Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
c1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c25b2ae136039ffa820c26138ed4a5e5f3ab3841 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cf9f2f8d62eca810afbd1ee6cc0800202b000e57 - https://security.netapp.com/advisory/ntap-20220519-0001/
CVE ID: CVE-2022-0501 State: PUBLISHED Published: 2022-02-05T15:55:09 Last Updated: 2024-08-02T23:32:46.061Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: ptrofimov Products: ptrofimov/beanstalk_console Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/9af1c35e-3f74-4c93-a241-e8be01335ec7 - https://github.com/ptrofimov/beanstalk_console/commit/e351c8260ec1d3718d9e475ee57c7e12c47f19da
CVE ID: CVE-2022-0502 State: PUBLISHED Published: 2022-02-06T10:50:10 Last Updated: 2024-08-02T23:32:45.257Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/34f2aa30-de7f-432a-8749-b43d2774140f - https://github.com/livehelperchat/livehelperchat/commit/d3b107aaa8ec10816acc762d60e7321079c21706
CVE ID: CVE-2022-0503 State: PUBLISHED Published: 2022-03-14T14:41:35 Last Updated: 2024-08-02T23:32:45.999Z Vendors: Unknown Products: WordPress Multisite Content Copier/Updater Problem Types: CWE-79 Description: The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b6d38e23-3761-4447-a794-1e5077fd953a
CVE ID: CVE-2022-0504 State: PUBLISHED Published: 2022-02-08T08:55:21 Last Updated: 2024-08-02T23:32:45.883Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-209 Description: Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/285ff8a0-a273-4d62-ba01-3e4b4e18467b - https://github.com/microweber/microweber/commit/e607e5f745cd99d5c06a7fce16b3577fab8e1250
CVE ID: CVE-2022-0505 State: PUBLISHED Published: 2022-02-08T08:55:16 Last Updated: 2024-08-02T23:32:45.619Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/65b5a243-3f0c-4df3-9bab-898332180968 - https://github.com/microweber/microweber/commit/63447b369973724f0d352a006f25af6ff71ae292
CVE ID: CVE-2022-0506 State: PUBLISHED Published: 2022-02-08T08:55:10 Last Updated: 2024-08-02T23:32:45.991Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0a5ec24c-343e-4cc4-b27b-2beb19a1c35f - https://github.com/microweber/microweber/commit/05d55f2befb1b25375ca5371875ff535d6cc5f70
CVE ID: CVE-2022-0507 State: PUBLISHED Published: 2022-03-09T15:09:18.756161Z Last Updated: 2024-09-16T17:38:30.900Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-89 Description: Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves - https://khoori.org/posts/cve-2022-0507/
CVE ID: CVE-2022-0508 State: PUBLISHED Published: 2022-02-08T10:30:46 Last Updated: 2024-08-02T23:32:46.415Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: chocobozzz Products: chocobozzz/peertube Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832 Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c3724574-b6c9-430b-849b-40dd2b20f23c - https://github.com/chocobozzz/peertube/commit/f33e515991a32885622b217bf2ed1d1b0d9d6832
CVE ID: CVE-2022-0509 State: PUBLISHED Published: 2022-02-08T11:30:11 Last Updated: 2024-08-02T23:32:46.495Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/26cdf86c-8edc-4af6-8411-d569699ecd1b - https://github.com/pimcore/pimcore/commit/6ccb5c12fc1be065ebce9c89c4677ee939b88597
CVE ID: CVE-2022-0510 State: PUBLISHED Published: 2022-02-08T14:20:10 Last Updated: 2024-08-02T23:32:45.626Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bb3525d5-dedc-48b8-ab04-ad4c72499abe - https://github.com/pimcore/pimcore/commit/b5a9ad65e5a4dde1916f02019f8686ad835681ce
CVE ID: CVE-2022-0511 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:37:50.839Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 97 Description: Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 97. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
ulnerability affects Firefox < 97. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1713579%2C1735448%2C1743821%2C1746313%2C1746314%2C1746316%2C1746321%2C1746322%2C1746323%2C1746412%2C1746430%2C1746451%2C1746488%2C1746875%2C1746898%2C1746905%2C1746907%2C1746917%2C1747128%2C1747137%2C1747331%2C1747346%2C1747439%2C1747457%2C1747870%2C1749051%2C1749274%2C1749831
CVE ID: CVE-2022-0512 State: PUBLISHED Published: 2022-02-14T00:00:00 Last Updated: 2024-08-02T23:32:45.908Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: unshiftio Products: unshiftio/url-parse Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b - https://github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40 - https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE ID: CVE-2022-0513 State: PUBLISHED Published: 2022-02-16T16:38:03.000Z Last Updated: 2025-02-10T14:53:42.447Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: VeronaLabs Products: WP Statistics Problem Types: CWE-89 Description: The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.4. This requires the "Record Exclusions" option to be enabled on the vu
nformation, in versions up to and including 13.1.4. This requires the "Record Exclusions" option to be enabled on the vulnerable site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/blog/2022/02/unauthenticated-sql-injection-vulnerability-patched-in-wordpress-statistics-plugin/ - https://plugins.trac.wordpress.org/changeset/2671297/wp-statistics/trunk/includes/class-wp-statistics-hits.php
CVE ID: CVE-2022-0514 State: PUBLISHED Published: 2022-03-21T18:50:16 Last Updated: 2024-08-02T23:32:46.379Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: crater-invoice Products: crater-invoice/crater Problem Types: CWE-840 Description: Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/af08000d-9f4a-4743-865d-5d5cdaf7fb27 - https://github.com/crater-invoice/crater/commit/fadef0ea07d2f7fb3f41c2cae444ebca2f479679
CVE ID: CVE-2022-0515 State: PUBLISHED Published: 2022-03-21T18:50:22 Last Updated: 2024-08-02T23:32:46.192Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: crater-invoice Products: crater-invoice/crater Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/efb93f1f-1896-4a4c-a059-9ecadac1c4de - https://github.com/crater-invoice/crater/commit/2b7028b7c83fd6e8897f244a2e6723baa20479e5
CVE ID: CVE-2022-0516 State: PUBLISHED Published: 2022-03-08T14:06:13 Last Updated: 2024-08-02T23:32:46.029Z Vendors: n/a Products: kernel Problem Types: CWE-200 Description: A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2050237 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c5749
2050237 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c574911f12f55 - https://www.debian.org/security/2022/dsa-5092 - https://security.netapp.com/advisory/ntap-20220331-0009/
CVE ID: CVE-2022-0517 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:47:02.384Z Vendors: Mozilla Products: Mozilla VPN Problem Types: Local privilege escalation vis uncontrolled OpenSSL search path Description: Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-08/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1752291
CVE ID: CVE-2022-0518 State: PUBLISHED Published: 2022-02-08T20:20:11 Last Updated: 2024-08-02T23:32:46.441Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/10051adf-7ddc-4042-8fd0-8e9e0c5b1184 - https://github.com/radareorg/radare2/commit/9650e3c352f675687bf6c6f65ff2c4a3d0e288fa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0519 State: PUBLISHED Published: 2022-02-08T20:25:11 Last Updated: 2024-08-02T23:32:46.426Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-805 Description: Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/af85b9e1-d1cf-4c0e-ba12-525b82b7c1e3 - https://github.com/radareorg/radare2/commit/6c4428f018d385fc80a33ecddcb37becea685dd5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0520 State: PUBLISHED Published: 2022-02-08T20:40:15 Last Updated: 2024-08-02T23:32:46.024Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-416 Description: Use After Free in NPM radare2.js prior to 5.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ce13c371-e5ef-4993-97f3-3d33dcd943a6 - https://github.com/radareorg/radare2/commit/8525ad0b9fd596f4b251bb3d7b114e6dc7ce1ee8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archi
age-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0521 State: PUBLISHED Published: 2022-02-08T20:50:10 Last Updated: 2024-08-02T23:32:46.279Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-788 Description: Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/commit/6c4428f018d385fc80a33ecddcb37becea685dd5 - https://huntr.dev/bounties/4d436311-bbf1-45a3-8774-bdb666d7f7ca - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKP
a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0522 State: PUBLISHED Published: 2022-02-08T20:55:10 Last Updated: 2024-08-02T23:32:46.087Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-786 Description: Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2d45e589-d614-4875-bba1-be0f729e7ca9 - https://github.com/radareorg/radare2/commit/d17a7bdf166108a29a27cd89bf454f9fa6c050d6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - h
fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0523 State: PUBLISHED Published: 2022-02-08T00:00:00 Last Updated: 2024-08-02T23:32:46.139Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-416 Description: Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/9d8d6ae0-fe00-40b9-ae1e-b0e8103bac69 - https://github.com/radareorg/radare2/commit/35482cb760db10f87a62569e2f8872dbd95e9269 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0524 State: PUBLISHED Published: 2022-02-08T22:00:17 Last Updated: 2024-08-02T23:32:46.230Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: publify Products: publify/publify Problem Types: CWE-840 Description: Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bfffae58-b3cd-4e0e-b1f2-3db387a22c3d - https://github.com/publify/publify/commit/16fceecadbe80ab0ef846b62a12dc7bfff10b8c5
CVE ID: CVE-2022-0525 State: PUBLISHED Published: 2022-02-09T03:45:10 Last Updated: 2024-08-02T23:32:46.180Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mruby Products: mruby/mruby Problem Types: CWE-125 Description: Out-of-bounds Read in Homebrew mruby prior to 3.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e19e109f-acf0-4048-8ee8-1b10a870f1e9 - https://github.com/mruby/mruby/commit/0849a2885f81cfd82134992c06df3ccd59052ac7
CVE ID: CVE-2022-0526 State: PUBLISHED Published: 2022-02-09T04:15:10 Last Updated: 2024-08-02T23:32:46.163Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: chatwoot Products: chatwoot/chatwoot Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d8f5ce74-2a00-4813-b220-70af771b0edd - https://github.com/chatwoot/chatwoot/commit/9f37a6e2ba7a7212bb419e318b8061f472e82d9f
CVE ID: CVE-2022-0527 State: PUBLISHED Published: 2022-02-09T04:20:11 Last Updated: 2024-08-02T23:32:46.234Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: chatwoot Products: chatwoot/chatwoot Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a2f598f6-c142-449a-96f8-b4b2f7a9e228 - https://github.com/chatwoot/chatwoot/commit/a737f89c473e64f9abdf8ff13a3e64edefa28877
CVE ID: CVE-2022-0528 State: PUBLISHED Published: 2022-03-03T07:00:11 Last Updated: 2024-08-02T23:32:46.214Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: transloadit Products: transloadit/uppy Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b - https://github.com/transloadit/uppy/commit/267c34045a1e62c98406d8c31261c604a11e544a
CVE ID: CVE-2022-0529 State: PUBLISHED Published: 2022-02-09T22:05:51.000Z Last Updated: 2025-02-13T16:28:48.453Z Vendors: n/a Products: unzip Problem Types: SEGV Description: A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2051395 - https://github.com/ByteHackr/unzip_poc - https://www.debian.org/security/2022/dsa-5202 - https://lists.debian.org/debian-lts-announce/2022/09/msg0
kr/unzip_poc - https://www.debian.org/security/2022/dsa-5202 - https://lists.debian.org/debian-lts-announce/2022/09/msg00028.html - https://security.gentoo.org/glsa/202310-17
CVE ID: CVE-2022-0530 State: PUBLISHED Published: 2022-02-09T22:05:50.000Z Last Updated: 2025-02-13T16:28:49.032Z Vendors: n/a Products: unzip Problem Types: SEGV Description: A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2051395 - https://github.com/ByteHackr/unzip_poc - https://support.apple.com/kb/HT213257 - https://support.apple.com/kb/HT213256 - https://support.apple.com
kr/unzip_poc - https://support.apple.com/kb/HT213257 - https://support.apple.com/kb/HT213256 - https://support.apple.com/kb/HT213255 - http://seclists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - http://seclists.org/fulldisclosure/2022/May/38 - https://www.debian.org/security/2022/dsa-5202 - https://lists.debian.org/debian-lts-announce/2022/09/msg00028.html - https://security.gentoo.org/glsa/202310-17
CVE ID: CVE-2022-0531 State: PUBLISHED Published: 2022-04-11T14:40:47 Last Updated: 2024-08-02T23:32:46.280Z Vendors: Unknown Products: Migration, Backup, Staging – WPvivid Problem Types: CWE-79 Description: The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ac5c2a5d-09b6-470b-a598-2972183413ca
CVE ID: CVE-2022-0532 State: PUBLISHED Published: 2022-02-09T22:05:13 Last Updated: 2024-08-02T23:32:45.993Z Vendors: n/a Products: cri-o Problem Types: CWE-732 Description: An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2051730 - https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
CVE ID: CVE-2022-0533 State: PUBLISHED Published: 2022-03-07T08:16:49 Last Updated: 2024-08-02T23:32:46.347Z Vendors: Unknown Products: Ditty (formerly Ditty News Ticker) Problem Types: CWE-79 Description: The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/40f36692-c898-4441-ad24-2dc17856bd74 - https://plugins.trac.wordpress.org/changeset/2675223/ditty-news-ticker