Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3010 State: PUBLISHED Published: 2024-01-02T18:32:22.947Z Last Updated: 2025-06-04T19:17:57.435Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Priva Products: TopControl Suite - Bacnet, TopControl Suite - Blue ID, TopControl Suite - Compass, TopControl Suite - Connect, TopControl Suite - TPC Problem Types: CWE-1391 Description: The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csir
opControll suite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2022-3010 - https://www.cisa.gov/news-events/ics-advisories/icsa-22-356-01 - https://csirt.divd.nl/DIVD-2022-00035
CVE ID: CVE-2022-3012 State: PUBLISHED Published: 2022-08-27T09:05:17.000Z Last Updated: 2025-04-15T13:48:10.804Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: oretnom23 Products: Fast Food Ordering System Problem Types: CWE-89 Description: A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability. Additiona
has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0x14dli/ffos-SQL-injection-vulnerability-exists - https://vuldb.com/?id.207422
CVE ID: CVE-2022-3013 State: PUBLISHED Published: 2022-08-27T09:05:19.000Z Last Updated: 2025-04-15T13:48:03.158Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple Task Managing System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-207423. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
fier of this vulnerability is VDB-207423. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.207423
CVE ID: CVE-2022-3014 State: PUBLISHED Published: 2022-08-27T09:05:20.000Z Last Updated: 2025-04-15T13:47:54.348Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Task Managing System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument student_add leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-207424. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Drun
07424. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Drun1baby/CVE_Pentest/blob/main/Task%20Managing%20System%20in%20PHP%20CMS/images/xss.png - https://vuldb.com/?id.207424
CVE ID: CVE-2022-3015 State: PUBLISHED Published: 2022-08-27T09:05:21.000Z Last Updated: 2025-04-15T13:47:47.488Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: oretnom23 Products: Fast Food Ordering System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue affects some unknown processing of the file admin/?page=reports. The manipulation of the argument date leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-207425 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
VDB-207425 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.207425
CVE ID: CVE-2022-3016 State: PUBLISHED Published: 2022-08-28T00:00:00 Last Updated: 2024-08-03T00:53:00.487Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0286. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/260516c2-5c4a-4b7f-a01c-04b1aeeea371 - https://github.com/vim/vim/commit/6d24a51b94beb1991cddce221f90b455e2d50db7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3017 State: PUBLISHED Published: 2022-08-28T13:50:08 Last Updated: 2024-08-03T00:53:00.472Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: froxlor Products: froxlor/froxlor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/5250c4b1-132b-4da6-9bd6-db36cb56bea0 - https://github.com/froxlor/froxlor/commit/bbe82286aae21328668f24857995a67598fe978a
CVE ID: CVE-2022-3018 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T14:36:20.373Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/360938 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3018.json
CVE ID: CVE-2022-3019 State: PUBLISHED Published: 2022-08-29T05:30:12 Last Updated: 2024-08-03T00:53:00.227Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: tooljet Products: tooljet/tooljet Problem Types: CWE-284 Description: The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one). Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a610300b-ce3c-4995-8337-11942b3621bf - https://github.com/tooljet/tooljet/commit/45e0d
ces: - https://huntr.dev/bounties/a610300b-ce3c-4995-8337-11942b3621bf - https://github.com/tooljet/tooljet/commit/45e0d3302d92df7d7f2d609c31cea71165600b79
CVE ID: CVE-2022-3021 State: PUBLISHED Published: 2022-09-19T14:01:06 Last Updated: 2024-08-03T00:52:59.860Z Vendors: Unknown Products: Slickr Flickr Problem Types: CWE-79 Description: The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3c5ff229-85c2-49c2-8fb9-6419a8002a4e
CVE ID: CVE-2022-3022 State: REJECTED Published: 2022-08-30T08:30:19 Last Updated: 2022-08-30T11:25:08 Description: No description available.
CVE ID: CVE-2022-3023 State: PUBLISHED Published: 2022-11-04T00:00:00.000Z Last Updated: 2025-05-02T13:49:49.115Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: pingcap Products: pingcap/tidb Problem Types: CWE-134 Description: Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/120f1346-e958-49d0-b66c-0f889a469540 - https://github.com/pingcap/tidb/commit/d0376379d615cc8f263a0b17c031ce403c8dcbfb
CVE ID: CVE-2022-3024 State: PUBLISHED Published: 2022-09-26T00:00:00.000Z Last Updated: 2025-05-22T14:26:26.193Z Vendors: Unknown Products: Bitcoin Satoshi Tools : Faucets, Visitor Rewarder, Satoshi Games, Referral Program Problem Types: CWE-863, CWE-352 Description: The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.
ripting issues Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7f43cb8e-0c1b-4528-8c5c-b81ab42778dc
CVE ID: CVE-2022-3025 State: PUBLISHED Published: 2022-09-26T12:35:38.000Z Last Updated: 2025-05-22T14:21:30.218Z Vendors: Unknown Products: Bitcoin / Altcoin Faucet Problem Types: CWE-79, CWE-352 Description: The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/66bc783b-67e1-4bd0-99c0-322873b3a22a
CVE ID: CVE-2022-3026 State: PUBLISHED Published: 2022-09-06T17:19:02 Last Updated: 2024-08-03T00:53:00.461Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: leogermani Products: WP Users Exporter Problem Types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File Description: The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that will embed into the exported CSV file triggered by an administrator and can res
rofile information like First Names that will embed into the exported CSV file triggered by an administrator and can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7da1d7cf-e8b5-4b7c-bdc1-13ef8c11b663?source=cve - https://plugins.trac.wordpress.org/browser/wp-users-exporter/trunk/A_UserExporter.class.php - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-3026
CVE ID: CVE-2022-3027 State: PUBLISHED Published: 2022-09-13T14:54:58.631Z Last Updated: 2025-04-16T16:10:02.402Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Contec Health Products: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor Problem Types: CWE-284 Description: The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information. Additional Analyst Notes: - CVE Program Containe
be exploited to write arbitrary files or display incorrect information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01
CVE ID: CVE-2022-3028 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T00:53:00.701Z Vendors: n/a Products: Linux kernel Problem Types: CWE-667 Description: A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/ba953a9d89a00c078b85f4b190bc1dde66fe16b5 - https://lore.kernel.org/
ferences: - https://github.com/torvalds/linux/commit/ba953a9d89a00c078b85f4b190bc1dde66fe16b5 - https://lore.kernel.org/all/YtoWqEkKzvimzWS5%40gondor.apana.org.au/T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3MYP7WX4PNE6RCITVXA43CECBZT4CL6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKVA75UHKVOHNOEPCLUHTFGWCOOUBDM3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEQYVCNYUWB4CJ2YRAYNF2GGFQ7SUYC4/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.ht
.debian.org/debian-lts-announce/2022/10/msg00000.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html - https://security.netapp.com/advisory/ntap-20230214-0004/
CVE ID: CVE-2022-3029 State: PUBLISHED Published: 2022-09-13T15:17:57.226892Z Last Updated: 2024-09-16T17:49:23.765Z Vendors: NLnet Labs Products: Routinator Problem Types: CWE-241 Description: In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulnerability is denial of service for the RPKI data that Routinator provides to routers. This may stop your network from validating route origins based on RPKI data. This vulnerability does not allow an attacker to manipulate RPKI data. Additional An
g route origins based on RPKI data. This vulnerability does not allow an attacker to manipulate RPKI data. Additional Analyst Notes: - CVE Program Container: References: - https://www.nlnetlabs.nl/downloads/routinator/CVE-2022-3029.txt
CVE ID: CVE-2022-3030 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T16:21:50.323Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An improper access control issue in GitLab CE/EE affecting all versions starting before 15.1.6, all versions from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure of pipeline status to unauthorized users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/37959 - https://hackerone.com/reports/749882 - http
ichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/37959 - https://hackerone.com/reports/749882 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3030.json
CVE ID: CVE-2022-3031 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T16:20:42.728Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user's password by brute force by sending crafted requests to a specific endpoint, even if the victim user has 2FA enabled on their account. Additional Analyst Notes: - CVE Program Container: - CISA
int, even if the victim user has 2FA enabled on their account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/340395 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3031.json
CVE ID: CVE-2022-3032 State: PUBLISHED Published: 2022-12-22T00:00:00 Last Updated: 2024-11-19T20:05:21.268Z Vendors: Mozilla Products: Thunderbird Problem Types: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked Description: When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1. Additional
jects were loaded and displayed. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-38/ - https://www.mozilla.org/security/advisories/mfsa2022-39/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1783831
CVE ID: CVE-2022-3033 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T16:16:38.851Z Vendors: Mozilla Products: Thunderbird Problem Types: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag Description: If a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with the <code>meta</code> tag having the <code>http-equiv="refresh"</code> attribute, and the content attribute specifying an URL, then Thunderbird started a network request to that URL, regardless of the configuration to block remote content. In combination with certain other HTML elements and attributes in the email, it was
figuration to block remote content. In combination with certain other HTML elements and attributes in the email, it was possible to execute JavaScript code included in the message in the context of the message compose document. The JavaScript code was able to perform actions including, but probably not limited to, read and modify the contents of the message compose document, including the quoted original message, which could potentially contain the decrypted plaintext of encrypted data in the crafted email. The contents could then be transmitted to the network, either to the URL specified in the META refresh tag, or to a different URL, as the JavaScript code could modify the URL specified in
e URL specified in the META refresh tag, or to a different URL, as the JavaScript code could modify the URL specified in the document. This bug doesn't affect users who have changed the default Message Body display setting to 'simple html' or 'plain text'. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-38/ - https://www.mozilla.org/security/advisories/mfsa2022-39/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1784838
CVE ID: CVE-2022-3034 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T16:00:05.338Z Vendors: Mozilla Products: Thunderbird Problem Types: An iframe element in an HTML email could trigger a network request Description: When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However, Thunderbird didn't display the document. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-38/ - https://www.mozilla.org/sec
A ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-38/ - https://www.mozilla.org/security/advisories/mfsa2022-39/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1745751
CVE ID: CVE-2022-3035 State: PUBLISHED Published: 2022-08-29T19:35:09 Last Updated: 2024-08-03T01:00:09.652Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.0.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0bbb1046-ea9e-4cb9-bc91-b294a72d1902 - https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae
CVE ID: CVE-2022-3036 State: PUBLISHED Published: 2022-09-19T14:01:06 Last Updated: 2024-08-03T01:00:08.564Z Vendors: Unknown Products: Gettext override translations Problem Types: CWE-79 Description: The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0dbc85dd-736c-492e-9db8-acb7195771aa
CVE ID: CVE-2022-3037 State: PUBLISHED Published: 2022-08-30T20:35:10 Last Updated: 2024-08-03T01:00:10.487Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0322. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5 - https://github.com/vim/vim/commit/4f1b083be43f351bc107541e7b0c9655a5d2c0bb - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RY3GEN2Q46ZJKSNHTN2XB6B3VAJBEILN/ - https://lists.fedoraproject.org/archives/list/pac
%40lists.fedoraproject.org/message/RY3GEN2Q46ZJKSNHTN2XB6B3VAJBEILN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHJ6LCLHGGVI2U6ZHXHTZ2PYP4STC23N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
CVE ID: CVE-2022-3038 State: PUBLISHED Published: 2022-09-26T15:01:19.000Z Last Updated: 2025-10-21T23:15:34.255Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://crbug.com/1340253 - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html - https://security.gentoo.org/glsa/202209-23 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
entoo.org/glsa/202209-23 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/ - http://packetstormsecurity.com/files/168596/Google-Chrome-103.0.5060.53-network-URLLoader-NotifyCompleted-Heap-Use-After-Free.html