Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36279 State: PUBLISHED Published: 2023-01-26T21:24:50.817Z Last Updated: 2024-08-03T10:00:04.298Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-120 Description: A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1605
CVE ID: CVE-2022-36280 State: PUBLISHED Published: 2022-09-09T14:39:50.986805Z Last Updated: 2024-09-17T00:01:20.651Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H) Vendors: Linux Products: kernel Problem Types: CWE-120 Description: An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=2071 - ht
dditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=2071 - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2022-36281 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:20.155Z Description: No description available.
CVE ID: CVE-2022-36282 State: PUBLISHED Published: 2022-08-23T15:46:48.790Z Last Updated: 2025-02-20T20:11:39.939Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Roman Pronskiy Products: Search Exclude (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Roman Pronskiy's Search Exclude plugin <= 1.2.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/search-exclude/wordpress-search-exclude-plugin-1-2-6-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org
ordpress-search-exclude-plugin-1-2-6-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/search-exclude/#developers
CVE ID: CVE-2022-36283 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:21.451Z Description: No description available.
CVE ID: CVE-2022-36284 State: PUBLISHED Published: 2022-08-05T15:08:51.582Z Last Updated: 2025-02-20T20:13:40.949Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: StoreApps Products: Affiliate For WooCommerce (WordPress plugin) Problem Types: Insecure Direct Object References (IDOR) Description: Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on the user profile page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
field on the user profile page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dzv365zjfbd8v.cloudfront.net/changelogs/affiliate-for-woocommerce/changelog.txt - https://patchstack.com/database/vulnerability/affiliate-for-woocommerce/wordpress-affiliate-for-woocommerce-premium-plugin-4-7-0-authenticated-idor-vulnerability-leading-to-paypal-email-change
CVE ID: CVE-2022-36285 State: PUBLISHED Published: 2022-08-23T15:48:09.265Z Last Updated: 2025-02-20T20:10:46.563Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: dmitrylitvinov Products: Uploading SVG, WEBP and ICO files (WordPress plugin) Problem Types: CWE-434 Description: Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/uploading-svgwebp-and-ico-files/#developers - https://patchstack.com/database/vulnerability/uploading-svgwebp-and-ico-files/wordpress-uploa
nd-ico-files/#developers - https://patchstack.com/database/vulnerability/uploading-svgwebp-and-ico-files/wordpress-uploading-svg-webp-and-ico-files-plugin-1-0-0-authenticated-arbitrary-file-upload-vulnerability
CVE ID: CVE-2022-36286 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:22.758Z Description: No description available.
CVE ID: CVE-2022-36287 State: PUBLISHED Published: 2023-02-16T20:00:23.275Z Last Updated: 2024-08-03T10:00:04.285Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: FCS Server software maintained by Intel Problem Types: denial of service Description: Uncaught exception in the FCS Server software maintained by Intel before version 1.1.79.3 may allow a privileged user to potentially enable denial of service via physical access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00739.html
CVE ID: CVE-2022-36288 State: PUBLISHED Published: 2022-08-23T15:47:09.667Z Last Updated: 2025-02-20T20:11:24.858Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: W3 Eden, Inc. Products: Download Manager (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/download-manager/#developers - https://patchstack.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-multiple-cross-site-request-forger
.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE ID: CVE-2022-36289 State: PUBLISHED Published: 2023-02-16T20:00:17.463Z Last Updated: 2025-01-27T18:16:24.607Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Media SDK software Problem Types: denial of service Description: Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html
CVE ID: CVE-2022-36290 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:24.069Z Description: No description available.
CVE ID: CVE-2022-36291 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:25.369Z Description: No description available.
CVE ID: CVE-2022-36292 State: PUBLISHED Published: 2022-08-23T15:48:16.897Z Last Updated: 2025-02-20T20:10:38.871Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPChill Products: Gallery PhotoBlocks (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/photoblocks-grid-gallery/wordpress-gallery-photoblocks-plugin-1-2-6-cross-site-request-forgery-csrf-vulnerabilities - https://wordpress.org/plugins/photoblocks-gri
photoblocks-plugin-1-2-6-cross-site-request-forgery-csrf-vulnerabilities - https://wordpress.org/plugins/photoblocks-grid-gallery/
CVE ID: CVE-2022-36293 State: PUBLISHED Published: 2022-08-16T07:02:42 Last Updated: 2024-08-03T10:00:04.201Z Vendors: Nintendo Co., Ltd. Products: Nintendo Wi-Fi Network Adaptor WAP-001 Problem Types: Buffer Overflow Description: Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.nintendo.co.jp/support/information/2022/0720.html - https://jvn.jp/en/jp/JVN17625382/index.html
CVE ID: CVE-2022-36294 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:26.666Z Description: No description available.
CVE ID: CVE-2022-36296 State: PUBLISHED Published: 2022-08-05T15:08:07.301Z Last Updated: 2025-02-20T20:14:04.496Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: JumpDEMAND Inc. Products: ActiveDEMAND Problem Types: CWE-287 Description: Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated post update/create/delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/activedemand/wordpress-activedemand-plugin-0-2-27-broken-authentication-vulnerability?_s_id=cve
CVE ID: CVE-2022-36297 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:27.960Z Description: No description available.
CVE ID: CVE-2022-36298 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:14.755Z Description: No description available.
CVE ID: CVE-2022-36301 State: PUBLISHED Published: 2022-08-01T14:02:31 Last Updated: 2024-08-03T10:00:04.319Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Bosch Products: BF-OS Problem Types: CWE-521 Description: BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-013924-bt.html
CVE ID: CVE-2022-36302 State: PUBLISHED Published: 2022-08-01T14:03:43 Last Updated: 2024-08-03T10:00:04.271Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bosch Products: BF-OS Problem Types: CWE-641 Description: File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-013924-bt.html
CVE ID: CVE-2022-36303 State: PUBLISHED Published: 2022-07-19T18:20:01 Last Updated: 2024-08-03T10:00:04.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/serghey-rodin/vesta/issues/2252
CVE ID: CVE-2022-36304 State: PUBLISHED Published: 2022-07-19T18:20:01 Last Updated: 2024-08-03T10:00:04.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/serghey-rodin/vesta/issues/2252
CVE ID: CVE-2022-36305 State: PUBLISHED Published: 2022-07-19T18:20:02 Last Updated: 2024-08-03T10:00:04.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1/upload/UploadHandler.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/serghey-rodin/vesta/issues/2252
CVE ID: CVE-2022-36306 State: PUBLISHED Published: 2022-08-16T00:32:07 Last Updated: 2024-08-03T10:00:04.280Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-219 Description: An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still present in 15.18.00.2511, and may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1691 - https://github.com/metaredte
tes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1691 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-9v93-3qpc-hxj9
CVE ID: CVE-2022-36307 State: PUBLISHED Published: 2022-08-16T00:32:34 Last Updated: 2024-08-03T10:00:04.239Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-522 Description: The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1693 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8j75-qh6c-wpc5
CVE ID: CVE-2022-36308 State: PUBLISHED Published: 2022-08-16T00:32:57 Last Updated: 2024-08-03T10:00:04.241Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-256 Description: Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1692 - https://github.com/metaredteam/external-disclosures/security/
erences: - https://helpdesk.airspan.com/browse/TRN3-1692 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-qjgc-rx8m-q58x
CVE ID: CVE-2022-36309 State: PUBLISHED Published: 2022-08-16T00:33:24 Last Updated: 2024-08-03T10:00:04.309Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-78 Description: Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1690 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-p295-2jh6-g6g4
CVE ID: CVE-2022-36310 State: PUBLISHED Published: 2022-08-16T00:33:45 Last Updated: 2024-08-03T10:00:04.322Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-242 Description: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1689 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-whc6-2989-42xm
CVE ID: CVE-2022-36311 State: PUBLISHED Published: 2022-08-16T00:34:12 Last Updated: 2024-08-03T10:00:04.384Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-79 Description: Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1694
CVE ID: CVE-2022-36312 State: PUBLISHED Published: 2022-08-16T00:34:33 Last Updated: 2024-08-03T10:00:04.350Z Vendors: Airspan Products: AirVelocity Problem Types: CWE-352 Description: Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.airspan.com/browse/TRN3-1695
CVE ID: CVE-2022-36313 State: PUBLISHED Published: 2022-07-21T15:31:27 Last Updated: 2024-08-03T10:00:04.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/file-type - https://github.com/sindresorhus/file-type/releases/tag/v17.1.3 - https://github.com/sindresorhus/file-type/releases/tag/v16.5.4 - https://sec
ndresorhus/file-type/releases/tag/v17.1.3 - https://github.com/sindresorhus/file-type/releases/tag/v16.5.4 - https://security.netapp.com/advisory/ntap-20220909-0005/
CVE ID: CVE-2022-36314 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:33:52.675Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Opening local <code>.lnk</code> files could cause unexpected network loads Description: When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 102.1, Firefox < 103, and Thunderbird < 102.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
102.1, Firefox < 103, and Thunderbird < 102.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://www.mozilla.org/security/advisories/mfsa2022-30/ - https://www.mozilla.org/security/advisories/mfsa2022-32/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1773894
CVE ID: CVE-2022-36315 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:19:33.965Z Vendors: Mozilla Products: Firefox Problem Types: Preload Cache Bypasses Subresource Integrity Description: When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1762520
CVE ID: CVE-2022-36316 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:05:49.003Z Vendors: Mozilla Products: Firefox Problem Types: Performance API leaked whether a cross-site resource is redirecting Description: When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1768583
CVE ID: CVE-2022-36317 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:09:08.697Z Vendors: Mozilla Products: Firefox Problem Types: Long URL would hang Firefox for Android Description: When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Service.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 103. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://bugzilla.mozilla.org/show_bug.c
chment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1759951
CVE ID: CVE-2022-36318 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:05:29.632Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Directory indexes for bundled resources reflected URL parameters Description: When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://www.mozilla.org/security/advisories/mfsa20
erences: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://www.mozilla.org/security/advisories/mfsa2022-31/ - https://www.mozilla.org/security/advisories/mfsa2022-30/ - https://www.mozilla.org/security/advisories/mfsa2022-29/ - https://www.mozilla.org/security/advisories/mfsa2022-32/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1771774
CVE ID: CVE-2022-36319 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T16:59:28.795Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Mouse Position spoofing with CSS transforms Description: When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://www.mozilla.org/security/advisor
hment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://www.mozilla.org/security/advisories/mfsa2022-31/ - https://www.mozilla.org/security/advisories/mfsa2022-30/ - https://www.mozilla.org/security/advisories/mfsa2022-29/ - https://www.mozilla.org/security/advisories/mfsa2022-32/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1737722
CVE ID: CVE-2022-36320 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T16:55:53.478Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 103 Description: Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 103. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://bugzilla.mozilla.org/bugl
Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-28/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1759794%2C1760998