Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-25763 State: PUBLISHED Published: 2022-08-10T05:50:21.000Z Last Updated: 2025-10-20T17:59:18.396Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-444 Description: Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21 - https://www.debian.org/security/2022/dsa-5206 - https://lists.fedoraproject.org/archives/list/package-announce%
9vwg21 - https://www.debian.org/security/2022/dsa-5206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCSBQBYPOZSWS5LCOAQ6LJLRLXFIAW5A/
CVE ID: CVE-2022-25765 State: PUBLISHED Published: 2022-09-09T05:00:15.097029Z Last Updated: 2024-09-16T16:47:50.441Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: pdfkit Problem Types: Command Injection Description: The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795 - https://github.com/pdfkit/pdfkit/blob/master/lib/pdfkit/source.rb%23L44-L50 - https://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb%23L55-L58 - https://list
s://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb%23L55-L58 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFB2BFKH5SUGRKXMY6PWRQNGKZML7GDT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESWB6SX7HYWQ54UGBGQOZ7G24O6RAOKD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36GAV3TKM3JXV6UVMLMTTDRCPKSNETQ/ - http://packetstormsecurity.com/files/171746/pdfkit-0.8.7.2-Command-Injection.html
CVE ID: CVE-2022-25766 State: PUBLISHED Published: 2022-03-21T17:15:16.570285Z Last Updated: 2024-09-16T22:41:07.983Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: ungit Problem Types: Remote Code Execution (RCE) Description: The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git options it was possible to get arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-UNGIT-2414099 -
xecution. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-UNGIT-2414099 - https://github.com/FredrikNoren/ungit/pull/1510 - https://github.com/FredrikNoren/ungit/blob/master/CHANGELOG.md%231520
CVE ID: CVE-2022-25767 State: PUBLISHED Published: 2022-05-01T15:30:34.274666Z Last Updated: 2024-09-16T20:52:29.575Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: com.bstek.ureport:ureport2-console Problem Types: Remote Code Execution Description: All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JAVA-COMBSTEKUREPORT-2322018 - https://github.com/JinYiTong/CVE-Req/blob/main/ureport2/ureport2-c
ps://snyk.io/vuln/SNYK-JAVA-COMBSTEKUREPORT-2322018 - https://github.com/JinYiTong/CVE-Req/blob/main/ureport2/ureport2-console.md
CVE ID: CVE-2022-25768 State: PUBLISHED Published: 2024-09-18T20:55:53.187Z Last Updated: 2024-09-19T15:42:44.517Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Mautic Products: Mautic Problem Types: CWE-287 Description: The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade process without permission. As upgrading in the user interface is deprecated, this functionality is no longer required. Additional Analyst Notes: - CISA ADP
ding in the user interface is deprecated, this functionality is no longer required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-x3jx-5w6m-q2fc
CVE ID: CVE-2022-25769 State: PUBLISHED Published: 2024-09-18T14:47:09.029Z Last Updated: 2024-09-18T21:28:12.305Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: Mautic Products: Mautic Problem Types: CWE-1284 Description: ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-mj6m-246h-9w56 - https://www.mautic.org/blog/commu
ferences: - https://github.com/mautic/mautic/security/advisories/GHSA-mj6m-246h-9w56 - https://www.mautic.org/blog/community/mautic-4-2-one-small-step-mautic
CVE ID: CVE-2022-25770 State: PUBLISHED Published: 2024-09-18T21:26:34.059Z Last Updated: 2024-09-19T14:47:14.786Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Mautic Products: Mautic Problem Types: CWE-306 Description: Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc
CVE ID: CVE-2022-25772 State: PUBLISHED Published: 2022-06-20T00:00:00 Last Updated: 2024-08-03T04:49:44.197Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: Mautic Products: Mautic Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/security/advisories/GHSA-pjpc-87mp-4332 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html
CVE ID: CVE-2022-25773 State: PUBLISHED Published: 2025-02-26T11:48:33.383Z Last Updated: 2025-03-12T19:51:58.376Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mautic Products: mautic/core Problem Types: CWE-22 Description: This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic
intended temporary directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-4w2w-36vm-c8hf
CVE ID: CVE-2022-25774 State: PUBLISHED Published: 2024-09-18T14:54:36.249Z Last Updated: 2024-09-18T21:29:02.453Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Mautic Products: Mautic Problem Types: CWE-79 Description: Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-fhcx-f7jg-jx3f
CVE ID: CVE-2022-25775 State: PUBLISHED Published: 2024-09-18T15:01:23.529Z Last Updated: 2024-09-18T21:30:23.104Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Mautic Products: Mautic Problem Types: CWE-89 Description: Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-jj6w-2cqg-7p94
CVE ID: CVE-2022-25776 State: PUBLISHED Published: 2024-09-18T15:06:54.543Z Last Updated: 2024-09-18T21:31:01.738Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Mautic Products: Mautic Problem Types: CWE-276 Description: Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing. Users could potentially access sensitive data such as names and surnames, company names and stage names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-qjx3-2g35-6hv8
CVE ID: CVE-2022-25777 State: PUBLISHED Published: 2024-09-18T15:13:52.308Z Last Updated: 2024-09-18T21:32:05.348Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H) Vendors: Mautic Products: Mautic Problem Types: CWE-918 Description: Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mautic/mautic/security/advisories/GHSA-mgv8-w49f-822w
CVE ID: CVE-2022-25778 State: PUBLISHED Published: 2022-05-04T13:49:55 Last Updated: 2024-08-03T04:49:43.681Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25779 State: PUBLISHED Published: 2022-05-04T13:51:08 Last Updated: 2024-08-03T04:49:43.260Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-779 Description: Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25780 State: PUBLISHED Published: 2022-05-04T13:52:15 Last Updated: 2024-08-03T04:49:43.496Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-200 Description: Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25781 State: PUBLISHED Published: 2022-05-04T13:53:17 Last Updated: 2024-08-03T04:49:43.192Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25782 State: PUBLISHED Published: 2022-05-04T13:54:16 Last Updated: 2024-08-03T04:49:43.231Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-274 Description: Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25783 State: PUBLISHED Published: 2022-05-04T13:55:13 Last Updated: 2024-08-03T04:49:43.230Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-778 Description: Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25784 State: PUBLISHED Published: 2022-05-04T13:56:20 Last Updated: 2024-08-03T04:49:43.564Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Secomea Products: SiteManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25785 State: PUBLISHED Published: 2022-05-04T13:57:06 Last Updated: 2024-08-03T04:49:43.219Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Secomea Products: SiteManager Problem Types: CWE-121 Description: Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25786 State: PUBLISHED Published: 2022-05-04T17:17:34 Last Updated: 2024-08-03T04:49:43.267Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-420 Description: Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25787 State: PUBLISHED Published: 2022-05-04T13:58:45 Last Updated: 2024-08-03T04:49:43.776Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Secomea Products: GateManager Problem Types: CWE-598 Description: Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-25788 State: PUBLISHED Published: 2022-04-19T20:26:31 Last Updated: 2024-08-03T04:49:43.514Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-bound Write Description: A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002
CVE ID: CVE-2022-25789 State: PUBLISHED Published: 2022-04-11T19:37:50 Last Updated: 2024-08-03T04:49:43.569Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Use-after-free Description: A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE ID: CVE-2022-25790 State: PUBLISHED Published: 2022-04-11T19:37:51 Last Updated: 2024-08-03T04:49:43.515Z Vendors: n/a Products: Autodesk Navisworks, Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-bounds Write Description: A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/
lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE ID: CVE-2022-25791 State: PUBLISHED Published: 2022-04-11T19:37:51 Last Updated: 2024-08-03T04:49:43.624Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Memory Corruption Description: A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE ID: CVE-2022-25792 State: PUBLISHED Published: 2022-04-11T19:37:52 Last Updated: 2024-08-03T04:49:43.219Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Buffer Overflow Description: A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-
rbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE ID: CVE-2022-25793 State: PUBLISHED Published: 2022-08-10T16:03:59 Last Updated: 2024-08-03T04:49:44.009Z Vendors: n/a Products: Autodesk 3ds Max Problem Types: Stack-based Buffer Overflow Description: A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This vulnerability may allow arbitrary code execution on affected installations of Autodesk 3ds Max. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-ad
esk 3ds Max. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0006
CVE ID: CVE-2022-25794 State: PUBLISHED Published: 2022-04-11T00:00:00 Last Updated: 2024-08-03T04:49:43.164Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Out-Of-Bounds Read Vulnerability Description: An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodes
the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0006
CVE ID: CVE-2022-25795 State: PUBLISHED Published: 2022-04-13T00:00:00 Last Updated: 2024-08-03T04:49:43.881Z Vendors: n/a Products: Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac Problem Types: Out-of-bound Write Description: A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 - https:
es: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010%3B
CVE ID: CVE-2022-25796 State: PUBLISHED Published: 2022-04-11T19:37:53 Last Updated: 2024-08-03T04:49:43.585Z Vendors: n/a Products: Autodesk Navisworks Problem Types: Double Free Description: A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE ID: CVE-2022-25797 State: PUBLISHED Published: 2022-04-13T00:00:00 Last Updated: 2024-08-03T04:49:43.919Z Vendors: n/a Products: Autodesk Trueview Problem Types: Memory Corruption Description: A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
CVE ID: CVE-2022-25799 State: PUBLISHED Published: 2022-08-16T22:00:15.993170Z Last Updated: 2024-09-17T02:06:51.198Z Vendors: CERT/CC Products: VINCE - The Vulnerability Information and Coordination Environment Problem Types: CWE-601 Description: An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user