Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2066 State: PUBLISHED Published: 2022-06-13T12:15:14 Last Updated: 2024-08-03T00:24:44.275Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: neorazorx Products: neorazorx/facturascripts Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/da4bbbfd-501f-4c7e-be83-47778103cb59 - https://github.com/neorazorx/facturascripts/commit/73a6595ca85984d65f656c6356fabb23d1936c54
CVE ID: CVE-2022-2067 State: PUBLISHED Published: 2022-06-13T12:20:13 Last Updated: 2024-08-03T00:24:44.149Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: francoisjacquet Products: francoisjacquet/rosariosis Problem Types: CWE-89 Description: SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a85a53a4-3009-4f41-ac33-8bed8bbe16a8 - https://github.com/francoisjacquet/rosariosis/commit/15d5e8700d538935b5c411b2a1e25bcf7e16c47c
CVE ID: CVE-2022-2068 State: PUBLISHED Published: 2022-06-21T14:45:20.597Z Last Updated: 2025-11-03T21:45:47.155Z Vendors: OpenSSL Products: OpenSSL Problem Types: Command injection Description: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manne
possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20220621.txt - https://git.openssl.o
ntainer: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20220621.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9 - https://www.debian.org/security/2022/dsa-5169 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/ - https://security.netapp.com/advisory/ntap-20220707-0008/ - https://lists.fedoraproject.org/archi
KGNXXKICSRPL7AMVW5M5/ - https://security.netapp.com/advisory/ntap-20220707-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ - https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
CVE ID: CVE-2022-2069 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-04-16T17:46:09.746Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.3, Teamcenter Visualization V14.0 Problem Types: CWE-122 Description: The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
ode in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-829738.pdf - https://www.cisa.gov/uscert/ics/advisories/icsa-22-195-07
CVE ID: CVE-2022-2070 State: PUBLISHED Published: 2022-09-23T15:06:57.101Z Last Updated: 2025-05-22T18:23:28.104Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Grandstream Products: Grandstream GSD3710 Problem Types: CWE-121 Description: In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a shell and getting full access to the system. The exploit affects daemons dbmng and logsrv that are running on ports 8000 and 8001 by default. Additional Analyst Not
The exploit affects daemons dbmng and logsrv that are running on ports 8000 and 8001 by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/buffer-overflow-vulnerabilities-grandstream-gsd3710
CVE ID: CVE-2022-2071 State: PUBLISHED Published: 2022-07-25T12:46:28 Last Updated: 2024-08-03T00:24:44.139Z Vendors: Unknown Products: Name Directory Problem Types: CWE-352 Description: The Name Directory WordPress plugin before 1.25.4 does not have CSRF check when importing names, and is also lacking sanitisation as well as escaping in some of the imported data, which could allow attackers to make a logged in admin import arbitrary names with XSS payloads in them. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d3653976-9e0a-4f2b-87f7-26b5e7a74b9d
CVE ID: CVE-2022-2072 State: PUBLISHED Published: 2022-07-25T12:46:43 Last Updated: 2024-08-03T00:24:44.324Z Vendors: Unknown Products: Name Directory Problem Types: CWE-79 Description: The Name Directory WordPress plugin before 1.25.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Furthermore, as the payload is also saved into the database after the request, it leads to a Stored XSS as well Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3014540c-21b3-481c-83a1-ce3017151af4
CVE ID: CVE-2022-2073 State: PUBLISHED Published: 2022-06-29T18:20:11 Last Updated: 2024-08-03T00:24:44.267Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: getgrav Products: getgrav/grav Problem Types: CWE-94 Description: Code Injection in GitHub repository getgrav/grav prior to 1.7.34. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66 - https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83
CVE ID: CVE-2022-2074 State: PUBLISHED Published: 2022-08-19T09:00:20 Last Updated: 2024-08-03T00:24:44.217Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Regex Denial of Service Description: In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/post/2022/sa2022-11/
CVE ID: CVE-2022-2075 State: PUBLISHED Published: 2022-08-19T09:10:09 Last Updated: 2024-08-03T00:24:44.145Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Regex Denial of Service Description: In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/post/2022/sa2022-12/
CVE ID: CVE-2022-2076 State: REJECTED Published: 2022-06-14T08:00:22 Last Updated: 2022-07-25T17:59:15 Description: No description available.
CVE ID: CVE-2022-2077 State: REJECTED Published: 2022-06-14T08:00:40 Last Updated: 2022-07-25T18:06:05 Description: No description available.
CVE ID: CVE-2022-2078 State: PUBLISHED Published: 2022-06-30T00:00:00 Last Updated: 2024-08-03T00:24:44.192Z Vendors: n/a Products: kernel Problem Types: CWE-121 Description: A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2022/dsa-5161 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85 - https://bugzilla.redhat.com/sh
ux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85 - https://bugzilla.redhat.com/show_bug.cgi?id=2096178
CVE ID: CVE-2022-2079 State: PUBLISHED Published: 2022-06-14T08:40:10 Last Updated: 2024-08-03T00:24:44.190Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: nocodb Products: nocodb/nocodb Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2615adf2-ff40-4623-97fb-2e4a3800202a - https://github.com/nocodb/nocodb/commit/362f8f0869989bc13bdcd66c6fc9c86ac79b9992
CVE ID: CVE-2022-2080 State: PUBLISHED Published: 2022-08-29T14:40:27 Last Updated: 2024-08-03T00:24:44.176Z Vendors: Unknown Products: Sensei LMS – Online Courses, Quizzes, & Learning Problem Types: CWE-639 Description: The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any authenticated user to send messages to arbitrary private conversation via a IDOR attack. Note: Attackers are not able to see responses/messages between the teacher and student Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5395d196-a39a-4a58-913e-5b5b9d6123a5 - https://h
- CVE Program Container: References: - https://wpscan.com/vulnerability/5395d196-a39a-4a58-913e-5b5b9d6123a5 - https://hackerone.com/reports/1592596
CVE ID: CVE-2022-2081 State: PUBLISHED Published: 2024-01-04T09:15:30.332Z Last Updated: 2025-05-22T18:20:49.318Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: RTU500 series CMU firmware Problem Types: CWE-787 Description: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack ov
reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000111&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-2083 State: PUBLISHED Published: 2022-09-05T12:35:17 Last Updated: 2024-08-03T00:24:44.125Z Vendors: Unknown Products: Simple Single Sign On Problem Types: CWE-319 Cleartext Transmission of Sensitive Information Description: The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2bbfc855-6901-462f-8a93-120d7fb5d268 - https://lana.codes/lanavdb/0bab7575-45fc-432d-945e-6100c35c574c/
CVE ID: CVE-2022-2084 State: PUBLISHED Published: 2023-04-19T21:47:41.034Z Last Updated: 2025-02-05T14:42:29.207Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Canonical Ltd. Products: cloud-init Problem Types: CWE-532 Description: Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/canonical/cloud-init/commit/4d467b14363d800b2185b89790d57871f11ea88c - https://ubuntu.com/security/notices/USN-5496-1
CVE ID: CVE-2022-2085 State: PUBLISHED Published: 2022-06-16T00:00:00.000Z Last Updated: 2025-02-13T16:28:52.337Z Vendors: n/a Products: GhostScript Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, mem_x_device is used and does not have an init_device_procs defined. This flaw allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer derefe
w allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer dereference flaw, causing an application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=704945 - https://bugzilla.redhat.com/show_bug.cgi?id=2095261 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ae1061d948d88667bdf51d47d918c4684d0f67df - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERSZX5LKDWAHZWJYBMP2E2UHOPUCDEGV/ - https://security.gentoo.org/glsa/202211-11 - https://security.gentoo.org/glsa/202309-03
CVE ID: CVE-2022-2086 State: PUBLISHED Published: 2022-06-15T13:10:12.000Z Last Updated: 2025-04-15T14:25:18.221Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Bank Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep(10),3,4,5 --+ leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Contain
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joinia/webray.com.cn/blob/main/php-bank/phpbanksql.md - https://vuldb.com/?id.202034
CVE ID: CVE-2022-2087 State: PUBLISHED Published: 2022-06-15T13:10:14.000Z Last Updated: 2025-04-15T14:25:10.849Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Bank Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affects the file /mnotice.php?id=2. The manipulation of the argument notice with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joinia/webray.com.cn/blob/main/php-bank/phpbankxss.md - https://vuldb.com/?id.202035
CVE ID: CVE-2022-2088 State: PUBLISHED Published: 2022-06-27T16:14:07.000Z Last Updated: 2025-04-16T16:15:53.017Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Elcomplus Products: SmartICS Problem Types: CWE-284 Description: An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-05
CVE ID: CVE-2022-2089 State: PUBLISHED Published: 2022-07-11T12:57:15 Last Updated: 2024-08-03T00:24:44.232Z Vendors: Unknown Products: Bold Page Builder Problem Types: CWE-79 Description: The Bold Page Builder WordPress plugin before 4.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9fe7e9d5-7bdf-4ade-9a3c-b4af863fa4e8
CVE ID: CVE-2022-2090 State: PUBLISHED Published: 2022-07-17T10:35:45 Last Updated: 2024-08-03T00:24:44.180Z Vendors: Unknown Products: Discount Rules for WooCommerce Problem Types: CWE-79 Description: The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0201f365-7acb-4640-bd3f-7119432f4917
CVE ID: CVE-2022-2091 State: PUBLISHED Published: 2022-07-11T12:57:20 Last Updated: 2024-08-03T00:24:44.215Z Vendors: Unknown Products: Cache Images Problem Types: CWE-352 Description: The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make any logged user upload images via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/03e7c2dc-1c6d-4cff-af59-6b41ead74978
CVE ID: CVE-2022-2092 State: PUBLISHED Published: 2022-07-11T12:57:25 Last Updated: 2024-08-03T00:24:44.204Z Vendors: Unknown Products: WooCommerce PDF Invoices & Packing Slips Problem Types: CWE-79 Description: The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/87546554-276a-45fe-b2aa-b18bfc55db2d
CVE ID: CVE-2022-2093 State: PUBLISHED Published: 2022-07-11T12:57:32 Last Updated: 2024-08-03T00:24:44.260Z Vendors: Unknown Products: WP Duplicate Page Problem Types: CWE-79 Description: The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a11628e4-f47b-42d8-9c09-7536d49fce4c
CVE ID: CVE-2022-2094 State: PUBLISHED Published: 2023-02-08T09:27:51.906Z Last Updated: 2025-03-25T13:55:06.503Z Vendors: Unknown Products: Yellow Yard Searchbar Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c9a106e1-29ae-47ad-907b-01086af3d3fb
CVE ID: CVE-2022-2095 State: PUBLISHED Published: 2022-08-05T15:12:59 Last Updated: 2024-08-03T00:24:44.172Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to view a public project's Deploy Key's public fingerprint and name when that key has write permission. Note that GitLab never asks for nor stores the private key. Additional Analyst Not
e when that key has write permission. Note that GitLab never asks for nor stores the private key. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/365415 - https://hackerone.com/reports/1600325 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2095.json
CVE ID: CVE-2022-2097 State: PUBLISHED Published: 2022-07-05T10:30:13.658000Z Last Updated: 2024-09-17T01:06:49.390Z Vendors: OpenSSL Products: OpenSSL Problem Types: Fencepost error Description: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in
based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20220705.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/ - https://lists.fedoraproject.org/archives/list/pack
40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/ - https://security.netapp.com/advisory/ntap-20220715-0011/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ - https://security.gentoo.org/glsa/202210-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf - https://www.debian.org/security/2023/dsa-5343 - https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html - https://security.netapp.com/advisory/ntap-20230420-0008/ - https://security.ne
bian-lts-announce/2023/02/msg00019.html - https://security.netapp.com/advisory/ntap-20230420-0008/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2022-2098 State: PUBLISHED Published: 2022-06-16T09:50:10 Last Updated: 2024-08-03T00:24:44.190Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: kromitgmbh Products: kromitgmbh/titra Problem Types: CWE-521 Description: Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a5d6c854-e158-49e9-bf40-bddc93dda7e6 - https://github.com/kromitgmbh/titra/commit/7f09078a2ab88c35f2375c5f67bd0336c0e6c7a1