Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-09071 - https://www.zerodayinitiative.com/advisories/ZDI-22-759/
CVE ID: CVE-2022-30524 State: PUBLISHED Published: 2022-05-09T18:00:09 Last Updated: 2024-08-03T06:48:36.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42261
CVE ID: CVE-2022-30525 State: PUBLISHED Published: 2022-05-12T13:05:11.000Z Last Updated: 2025-10-21T23:15:39.737Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: USG FLEX 100(W) firmware, USG FLEX 200 firmware, USG FLEX 500 firmware, USG FLEX 700 firmware, ATP series firmware, VPN series firmware, USG FLEX 50(W) firmware, USG 20(W)-VPN firmware Problem Types: CWE-78 Description: A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware v
re versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml
nces: - https://www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml - http://packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html - http://packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html - http://packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html - http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html
CVE ID: CVE-2022-30526 State: PUBLISHED Published: 2022-07-19T05:45:14 Last Updated: 2024-08-03T06:48:36.418Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: USG FLEX 100(W) firmware, USG FLEX 200 firmware, USG FLEX 500 firmware, USG FLEX 700 firmware, ATP series firmware, VPN series firmware, USG FLEX 50(W) firmware, USG 20(W)-VPN firmware, USG/ZyWALL series firmware Problem Types: CWE-269 Description: A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700
h 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.09 through 4.72, which could allow a local attacker to execute some OS commands with root privileges in some directories on a vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerab
ontainer: References: - https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml - http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html
CVE ID: CVE-2022-30527 State: PUBLISHED Published: 2023-10-10T10:20:55.760Z Last Updated: 2025-02-27T20:46:20.307Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-732 Description: A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-160243.pdf - https://cert-portal.siemens.com/productcert/html/ssa-160243.html
CVE ID: CVE-2022-30528 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T18:30:50.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/mod_users/controller.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/asith-eranga/isic - https://github.com/killmonday/isic.lk-RCE
CVE ID: CVE-2022-30529 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-28T18:20:19.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/application/libs/js/tinymce/plugins/filemanager/dialog.php and /system/application/libs/js/tinymce/plugins/filemanager/upload.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/asith-eranga/isic - https://github.com/killmonday/isic.lk-RCE
CVE ID: CVE-2022-30530 State: PUBLISHED Published: 2023-02-16T20:00:03.469Z Last Updated: 2025-01-27T18:20:40.194Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DSA software Problem Types: escalation of privilege Description: Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html
CVE ID: CVE-2022-30531 State: PUBLISHED Published: 2023-02-16T20:00:07.898Z Last Updated: 2025-01-27T18:19:41.983Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Iris(R) Xe MAX drivers for Windows Problem Types: information disclosure Description: Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html
CVE ID: CVE-2022-30532 State: PUBLISHED Published: 2022-07-19T06:50:10 Last Updated: 2024-08-03T06:48:36.351Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Insufficient Logging Description: In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/post/2022/sa2022-08/
CVE ID: CVE-2022-30533 State: PUBLISHED Published: 2022-06-16T01:35:18 Last Updated: 2024-08-03T06:48:36.370Z Vendors: Webnus Products: Modern Events Calendar Lite Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://webnus.net/modern-events-calendar/lite/ - https://jvn.jp/en/jp/JVN04155116/index.html
CVE ID: CVE-2022-30534 State: PUBLISHED Published: 2022-08-22T18:23:38.366Z Last Updated: 2025-04-15T18:51:44.789Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd3
Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1546
CVE ID: CVE-2022-30535 State: PUBLISHED Published: 2022-08-04T17:45:41.852883Z Last Updated: 2024-09-16T20:07:20.068Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: NGINX Ingress Controller Problem Types: CWE-20 Description: In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K52125139
CVE ID: CVE-2022-30536 State: PUBLISHED Published: 2022-07-21T17:22:01.462Z Last Updated: 2025-02-20T20:17:12.265Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: Florent Maillefaud Products: WP Maintenance (WordPress plugin) Problem Types: CWE-79 Description: Authenticated Stored Cross-Site Scripting (XSS) vulnerability in Florent Maillefaud's WP Maintenance plugin <= 6.0.7 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-maintenance/#developers - https://patchstack.com/database/vulnerability/wp-maintenance/wordpress-wp-maintenance-plugin-6-0-7-authenticated-stored-cross-si
patchstack.com/database/vulnerability/wp-maintenance/wordpress-wp-maintenance-plugin-6-0-7-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-30537 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:29.829Z Description: No description available.
CVE ID: CVE-2022-30538 State: PUBLISHED Published: 2022-06-16T01:35:21 Last Updated: 2024-08-03T06:48:36.458Z Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: Out-of-bounds Write Description: Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU99188133/index.html
CVE ID: CVE-2022-30539 State: PUBLISHED Published: 2023-02-16T19:59:56.927Z Last Updated: 2025-01-27T18:21:55.751Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html
CVE ID: CVE-2022-30540 State: PUBLISHED Published: 2022-06-01T13:42:25.030Z Last Updated: 2025-04-16T17:52:35.320Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Horner Automation Cscape Csfont Problem Types: CWE-122 Description: The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02
CVE ID: CVE-2022-30541 State: PUBLISHED Published: 2022-10-25T16:33:38.172Z Last Updated: 2025-04-15T18:48:07.116Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1557
CVE ID: CVE-2022-30542 State: PUBLISHED Published: 2022-11-11T15:48:55.893Z Last Updated: 2025-02-05T15:26:46.640Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families Problem Types: escalation of privilege Description: Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families before version R02.01.0014 may allow a privileged user to potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - C
o potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html
CVE ID: CVE-2022-30543 State: PUBLISHED Published: 2022-11-09T17:35:40.288Z Last Updated: 2025-04-15T18:40:37.531Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-489 Description: A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to execution of privileged operations. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://inhandnetworks.com/upload/attachment/202210
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://inhandnetworks.com/upload/attachment/202210/25/InHand-PSA-2022-02.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1519
CVE ID: CVE-2022-30544 State: PUBLISHED Published: 2023-01-17T04:23:59.322Z Last Updated: 2025-01-13T15:59:29.537Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: MiKa Products: OSM – OpenStreetMap Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in MiKa's OSM – OpenStreetMap plugin <= 6.0.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/osm/wordpress-osm-openstreetmap-plugin-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-30545 State: PUBLISHED Published: 2022-11-08T18:16:22.218Z Last Updated: 2025-02-20T19:55:57.616Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: 5 Anker GmbH Products: 5 Anker Connect (WordPress plugin) Problem Types: CWE-79 Description: Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/5-anker-connect/wordpress-5-anker-connect-plugin-1-2-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/5-anker-connect/
CVE ID: CVE-2022-30546 State: PUBLISHED Published: 2022-06-16T01:35:22 Last Updated: 2024-08-03T06:48:36.431Z Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: Out-of-bounds Read Description: Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU99188133/index.html
CVE ID: CVE-2022-30547 State: PUBLISHED Published: 2022-08-22T18:24:03.436Z Last Updated: 2025-04-15T18:51:38.193Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/upda
- CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1547
CVE ID: CVE-2022-30548 State: PUBLISHED Published: 2022-11-11T15:48:41.760Z Last Updated: 2025-02-05T20:52:42.780Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Glorp software Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00673.html
CVE ID: CVE-2022-30549 State: PUBLISHED Published: 2022-06-16T01:35:24 Last Updated: 2024-08-03T06:48:36.444Z Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-Server and V-Server Lite Problem Types: Out-of-bounds Read Description: Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://monitouch.fujielectric.com/site/download-e
//monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://monitouch.fujielectric.com/site/download-eu/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU93134398/index.html
CVE ID: CVE-2022-30550 State: PUBLISHED Published: 2022-07-17T00:00:00 Last Updated: 2024-10-15T18:35:00.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an unintended security configuration and can permit privilege escalation in certain configurations. The documentation does not advise against the use of passdb definitions that have the same driver and args settings. One such con
entation does not advise against the use of passdb definitions that have the same driver and args settings. One such configuration would be where an administrator wishes to use the same PAM configuration or passwd file for both normal and master users but use the username_filter setting to restrict which of the users is able to be a master user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dovecot.org/security - https://www.dovecot.org/download/ - https://www.openwall.com/lists/oss-security/2022/07/08/1 - https://lists.debian.org/debian-lts-announce/2022/09/msg00032.html - https://security.gentoo.org/glsa/202310-19
CVE ID: CVE-2022-30551 State: PUBLISHED Published: 2022-05-20T11:19:40 Last Updated: 2024-08-03T06:48:36.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation.org - https://github.com/OPCFoundation/UA-Java-Legacy - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-30551.pdf
CVE ID: CVE-2022-30552 State: PUBLISHED Published: 2022-06-08T12:32:25.000Z Last Updated: 2025-11-03T19:27:02.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Das U-Boot 2022.01 has a Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/tags - https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/
CVE ID: CVE-2022-30556 State: PUBLISHED Published: 2022-06-08T10:00:55 Last Updated: 2024-08-03T06:48:36.447Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-200 Description: Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/7 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
dvisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-30557 State: PUBLISHED Published: 2022-05-11T19:34:01 Last Updated: 2024-08-03T06:48:36.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html