Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30067 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T06:40:47.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gimp/-/issues/8120 - https://lists.debian.org/debian-lts-announce/2023/11/msg00015.html
CVE ID: CVE-2022-30072 State: PUBLISHED Published: 2022-05-17T16:05:41 Last Updated: 2024-08-03T06:40:47.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/APTX-4879/CVE - https://github.com/WBCE/WBCE_CMS - https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30072.pdf
CVE ID: CVE-2022-30073 State: PUBLISHED Published: 2022-05-17T16:02:11 Last Updated: 2024-08-03T06:40:47.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/APTX-4879/CVE - https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30073.pdf
CVE ID: CVE-2022-30075 State: PUBLISHED Published: 2022-06-09T00:59:47 Last Updated: 2024-08-03T06:40:47.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - https://github.com/aaronsvk - https://github.com/aaronsvk/CVE-2022-30075 - https://www.exploit-db.com/exploits/50962 - http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html
CVE ID: CVE-2022-30076 State: PUBLISHED Published: 2023-04-16T00:00:00.000Z Last Updated: 2025-02-06T19:08:13.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/171777/ENTAB-ERP-1.0-Information-Disclosure.html
CVE ID: CVE-2022-30078 State: PUBLISHED Published: 2022-09-07T18:12:50 Last Updated: 2024-08-03T06:40:47.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - http://r6200v2.com - https://github.com/10TG/vulnerabilities/blob/main/Netgear/CVE-2022-30078/CVE
.com/about/security/ - http://r6200v2.com - https://github.com/10TG/vulnerabilities/blob/main/Netgear/CVE-2022-30078/CVE-2022-30078.md
CVE ID: CVE-2022-30079 State: PUBLISHED Published: 2022-09-08T11:57:08 Last Updated: 2024-08-03T06:40:47.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter. Additional Analyst Notes: - CVE Program Container: References: - http://netgear.com - https://www.netgear.com/about/security/ - http://r6200v2.com - https://github.com/10TG/vulnerabilities/blob/main/Netgear/CVE-2022-30079/CVE-2022-30079.md
CVE ID: CVE-2022-30083 State: PUBLISHED Published: 2022-07-29T23:18:24 Last Updated: 2024-08-03T06:40:47.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote). Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/support/using-burp-to-test-for-code-injection-vulnerabilities
CVE ID: CVE-2022-30105 State: PUBLISHED Published: 2022-05-18T15:52:59 Last Updated: 2024-08-03T06:40:47.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the [form name] form; [list vulnerable parameters], are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters, it is possible to inject a an OS command which will be executed with root privileges, as the web interface, and all processes on t
ible to inject a an OS command which will be executed with root privileges, as the web interface, and all processes on the device, run as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploitee.rs/index.php/Belkin_N300#Remote_Root
CVE ID: CVE-2022-30110 State: PUBLISHED Published: 2022-05-17T13:14:17 Last Updated: 2024-08-03T06:40:47.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/mojo42/Jirafeau/-/merge_requests/103
CVE ID: CVE-2022-30111 State: PUBLISHED Published: 2022-05-18T17:18:11 Last Updated: 2024-08-03T06:40:47.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=EruaGuE-cWI - https://twitter.com/Kevin2600/status/1495007534419038213 - https://tiger-team-1337.blogspot.com/2022/05/rf-remote-mck-lock-predictable-rolling.html
CVE ID: CVE-2022-30113 State: PUBLISHED Published: 2022-07-14T12:39:17 Last Updated: 2024-08-03T06:40:47.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.fahuo100.cn - https://www.yuque.com/docs/share/7a99158f-9077-4b37-939d-8ffecff27357
CVE ID: CVE-2022-30114 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2025-01-21T19:20:02.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114/ - https://www.fastweb.it/myfastweb/assistenza/guide/FASTGate/
CVE ID: CVE-2022-30115 State: PUBLISHED Published: 2022-06-01T00:00:00 Last Updated: 2024-08-03T06:40:47.498Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-325 Description: Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1
railing dot in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1557449 - https://security.netapp.com/advisory/ntap-20220609-0009/ - http://www.openwall.com/lists/oss-security/2022/10/26/4 - https://security.gentoo.org/glsa/202212-01 - http://www.openwall.com/lists/oss-security/2022/12/21/1
CVE ID: CVE-2022-30117 State: PUBLISHED Published: 2022-06-24T14:59:59 Last Updated: 2024-08-03T06:40:47.569Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-22 Description: Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. C
tch expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. Credit to Siebene for reporting. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1482280 - https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes
CVE ID: CVE-2022-30118 State: PUBLISHED Published: 2022-06-24T15:00:07 Last Updated: 2024-08-03T06:40:47.376Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-79 Description: Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H
automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes - https://hackerone.com/reports/1370054
CVE ID: CVE-2022-30119 State: PUBLISHED Published: 2022-06-24T14:59:59 Last Updated: 2024-08-03T06:40:47.817Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-79 Description: XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for r
rity team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes - https://hackerone.com/reports/1370054
CVE ID: CVE-2022-30120 State: PUBLISHED Published: 2022-06-24T15:00:06 Last Updated: 2024-08-03T06:40:47.792Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-79 Description: XSS in /dashboard/blocks/stacks/view_details/ - old browsers only. When using an older browser with built-in XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 to allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 3.1with CVSS v3.1 Vector AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/
echanism. Concrete CMS Security team ranked this vulnerability 3.1with CVSS v3.1 Vector AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N. Sanitation has been added where built urls are output. Credit to Credit to Bogdan Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) for reporting Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes - https://hackerone.com/reports/1363598
CVE ID: CVE-2022-30121 State: PUBLISHED Published: 2022-09-23T13:37:51.000Z Last Updated: 2025-05-22T20:31:59.503Z Vendors: n/a Products: Ivanti Endpoint Manager Problem Types: Privilege Escalation (CAPEC-233) Description: The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-30121?language=en_US
CVE ID: CVE-2022-30122 State: PUBLISHED Published: 2022-12-05T00:00:00 Last Updated: 2024-11-19T20:16:22.716Z Vendors: n/a Products: https://github.com/rack/rack Problem Types: CWE-400 Description: A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.rubyonrails.org/t/cve-2022-30122-denial-of-service-vulnerability-in-rack-multipart-parsing/80729 - https://www.debian.org/security/2023/dsa-5530 - https://security.gentoo.org/glsa/202310-18 - https://security.netapp.com/advisory/ntap-20231208-0012/
CVE ID: CVE-2022-30123 State: PUBLISHED Published: 2022-12-05T00:00:00 Last Updated: 2024-08-03T06:40:47.582Z Vendors: n/a Products: https://github.com/rack/rack Problem Types: CWE-150 Description: A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.rubyonrails.org/t/cve-2022-30123-possible-shell-escape-sequence-injection-vulnerability-in-rack/80728 - https://www.debian.org/security/2023/dsa-5530 - https://security.gentoo.org/glsa/202310-18 - https://security.netapp.com/advisory/ntap-202312
g/security/2023/dsa-5530 - https://security.gentoo.org/glsa/202310-18 - https://security.netapp.com/advisory/ntap-20231208-0011/
CVE ID: CVE-2022-30124 State: PUBLISHED Published: 2022-09-23T18:28:14.000Z Last Updated: 2025-05-22T18:12:33.950Z Vendors: n/a Products: Rocket.Chat Mobile app Problem Types: CWE-287 Description: An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication (PIN code). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1126414
CVE ID: CVE-2022-30126 State: PUBLISHED Published: 2022-05-16T17:05:13 Last Updated: 2024-08-03T06:40:47.590Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: Denial of Service Description: In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0 Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4 - http://www.
s: - CVE Program Container: References: - https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4 - http://www.openwall.com/lists/oss-security/2022/05/16/3 - http://www.openwall.com/lists/oss-security/2022/05/31/2 - http://www.openwall.com/lists/oss-security/2022/06/27/5 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220624-0004/
CVE ID: CVE-2022-30127 State: PUBLISHED Published: 2022-06-01T20:10:14 Last Updated: 2025-01-02T18:58:23.678Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30127
CVE ID: CVE-2022-30128 State: PUBLISHED Published: 2022-06-01T20:10:16 Last Updated: 2025-01-02T18:58:23.115Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30128
CVE ID: CVE-2022-30129 State: PUBLISHED Published: 2022-05-10T20:35:03 Last Updated: 2025-01-02T18:58:29.243Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30129
CVE ID: CVE-2022-30130 State: PUBLISHED Published: 2022-05-10T20:35:04 Last Updated: 2025-07-10T16:38:42.354Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 3.5 AND 4.6/4.6.2 Problem Types: Denial of Service Description: .NET Framework Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30130
CVE ID: CVE-2022-30131 State: PUBLISHED Published: 2022-06-15T21:51:18 Last Updated: 2025-01-02T19:02:50.392Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 21H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE
ption: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30131
CVE ID: CVE-2022-30132 State: PUBLISHED Published: 2022-06-15T21:51:19 Last Updated: 2025-01-02T19:02:51.096Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Elevation of Privilege Description: Windows Container Manager Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulner
rability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30132
CVE ID: CVE-2022-30133 State: PUBLISHED Published: 2022-08-09T19:48:11 Last Updated: 2025-01-02T19:33:42.846Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Ser
allation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3013
nalyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30133
CVE ID: CVE-2022-30134 State: PUBLISHED Published: 2022-08-09T19:48:24 Last Updated: 2025-01-02T19:34:21.182Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 11 Problem Types: Elevation of Privilege Description: Microsoft Exchange Server Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/upda
isclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30134
CVE ID: CVE-2022-30135 State: PUBLISHED Published: 2022-06-15T21:51:21 Last Updated: 2025-01-02T19:02:51.702Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C) Vendors: Microsoft Products: Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Media Center Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric