Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0808 State: PUBLISHED Published: 2022-04-05T00:26:00 Last Updated: 2024-08-02T23:40:04.369Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1292271 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0809 State: PUBLISHED Published: 2022-04-05T00:26:03 Last Updated: 2024-08-02T23:40:04.284Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1293428 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0811 State: PUBLISHED Published: 2022-03-16T14:03:40 Last Updated: 2024-08-02T23:40:04.258Z Vendors: n/a Products: CRI-O Problem Types: CWE-94 Description: A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2059475 - https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7
CVE ID: CVE-2022-0812 State: PUBLISHED Published: 2022-08-29T14:03:05.000Z Last Updated: 2025-02-13T16:28:49.561Z Vendors: n/a Products: Kernel Problem Types: CWE-200 Description: An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2058361 - https://bugzilla.redhat.com/show_bug.cgi?id=2058955 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=912288442cb2f431bf3c8cb097a5de83bc6dbac1 - https://access.redhat.com/secu
linux/kernel/git/torvalds/linux.git/commit/?id=912288442cb2f431bf3c8cb097a5de83bc6dbac1 - https://access.redhat.com/security/cve/CVE-2022-0812 - https://ubuntu.com/security/CVE-2022-0812 - https://security.netapp.com/advisory/ntap-20230427-0011/
CVE ID: CVE-2022-0813 State: PUBLISHED Published: 2022-03-09T14:59:28.954074Z Last Updated: 2024-09-16T23:51:38.854Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: phpMyAdmin Products: phpMyAdmin Problem Types: CWE-200 Description: PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/phpmyadmin-exposure-sensitive-information - https://www.phpmyadmin.net/news/2022/2/11/phpmyadmin-4910-and
ity-advisories/phpmyadmin-exposure-sensitive-information - https://www.phpmyadmin.net/news/2022/2/11/phpmyadmin-4910-and-513-are-released/ - https://security.gentoo.org/glsa/202311-17
CVE ID: CVE-2022-0814 State: PUBLISHED Published: 2022-05-09T16:50:32 Last Updated: 2024-08-02T23:40:04.430Z Vendors: Unknown Products: Ubigeo de Perú para Woocommerce y WordPress Problem Types: CWE-89 Description: The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269
CVE ID: CVE-2022-0815 State: PUBLISHED Published: 2022-03-10T22:30:11 Last Updated: 2024-08-02T23:40:04.354Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: McAfee Products: McAfee WebAdvisor Problem Types: CWE-668 Description: Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed, fingerprinting of the system leading to targeted scams, and not triggering the malicious software if McAfee software is detected. Additiona
he system leading to targeted scams, and not triggering the malicious software if McAfee software is detected. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/?articleId=TS103273&page=shell&shell=article-view
CVE ID: CVE-2022-0817 State: PUBLISHED Published: 2022-05-09T16:50:34 Last Updated: 2024-08-02T23:40:04.355Z Vendors: Unknown Products: BadgeOS Problem Types: CWE-89 Description: The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/69263610-f454-4f27-80af-be523d25659e
CVE ID: CVE-2022-0818 State: PUBLISHED Published: 2022-03-28T17:23:25 Last Updated: 2024-08-02T23:40:04.463Z Vendors: Unknown Products: WooCommerce Affiliate Plugin – Coupon Affiliates Problem Types: CWE-79 Description: The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c43fabb4-b388-462c-adc4-c6b25af7043b
CVE ID: CVE-2022-0819 State: PUBLISHED Published: 2022-03-02T15:40:13 Last Updated: 2024-08-02T23:40:04.410Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: dolibarr Products: dolibarr/dolibarr Problem Types: CWE-94 Description: Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b03d4415-d4f9-48c8-9ae2-d3aa248027b5 - https://github.com/dolibarr/dolibarr/commit/2a48dd349e7de0d4a38e448b0d2ecbe25e968075
CVE ID: CVE-2022-0820 State: PUBLISHED Published: 2022-03-10T23:35:09 Last Updated: 2024-08-02T23:40:04.457Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: orchardcms Products: orchardcms/orchardcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d00e7175-4764-4962-ae0d-a66501dda2e6 - https://github.com/orchardcms/orchardcore/commit/b7096af1028d8f909f63dd076d1bbd573913a92d
CVE ID: CVE-2022-0821 State: PUBLISHED Published: 2022-03-10T23:40:10 Last Updated: 2024-08-02T23:40:04.388Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: orchardcms Products: orchardcms/orchardcore Problem Types: CWE-285 Description: Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orchardcms/orchardcore/commit/b7096af1028d8f909f63dd076d1bbd573913a92d - https://huntr.dev/bounties/0019eb1c-8bf9-4bd0-a27f-aadc173515cb
CVE ID: CVE-2022-0822 State: PUBLISHED Published: 2022-03-11T00:50:09 Last Updated: 2024-08-02T23:40:04.323Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: orchardcms Products: orchardcms/orchardcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orchardcms/orchardcore/commit/b7096af1028d8f909f63dd076d1bbd573913a92d - https://huntr.dev/bounties/06971613-b6ab-4b96-8aa6-4982bfcfeb73
CVE ID: CVE-2022-0823 State: PUBLISHED Published: 2022-06-07T01:10:12 Last Updated: 2024-08-02T23:40:04.352Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: Zyxel GS1200 series firmware Problem Types: CWE-203 Description: An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/Zyxel-security-advisory-for-password-guessing-vulnerability-of-GS1200-series-switches.shtml
CVE ID: CVE-2022-0824 State: PUBLISHED Published: 2022-03-02T00:00:00 Last Updated: 2024-08-02T23:40:04.370Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: webmin Products: webmin/webmin Problem Types: CWE-284 Description: Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295 - https://github.com/webmin/webmin/commit/39ea464f0c40b325decd6a5bfb7833fa4a142e38 - http://packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html - https://notes.netbytesec.com/2022/03/webmin-
ketstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html - https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html - http://packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html
CVE ID: CVE-2022-0825 State: PUBLISHED Published: 2022-04-04T15:35:49 Last Updated: 2024-08-02T23:40:04.464Z Vendors: Unknown Products: Amelia – Events & Appointments Booking Calendar Problem Types: CWE-863 Description: The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1a92a65f-e9df-41b5-9a1c-8e24ee9bf50e - https://plugins.trac.wordpress.org/changeset/2693545
CVE ID: CVE-2022-0826 State: PUBLISHED Published: 2022-05-09T16:50:35 Last Updated: 2024-08-02T23:40:04.426Z Vendors: Unknown Products: WP Video Gallery Problem Types: CWE-89 Description: The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7a3eed3b-c643-4e24-b833-eba60ab631c5
CVE ID: CVE-2022-0827 State: PUBLISHED Published: 2022-06-13T12:41:35 Last Updated: 2024-08-02T23:40:04.405Z Vendors: Unknown Products: Bestbooks Problem Types: CWE-89 Description: The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0d208ebc-7805-457b-aa5f-ffd5adb2f3be
CVE ID: CVE-2022-0828 State: PUBLISHED Published: 2022-04-11T14:40:50 Last Updated: 2024-08-02T23:40:04.424Z Vendors: Unknown Products: Download Manager Problem Types: CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Description: The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the download. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7f0742ad-6fd7-4258-9e44-d42e138789bb
CVE ID: CVE-2022-0829 State: PUBLISHED Published: 2022-03-02T12:10:12 Last Updated: 2024-08-02T23:40:04.449Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: webmin Products: webmin/webmin Problem Types: CWE-285 Description: Improper Authorization in GitHub repository webmin/webmin prior to 1.990. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f2d0389f-d7d1-4f34-9f9d-268b0a0da05e - https://github.com/webmin/webmin/commit/eeeea3c097f5cc473770119f7ac61f1dcfa671b9 - https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html
CVE ID: CVE-2022-0830 State: PUBLISHED Published: 2022-04-04T15:35:50 Last Updated: 2024-08-02T23:40:04.489Z Vendors: Unknown Products: FormBuilder Problem Types: CWE-352 Description: The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values. As a result, attackers could make logged in admin update and delete arbitrary forms via a CSRF attack, and put Cross-Site Scripting payloads in them. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/114c0202-39f8-4748-ac0d-013d2d6f02f7
CVE ID: CVE-2022-0831 State: PUBLISHED Published: 2022-03-04T13:35:10 Last Updated: 2024-08-02T23:40:04.371Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4152e3a7-27a1-49eb-a6eb-a57506af104f - https://github.com/pimcore/pimcore/commit/e786fd44aac46febdbf916ed6c328fbe645d80bf
CVE ID: CVE-2022-0832 State: PUBLISHED Published: 2022-03-04T13:40:10 Last Updated: 2024-08-02T23:40:04.381Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/be450b60-bc8f-4585-96a5-3c4069f1186a - https://github.com/pimcore/pimcore/commit/8ab06bfbb5a05a1b190731d9c7476ec45f5ee878
CVE ID: CVE-2022-0833 State: PUBLISHED Published: 2022-03-28T17:23:26 Last Updated: 2024-08-02T23:40:04.469Z Vendors: Unknown Products: Church Admin Problem Types: CWE-862 Missing Authorization, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in order to disclose the final backup filename, which can then be fetched by the attacker to download the backup of the plugin's DB
disclose the final backup filename, which can then be fetched by the attacker to download the backup of the plugin's DB data Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b2c7c1e8-d72c-4b1e-b5cb-dc2a6538965d
CVE ID: CVE-2022-0834 State: PUBLISHED Published: 2022-03-23T19:46:49 Last Updated: 2024-11-20T15:40:20.570Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: ameliabooking Products: Booking for Appointments and Events Calendar – Amelia Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenev
/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user accesses the booking calendar with the date the attacker has injected the malicious payload into. This affects versions up to and including 1.0.46. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/73f12f22-c0a4-4010-9634-ce7308254028?source=cve - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0834
CVE ID: CVE-2022-0835 State: PUBLISHED Published: 2022-04-11T19:38:30.000Z Last Updated: 2025-04-16T17:56:24.023Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: AVEVA Products: AVEVA System Platform Problem Types: CWE-316 Description: AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02 - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf
CVE ID: CVE-2022-0836 State: PUBLISHED Published: 2022-05-09T16:50:37 Last Updated: 2024-08-02T23:40:04.488Z Vendors: Unknown Products: SEMA API Problem Types: CWE-89 Description: The SEMA API WordPress plugin before 4.02 does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2a226ae8-7d9c-4f47-90af-8a399a08f03f
CVE ID: CVE-2022-0837 State: PUBLISHED Published: 2022-04-04T15:35:52 Last Updated: 2024-08-02T23:40:04.372Z Vendors: Unknown Products: Amelia Problem Types: CWE-862 Missing Authorization Description: The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0882
SMS notification. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0882e5c0-f319-4994-9346-aa18438fda6a
CVE ID: CVE-2022-0838 State: PUBLISHED Published: 2022-03-04T08:10:11 Last Updated: 2024-08-02T23:40:04.374Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bd2fb1f1-cc8b-4ef7-8e2b-4ca686d8d614 - https://github.com/hestiacp/hestiacp/commit/640f822d306ffb3eddf8ce2f46de75d7344283c1
CVE ID: CVE-2022-0839 State: PUBLISHED Published: 2022-03-04T14:25:10.000Z Last Updated: 2025-11-03T19:26:41.199Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: liquibase Products: liquibase/liquibase Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f1ae5779-b406-4594-a8a3-d089c68d6e70 - https://github.com/liquibase/liquibase/commit/33d9d925082097fb1a3d2fc8e44423d964cd9381 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2022-0840 State: PUBLISHED Published: 2022-04-11T14:40:52 Last Updated: 2024-08-02T23:40:04.532Z Vendors: Unknown Products: Easy Social Icons Problem Types: CWE-79 Description: The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9da884a9-b4dd-4de0-9afa-722f772cf2df
CVE ID: CVE-2022-0841 State: PUBLISHED Published: 2022-03-03T15:50:10 Last Updated: 2024-08-02T23:40:04.446Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: ljharb Products: ljharb/npm-lockfile Problem Types: CWE-78 Description: OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4f806dc9-2ecd-4e79-997e-5292f1bea9f1 - https://github.com/ljharb/npm-lockfile/commit/bfdb84813260f0edbf759f2fde1e8c816c1478b8
CVE ID: CVE-2022-0842 State: PUBLISHED Published: 2022-03-23T14:10:13 Last Updated: 2024-08-02T23:40:04.502Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: McAfee,LLC Products: McAfee ePolicy Orchestrator (ePO) Problem Types: CWE-89 Description: A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker would require administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - ht
the attacker would require administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10379
CVE ID: CVE-2022-0843 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:31:57.188Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 98 Description: Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 98. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://bugzil
tainer: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746523%2C1749062%2C1749164%2C1749214%2C1749610%2C1750032%2C1752100%2C1752405%2C1753612%2C1754508
CVE ID: CVE-2022-0844 State: REJECTED Published: 2022-09-06T17:19:08 Last Updated: 2022-09-06T17:19:08 Description: No description available.
CVE ID: CVE-2022-0845 State: PUBLISHED Published: 2022-03-05T21:25:09 Last Updated: 2024-08-02T23:40:04.570Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: pytorchlightning Products: pytorchlightning/pytorch-lightning Problem Types: CWE-94 Description: Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a - https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae