Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3379 State: PUBLISHED Published: 2022-10-27T22:11:48.828Z Last Updated: 2025-04-16T17:44:23.288Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Cscape Problem Types: CWE-787 Description: Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03
CVE ID: CVE-2022-3380 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T20:16:33.869Z Vendors: Unknown Products: Customizer Export/Import Problem Types: CWE-502 Description: The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a42272a2-f9ce-4aab-9a94-8a4d85008746
CVE ID: CVE-2022-3381 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:31:41.075Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Url redirection to untrusted site ('open redirect') in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect users to arbitrary sites Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/376046 - https://hackerone.com/reports/1711497 - h
richment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/376046 - https://hackerone.com/reports/1711497 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3381.json
CVE ID: CVE-2022-3382 State: PUBLISHED Published: 2022-10-17T19:54:20.949Z Last Updated: 2025-04-16T16:08:54.612Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HIWIN Products: HIWIN Robot System Software Problem Types: CWE-284 Description: HIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command source. As a result, an attacker could craft code to disconnect HRSS and the controller and cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-279-02
CVE ID: CVE-2022-3383 State: PUBLISHED Published: 2022-11-29T20:40:09.609Z Last Updated: 2025-01-23T20:34:17.159Z Severity: HIGH (CVSS 7.2 CVSS:3.1/A:H/I:H/C:H/S:U/UI:N/PR:H/AC:L/AV:N) Vendors: ultimatemember Products: Ultimate Member – User Profile, User Registration, Login & Membership Plugin Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the get_option_value_from_callback function that accepts user supplied input and passes it through call_user_func(). This makes it possible for authenticated attackers, with administrativ
ied input and passes it through call_user_func(). This makes it possible for authenticated attackers, with administrative capabilities, to execute code on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/docs/share/8796eef9-ac4c-4339-96b4-6c21313ecf3e - https://github.com/H4de5-7/vulnerabilities/blob/main/CVE-2022-3383%20%26%26%20CVE-2022-3384.md - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2805393%40ultimate-member&new=2805393%40ultimate-member&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3383
CVE ID: CVE-2022-3384 State: PUBLISHED Published: 2022-11-29T20:39:57.459Z Last Updated: 2025-01-31T18:22:55.780Z Severity: HIGH (CVSS 7.2 CVSS:3.1/A:H/I:H/C:H/S:U/UI:N/PR:H/AC:L/AV:N) Vendors: ultimatemember Products: Ultimate Member – User Profile, User Registration, Login & Membership Plugin Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populate_dropdown_options function that accepts user supplied input and passes it through call_user_func(). This is restricted to non-parameter PHP functions like phpinfo(); since use
nput and passes it through call_user_func(). This is restricted to non-parameter PHP functions like phpinfo(); since user supplied parameters are not passed through the function. This makes it possible for authenticated attackers, with administrative privileges, to execute code on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/docs/share/8796eef9-ac4c-4339-96b4-6c21313ecf3e - https://github.com/H4de5-7/vulnerabilities/blob/main/CVE-2022-3383%20%26%26%20CVE-2022-3384.md - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2805393%40ultimate-member&new=2805393%40ultimate-member&sfp_email=
ess.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2805393%40ultimate-member&new=2805393%40ultimate-member&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3384
CVE ID: CVE-2022-3385 State: PUBLISHED Published: 2022-10-27T20:16:37.877Z Last Updated: 2025-04-16T16:08:23.254Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech Products: R-SeeNet Problem Types: CWE-121 Description: Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
CVE ID: CVE-2022-3386 State: PUBLISHED Published: 2022-10-27T20:34:44.584Z Last Updated: 2025-04-16T16:08:15.899Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech Products: R-SeeNet Problem Types: CWE-121 Description: Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
CVE ID: CVE-2022-3387 State: PUBLISHED Published: 2022-10-27T20:47:39.213Z Last Updated: 2025-04-16T16:08:07.678Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Advantech Products: R-SeeNet Problem Types: CWE-22 Description: Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
CVE ID: CVE-2022-3388 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-07-23T20:45:00.000Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Hitachi Energy Products: MicroSCADA Pro SYS600, MicroSCADA X SYS600 Problem Types: CWE-20 Description: An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&A
iner: References: - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1
CVE ID: CVE-2022-3389 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T01:07:06.627Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-22 Description: Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752 - https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99
CVE ID: CVE-2022-3391 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T19:07:22.850Z Vendors: Unknown Products: Retain Live Chat Problem Types: CWE-79 Description: The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ecc51420-ee50-4e39-a38d-09686f1996f2
CVE ID: CVE-2022-3392 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T13:57:03.916Z Vendors: Unknown Products: WP Humans.txt Problem Types: CWE-79 Description: The WP Humans.txt WordPress plugin through 1.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2296156e-b177-478e-a01c-b1ea4fee0aca
CVE ID: CVE-2022-3393 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T13:55:53.127Z Vendors: Unknown Products: Post to CSV by BestWebSoft Problem Types: CWE-1236 Description: The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/689b4c42-c516-4c57-8ec7-3a6f12a3594e
CVE ID: CVE-2022-3394 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T13:54:49.339Z Vendors: Unknown Products: WP All Export Pro Problem Types: CWE-94 Description: The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only administrators can run exports, but the privilege can be delegated to lower privileged users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3266eb59-a8
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3266eb59-a8b2-4a5a-ab48-01a9af631b2c
CVE ID: CVE-2022-3395 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:07:02.496Z Vendors: Unknown Products: WP All Export Pro Problem Types: CWE-89 Description: The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL statements, leading to a SQL Injection vulnerability. By default only users with the Administrator role can perform exports, but this can be delegated to lower privileged users as well. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan
users as well. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/10742154-368a-40be-a67d-80ea848493a0
CVE ID: CVE-2022-3396 State: PUBLISHED Published: 2022-10-06T16:14:45.632Z Last Updated: 2025-04-16T17:46:43.628Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OMRON Products: CX-Programmer Problem Types: CWE-787 Description: OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
CVE ID: CVE-2022-3397 State: PUBLISHED Published: 2022-10-06T16:14:37.846Z Last Updated: 2025-04-16T17:47:06.499Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OMRON Products: CX-Programmer Problem Types: CWE-787 Description: OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
CVE ID: CVE-2022-3398 State: PUBLISHED Published: 2022-10-06T16:14:42.036Z Last Updated: 2025-04-16T17:46:52.837Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OMRON Products: CX-Programmer Problem Types: CWE-787 Description: OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
CVE ID: CVE-2022-3399 State: PUBLISHED Published: 2024-08-16T02:31:26.402Z Last Updated: 2024-08-16T13:22:12.365Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: humanityco Products: Cookie Notice & Compliance for GDPR / CCPA Problem Types: CWE-79 Description: The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cookie_notice_options[refuse_code_head]' parameter in versions up to, and including, 2.4.17.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative privileges and above, to inject arbitrary web scripts in
s it possible for authenticated attackers, with administrative privileges and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected /wp-admin/admin.php?page=cookie-notice page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/73fd35b4-16b3-4f57-a3e4-46e4de0ee822?source=cve - https://plugins.trac.wordpress.org/changeset/3134120/cookie-notice/trunk/includes/settings.php
CVE ID: CVE-2022-3400 State: PUBLISHED Published: 2022-10-28T16:57:41.482Z Last Updated: 2025-01-31T18:48:44.538Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/A:N/I:H/C:N/S:U/UI:N/PR:L/AC:L/AV:N) Vendors: Bricks Builder Products: Bricks Problem Types: CWE-862 Missing Authorization Description: The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to edit any page, post, or template on the vulnerable WordPress website. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
plate on the vulnerable WordPress website. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bricksbuilder.io/ - https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3400
CVE ID: CVE-2022-3401 State: PUBLISHED Published: 2022-10-28T18:12:10.719Z Last Updated: 2025-01-31T18:48:16.992Z Severity: HIGH (CVSS 8.8 CVSS:3.1/A:H/I:H/C:H/S:U/UI:N/PR:L/AC:L/AV:N) Vendors: Bricks Builder Products: Bricks Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website content in versions 1.2 to 1.5.3. This, combined with the missing authorization vulnerability (CVE-2022-3400), makes it possible for authenticated attackers with minimal permissions, such as a subscriber, can edit any page, pos
0), makes it possible for authenticated attackers with minimal permissions, such as a subscriber, can edit any page, post, or template on the vulnerable WordPress website and inject a code execution block that can be used to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bricksbuilder.io/ - https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3401
CVE ID: CVE-2022-3402 State: PUBLISHED Published: 2022-10-28T18:57:41.609Z Last Updated: 2025-01-31T18:46:55.068Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/A:N/I:L/C:L/S:C/UI:R/PR:N/AC:L/AV:N) Vendors: mgibbs189 Products: Log HTTP Requests Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Log HTTP Requests plugin for WordPress is vulnerable to Stored Cross-Site Scripting via logged HTTP requests in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers who can trick a site's administrator into performing an action like clicking on
possible for unauthenticated attackers who can trick a site's administrator into performing an action like clicking on a link, or an authenticated user with access to a page that sends a request using user-supplied data via the server, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2770821%40log-http-requests&new=2770821%40log-http-requests&sfp_email=&sfph_mail= - https://wordpress.org/plugins/log-http-requests/#developers - https://www.wordfence.com/vulnerability-advi
&sfph_mail= - https://wordpress.org/plugins/log-http-requests/#developers - https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3402
CVE ID: CVE-2022-3403 State: REJECTED Published: N/A Last Updated: 2023-08-11T12:45:36.367Z Description: No description available.
CVE ID: CVE-2022-3404 State: REJECTED Published: N/A Last Updated: 2023-04-12T20:18:29.381Z Description: No description available.
CVE ID: CVE-2022-3405 State: PUBLISHED Published: 2023-05-03T10:49:47.642Z Last Updated: 2025-02-03T18:23:43.444Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15, Acronis Cyber Backup 12.5 Problem Types: CWE-269 Description: Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4092 - https://herolab.usd.de/security-advisories/usd-2022-0008/
CVE ID: CVE-2022-3407 State: PUBLISHED Published: 2023-09-01T16:42:00.677Z Last Updated: 2024-09-27T18:35:19.163Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: Motorola Mobility Products: Motorola smartphones Problem Types: CWE-404 Description: I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue. Additional Analyst Notes: - CVE Program Container: - CIS
y services. This patch resolves the device's modem reset issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/175354
CVE ID: CVE-2022-3408 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T20:15:44.318Z Vendors: Unknown Products: WP Word Count Problem Types: CWE-79 Description: The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/395bc893-2067-4f76-b49f-9ed8e1e8f330
CVE ID: CVE-2022-3409 State: PUBLISHED Published: 2022-10-27T13:09:19.716Z Last Updated: 2025-05-05T17:52:19.453Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: OpenBMC Project Products: OpenBMC Problem Types: CWE-121, CWE-229 Description: A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser handles unclosed http headers. If long enough http header is passed in the multipart form without c
how multipart_parser handles unclosed http headers. If long enough http header is passed in the multipart form without colon there is one byte overwrite on heap. It can be conducted multiple times in a loop to cause DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openbmc/bmcweb
CVE ID: CVE-2022-3411 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:39:31.969Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/3
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/376247 - https://hackerone.com/reports/1685995 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3411.json
CVE ID: CVE-2022-3413 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:53:13.899Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Incorrect authorization in GitLab Description: Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allowed Developers to view the project's Audit Events and Developers or Maintainers to view the group's Audit Events. These should have been restricted to Project Maintainers, Group Owners, and above. Additional Analyst Notes: - CVE Program Container: