Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46901 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-23T20:32:02.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This includes system tasks, and backing up, loading, and clearing of the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.stryker.com/us/en/about/governance/cyber-security/product-
Container: - CISA ADP Vulnrichment: References: - https://www.stryker.com/us/en/about/governance/cyber-security/product-security/ - https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html
CVE ID: CVE-2022-46902 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-30T14:06:44.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the unzip operation, the code takes file paths from the ZIP archive and writes them to a Vocera temporary directory. Unfortunately, the code does not properly check if the file paths include directory traversal payloads that would escape
Unfortunately, the code does not properly check if the file paths include directory traversal payloads that would escape the intended destination. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.stryker.com/us/en/about/governance/cyber-security/product-security/ - https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html
CVE ID: CVE-2022-46903 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:41:47.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://news.websoft.ru/_wt/wiki_base/7175851369410989446
CVE ID: CVE-2022-46904 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:11:59.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://news.websoft.ru/_wt/wiki_base/7175852133775323458
CVE ID: CVE-2022-46905 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T18:06:08.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://news.websoft.ru/_wt/wiki_base/7175852393019676262
CVE ID: CVE-2022-46906 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T19:24:15.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://news.websoft.ru/_wt/wiki_base/7175852586100985308
CVE ID: CVE-2022-46907 State: PUBLISHED Published: 2023-05-25T06:58:18.912Z Last Updated: 2025-02-13T16:33:58.435Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: CWE-79 Description: A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/1m0mkq2nttx8tn94m11mytn4f0tv1504 - http://www.openwall.com/lists/oss-sec
: References: - https://lists.apache.org/thread/1m0mkq2nttx8tn94m11mytn4f0tv1504 - http://www.openwall.com/lists/oss-security/2023/05/25/1
CVE ID: CVE-2022-46908 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-05-05T16:11:57.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://news.ycombinator.com/item?id=33948588 - https://sqlite.org/forum/forumpost/07beac8056151b2f - https://sqlite.org/src/info/cefc032473ac5ad2 - https://security.netapp.com/advisory/ntap-20230203-0005/ - https://secu
- https://sqlite.org/src/info/cefc032473ac5ad2 - https://security.netapp.com/advisory/ntap-20230203-0005/ - https://security.gentoo.org/glsa/202311-03
CVE ID: CVE-2022-46910 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:38:11.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkwzORiDo
CVE ID: CVE-2022-46912 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:37:39.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/Sk6sfbTPi
CVE ID: CVE-2022-46914 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T15:58:11.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi
CVE ID: CVE-2022-46934 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T16:10:32.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kekingcn/kkFileView/issues/411
CVE ID: CVE-2022-46945 State: PUBLISHED Published: 2023-05-26T00:00:00.000Z Last Updated: 2025-11-03T19:27:44.519Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NagVis/nagvis/commit/71aba7f46f79d846e1df037f165d206a2cd1d22a - https://github.com/NagVis/nagvis/compare/nagvis-1.9.33...nagvis-1.9.34 - https://www.sonarsource.com/blog/checkmk-rce-chain-3/
CVE ID: CVE-2022-46946 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:01:06.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-2.md
CVE ID: CVE-2022-46947 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:00:09.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-1.md
CVE ID: CVE-2022-46949 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T18:53:38.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-3.md
CVE ID: CVE-2022-46950 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:45:01.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md
CVE ID: CVE-2022-46951 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T15:46:24.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_uploads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-2.md
CVE ID: CVE-2022-46952 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T15:44:21.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-3.md
CVE ID: CVE-2022-46953 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:31:22.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md
CVE ID: CVE-2022-46954 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T18:11:12.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_transaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.github.com
CVE ID: CVE-2022-46955 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:29:30.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.github.com
CVE ID: CVE-2022-46956 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:27:36.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md
CVE ID: CVE-2022-46957 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:19:39.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/sites/default/files/download/oretnom23/tracking.zip - https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46957
CVE ID: CVE-2022-46959 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-03T14:11:53.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/go-sonic/sonic/issues/56
CVE ID: CVE-2022-46965 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-27T13:58:45.659Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://prestashop.com - http://totadministrativemandate.com - https://github.com/202ecommerce/security-advisories/security/advisories/GHSA-hg7m-23j3-rf56
CVE ID: CVE-2022-46966 State: PUBLISHED Published: 2023-01-26T00:00:00 Last Updated: 2024-08-03T14:47:28.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com/files/169916/Revenue-Collection-System-1.0-SQL-Injection-Remote-Code-Execution.html - https://cxsecurity.com/issue/WLB-2022110026
CVE ID: CVE-2022-46967 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T16:51:20.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/169916/Revenue-Collection-System-1.0-SQL-Injection-Remote-Code-Execution.html
CVE ID: CVE-2022-46968 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-11-03T16:32:06.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/169917/Revenue-Collection-System-1.0-Cross-Site-Scripting-Authentication-Bypass.html - https://cxsecurity.com/issue/WLB-2022110027
CVE ID: CVE-2022-46973 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:28:57.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anji-plus/report/issues/15 - https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2022-46973
CVE ID: CVE-2022-46996 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:08:05.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mirrors.neusoft.edu.cn/pypi/web/simple/request/ - https://github.com/SHenry07/vSphere_selfuse/ - https://github.com/SHenry07/vSphere_selfuse/issues/39
CVE ID: CVE-2022-46997 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:06:22.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mirrors.neusoft.edu.cn/pypi/web/simple/request/ - https://github.com/Viralmaniar/Passhunt/ - https://github.com/Viralmaniar/Passhunt/issues/14
CVE ID: CVE-2022-46998 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:18:09.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/shiyi-5yjak/hx4unh/kgnanw3lt8wg1tx2#%20%E3%80%8Ataocms-3.0.2-ssrf%E3%80%8B
CVE ID: CVE-2022-46999 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:17:21.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/shiyi-5yjak/hx4unh/lvalegwh46r4dgcp?singleDoc
CVE ID: CVE-2022-47002 State: PUBLISHED Published: 2023-02-01T00:00:00 Last Updated: 2024-08-03T14:47:27.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MasaCMS/MasaCMS/releases/tag/7.3.10 - https://www.hoyahaxa.com/2023/01/preliminary-security-advisory.html - https://www.hoyahaxa.com/2023/03/authentication-bypass-mura-masa.html
CVE ID: CVE-2022-47003 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:48:48.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://mura.com - https://www.masacms.com/ - https://www.murasoftware.com/mura-cms/ - https://hoyahaxa.blogspot.com/2023/01/preliminary-security-advisory.html - https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html
CVE ID: CVE-2022-47007 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:14:21.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29254
CVE ID: CVE-2022-47008 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:13:47.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29255%20
CVE ID: CVE-2022-47010 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T15:32:10.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29262
CVE ID: CVE-2022-47011 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:12:57.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29261
CVE ID: CVE-2022-47012 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:23:37.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GNS3/dynamips/issues/125
CVE ID: CVE-2022-47015 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:56:55.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954 - https://security.netapp.com/advisory/ntap-20230309-0009/ - https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html - https://lists.fedoraproject.org/archives/list/package-a