of SYSTEM. Was ZDI-CAN-17481. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-1032/
CVE ID: CVE-2022-2561 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:40:18.116Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OPC Labs Products: QuickOPC Problem Types: CWE-502 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OPC Labs QuickOPC 2022.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XML files in Connectivity Explorer. The issue results from the lack of proper validation of user-supplied data, which can result in dese
nectivity Explorer. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16596. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-1031/ - https://kb.opclabs.com/ZDI-CAN-16596_Connectivity_Explorer_file_vulnerability
CVE ID: CVE-2022-2563 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T19:23:13.459Z Vendors: Unknown Products: Tutor LMS – eLearning and online course solution Problem Types: CWE-79 Description: The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/98cd761c-7527-4224-965d-d34472b5c19f
CVE ID: CVE-2022-2564 State: PUBLISHED Published: 2022-07-28T15:21:20 Last Updated: 2024-11-20T16:14:46.191Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: automattic Products: automattic/mongoose Problem Types: CWE-1321 Description: Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js#L88-L141 - https://huntr.dev/bounties/055be524-9296-4b2f-b68d-6d5b810d1ddd - https://github.com/automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8 - htt
96-4b2f-b68d-6d5b810d1ddd - https://github.com/automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8 - https://github.com/Automattic/mongoose/compare/6.4.5...6.4.6
CVE ID: CVE-2022-2565 State: PUBLISHED Published: 2022-09-05T12:35:21 Last Updated: 2024-08-03T00:39:08.081Z Vendors: Unknown Products: Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP Problem Types: CWE-79 Description: The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d89eff7d-a3e6-4876-aa0e-6d17e206af83
CVE ID: CVE-2022-2566 State: PUBLISHED Published: 2022-09-23T11:10:14.367Z Last Updated: 2025-04-21T13:49:02.102Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: FFMPEG Products: FFMPEG Problem Types: CWE-122 Description: A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a small allocation with `av_calloc()`. An attacker can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfc
er can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfcce3cf6a87c3e6e05 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FFmpeg/FFmpeg/commit/c953baa084607dd1d84c3bfcce3cf6a87c3e6e05
CVE ID: CVE-2022-2567 State: PUBLISHED Published: 2022-09-19T14:00:54 Last Updated: 2024-08-03T00:39:08.088Z Vendors: Unknown Products: Form Builder CP Problem Types: CWE-79 Description: The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dfa21dde-a9fc-4a35-9602-c3fde907ca54
CVE ID: CVE-2022-2568 State: PUBLISHED Published: 2022-08-18T19:28:20 Last Updated: 2024-08-03T00:39:07.967Z Vendors: n/a Products: Red Hat Ansible Automation Platform Problem Types: Improper Privilege Management Description: A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2108653
CVE ID: CVE-2022-2569 State: PUBLISHED Published: 2022-08-24T15:16:15.430Z Last Updated: 2025-04-16T16:11:59.819Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ARC Informatique Products: PcVue 12 OAuth web service configuration, PcVue 15 OAuth web service configuration Problem Types: CWE-312 Description: The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0
CVE ID: CVE-2022-2570 State: REJECTED Published: N/A Last Updated: 2023-07-02T21:50:55.061387Z Description: No description available.
CVE ID: CVE-2022-2571 State: PUBLISHED Published: 2022-08-01T14:12:09 Last Updated: 2024-08-03T00:39:08.137Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2e5a1dc4-2dfb-4e5f-8c70-e1ede21f3571 - https://github.com/vim/vim/commit/a6f9e300161f4cb54713da22f65b261595e8e614
CVE ID: CVE-2022-2572 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T03:37:49.070Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Broken Access Control Description: In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2022/sa2022-23/
CVE ID: CVE-2022-2574 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T19:20:43.326Z Vendors: Unknown Products: Meks Easy Social Share Problem Types: CWE-79 Description: The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9dec8ac7-befd-4c9d-9a9e-7da9e395dbf2
CVE ID: CVE-2022-2575 State: PUBLISHED Published: 2022-09-16T08:40:29 Last Updated: 2024-08-03T00:39:08.118Z Vendors: Unknown Products: WBW Currency Switcher for WooCommerce Problem Types: CWE-79 Description: The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e934af78-9dfd-4e14-853d-dc453de6e365
CVE ID: CVE-2022-2576 State: PUBLISHED Published: 2022-07-29T13:20:10 Last Updated: 2024-08-03T00:39:08.153Z Vendors: The Eclipse Foundation Products: Eclipse Californium Problem Types: CWE-408 Description: In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification (DDoS other peers) and high CPU load (DoS own peer). The misbehavior occurs only with DTLS_VERIFY_PEERS_ON_RESUMPTION_THRESHOLD values larger than 0. Additional Analyst Notes: - CVE Program Container: References
VERIFY_PEERS_ON_RESUMPTION_THRESHOLD values larger than 0. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/580018
CVE ID: CVE-2022-2577 State: PUBLISHED Published: 2022-07-29T15:40:14.000Z Last Updated: 2025-04-15T14:02:07.230Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument id with the input -2'%20UNION%20select%2011,user(),333,444--+ leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Prog
e initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Garage%20Management%20System%28SQLI%29.md - https://vuldb.com/?id.205300
CVE ID: CVE-2022-2578 State: PUBLISHED Published: 2022-07-29T15:40:28.000Z Last Updated: 2025-04-15T14:01:58.121Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-284 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Garage%20Management%20System--.md - https://vuldb.com/?id.205301
CVE ID: CVE-2022-2579 State: PUBLISHED Published: 2022-07-29T15:40:45.000Z Last Updated: 2025-04-15T14:01:50.904Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument userName with the input lala<img src="" onerror=alert(1)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Addition
ng. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Garage%20Management%20System%28XSS%29.md - https://vuldb.com/?id.205302
CVE ID: CVE-2022-2580 State: PUBLISHED Published: 2022-08-01T14:12:38 Last Updated: 2024-08-03T00:39:08.108Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c5f2f1d4-0441-4881-b19c-055acaa16249 - https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d
CVE ID: CVE-2022-2581 State: PUBLISHED Published: 2022-08-01T14:12:51 Last Updated: 2024-08-03T00:39:08.042Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0bedbae2-82ae-46ae-aa68-1c28b309b60b - https://github.com/vim/vim/commit/f50940531dd57135fe60aa393ac9d3281f352d88
CVE ID: CVE-2022-2582 State: PUBLISHED Published: 2022-12-27T21:13:47.272Z Last Updated: 2025-04-11T16:20:04.368Z Vendors: github.com/aws/aws-sdk-go Products: github.com/aws/aws-sdk-go/service/s3/s3crypto Problem Types: CWE 311: Missing Encryption of Sensitive Data Description: The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plaintext, if the hash is readable to the attacker. AWS now blocks this metadata field, but older SDK versions still send it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aws/aws-sdk-go/commit/35fa6ddf45c0
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aws/aws-sdk-go/commit/35fa6ddf45c061e0f08d3a3b5119f8f4da38f6d1 - https://pkg.go.dev/vuln/GO-2022-0391
CVE ID: CVE-2022-2583 State: PUBLISHED Published: 2022-12-27T21:13:48.862Z Last Updated: 2025-04-11T16:19:04.777Z Vendors: github.com/ntbosscher/gobase Products: github.com/ntbosscher/gobase/auth/httpauth Problem Types: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Description: A race condition can cause incorrect HTTP request routing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ntbosscher/gobase/commit/a8d40bce9c429d324122d18c446924dab809e812 - https://pkg.go.dev/vuln/GO-2022-0400
CVE ID: CVE-2022-2584 State: PUBLISHED Published: 2022-12-27T21:13:51.963Z Last Updated: 2025-04-11T16:41:55.240Z Vendors: github.com/ipld/go-codec-dagpb Products: github.com/ipld/go-codec-dagpb Problem Types: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Description: The dag-pb codec can panic when decoding invalid blocks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ipld/go-codec-dagpb/commit/a17ace35cc760a2698645c09868f9050fa219f57 - https://pkg.go.dev/vuln/GO-2022-0422
CVE ID: CVE-2022-2585 State: PUBLISHED Published: 2024-01-08T17:38:27.327Z Last Updated: 2024-09-04T19:03:25.626Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: The Linux Kernel Organization Products: linux Problem Types: CWE-416 Description: It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5566-1 - https://ubuntu.com/security/notices/USN-5564-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2585 - https://ubuntu.com/se