Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-47859 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:41:47.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20changePassword.php.md
CVE ID: CVE-2022-47860 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:33:51.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeProduct.php.md
CVE ID: CVE-2022-47861 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:32:36.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeLead.php.md
CVE ID: CVE-2022-47862 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:31:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20ajax_represent.php%20.md
CVE ID: CVE-2022-47864 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:29:48.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeCategories.php.md
CVE ID: CVE-2022-47865 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:23:34.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeOrder.php.md
CVE ID: CVE-2022-47866 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-09T14:16:52.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html - https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeBrand.php.md
CVE ID: CVE-2022-47870 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T18:56:37.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote attackers to inject arbitrary web Script or HTML via the returnUrl parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/171647/SQL-Monitor-12.1.31.893-Cross-Site-Scripting.html
CVE ID: CVE-2022-47872 State: PUBLISHED Published: 2023-02-01T00:00:00 Last Updated: 2024-08-03T15:02:36.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cedric1314/CVE-2022-47872/blob/main/README.md
CVE ID: CVE-2022-47873 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:50:40.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fordefence.com/cve-2022-47873-keos-software-xx/
CVE ID: CVE-2022-47874 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T15:13:52.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf - http://packetstormsecurity.com/files/172156/Jedox-2020.2.5-Database-Credential-Disclosure.html
CVE ID: CVE-2022-47875 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T15:11:29.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf - http://packetstormsecurity.com/files/172152/Jedox-2022.4.2-Directory-Traversal-Remote-Code-Execution.html
CVE ID: CVE-2022-47876 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T15:48:07.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf - http://packetstormsecurity.com/files/172155/Jedox-2020.2.5-Groovy-Scripts-Remote-Code-Execution.html
CVE ID: CVE-2022-47877 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T15:45:20.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via the log module 'log'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf - http://packetstormsecurity.com/files/172153/Jedox-2020.2.5-Cross-Site-Scripting.html
CVE ID: CVE-2022-47878 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-11-06T14:25:00.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that the vulnerability affects installations running version 22.2 or earlier. The issue was resolved with the version 22.3 and later versions are not affected. Additionally, the vendor states that this vulnerability affects on-premises deployments only and
sions are not affected. Additionally, the vendor states that this vulnerability affects on-premises deployments only and that it does not impact cloud-hosted or SaaS environments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf - http://packetstormsecurity.com/files/172154/Jedox-2020.2.5-Configurable-Storage-Path-Remote-Code-Execution.html - https://jedox.mantishub.io/app/issues/57238
CVE ID: CVE-2022-47879 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-11-06T14:19:42.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jedox.com - https://docs.syslifters.com/assets/vulnerabili
gram Container: - CISA ADP Vulnrichment: References: - http://jedox.com - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf - https://jedox.mantishub.io/app/issues/57238 - https://jedox.mantishub.io/app/issues/57236 - https://jedox.mantishub.io/app/issues/57237 - https://jedox.mantishub.io/app/issues/57239
CVE ID: CVE-2022-47880 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-27T16:36:23.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jedox.com - https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf
CVE ID: CVE-2022-47881 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T14:26:28.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.foxit.com/support/security-bulletins.html - https://hacksys.io/advisories/HI-2022-005
CVE ID: CVE-2022-47891 State: PUBLISHED Published: 2023-10-03T11:25:42.757Z Last Updated: 2024-09-06T14:10:43.167Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: Riello UPS Products: Netman-204 Problem Types: CWE-798 Description: All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
CVE ID: CVE-2022-47892 State: PUBLISHED Published: 2023-10-03T11:27:05.404Z Last Updated: 2024-09-23T17:08:29.667Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Riello UPS Products: Netman-204 Problem Types: CWE-200 Description: All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
CVE ID: CVE-2022-47893 State: PUBLISHED Published: 2023-10-03T11:28:22.794Z Last Updated: 2024-09-23T17:16:37.513Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Riello UPS Products: Netman-204 Problem Types: CWE-434 Description: There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
CVE ID: CVE-2022-47894 State: PUBLISHED Published: 2024-04-09T09:29:17.806Z Last Updated: 2025-02-13T16:34:01.816Z Vendors: Apache Software Foundation Products: Apache Zeppelin SAP Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. For more information, the fix already was merged in the source code but Zeppelin decided to retire the SAP component NOTE: This vulnerability only affects products that a
n the source code but Zeppelin decided to retire the SAP component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/zeppelin/pull/4302 - https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylbox4fvyy - http://www.openwall.com/lists/oss-security/2024/04/09/4
CVE ID: CVE-2022-47895 State: PUBLISHED Published: 2022-12-22T10:25:41.948Z Last Updated: 2025-04-15T14:31:57.709Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-319 Description: In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-47896 State: PUBLISHED Published: 2022-12-22T10:25:44.810Z Last Updated: 2025-04-15T13:42:02.311Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-1336 Description: In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-47908 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T15:48:28.275Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: V-Server Problem Types: Stack-based Buffer Overflow Description: Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU92811888/index.html
CVE ID: CVE-2022-47909 State: PUBLISHED Published: 2023-02-20T16:53:37.606Z Last Updated: 2024-08-03T15:02:36.627Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-20 Description: Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost. Additional Analyst Notes: - CVE Program Container: References: - https://checkmk.com/werk/14384 - https://www.sonarsource.com/blog/checkmk-rce-chain-1/
CVE ID: CVE-2022-47911 State: PUBLISHED Published: 2023-01-18T00:47:02.611Z Last Updated: 2025-01-16T21:59:38.724Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Sewio Products: RTLS Studio Problem Types: CWE-78 Description: Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisori
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01
CVE ID: CVE-2022-47914 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:50.171Z Description: No description available.
CVE ID: CVE-2022-47915 State: PUBLISHED Published: 2024-01-10T22:03:21.845Z Last Updated: 2025-06-20T15:33:55.507Z Vendors: Apple Products: macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-47917 State: PUBLISHED Published: 2023-01-18T00:48:40.337Z Last Updated: 2025-01-16T21:59:31.477Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Sewio Products: RTLS Studio Problem Types: CWE-20 Description: Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-0
CVE ID: CVE-2022-47924 State: PUBLISHED Published: 2023-03-27T13:41:21.838Z Last Updated: 2025-02-19T16:25:39.512Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Secvisogram Products: csaf-validator-lib Problem Types: CWE-20 Description: An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0004.json
CVE ID: CVE-2022-47925 State: PUBLISHED Published: 2023-03-27T13:41:13.756Z Last Updated: 2024-08-03T15:02:36.563Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Secvisogram Products: csaf-validator-service Problem Types: CWE-20 Description: The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wid.cert-bund.de/.well-known/cs
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0004.json
CVE ID: CVE-2022-47926 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T14:46:45.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/loadream/AyaCMS/issues/7
CVE ID: CVE-2022-47927 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T15:40:49.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T322637 - https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wik
- https://phabricator.wikimedia.org/T322637 - https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/thread/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/ - https://security.gentoo.org/glsa/202305-24 - https://lists.debian.org/debian-lts-announce/2023/07/msg00011.html
CVE ID: CVE-2022-47928 State: PUBLISHED Published: 2022-12-22T00:00:00 Last Updated: 2024-08-03T15:02:36.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/684d3e51398d4ea032b06fa4a1cd2bdf7d8b0ede - https://zigrin.com/advisories/misp-reflected-xss-in-uploadfile-action-of-the-templates-controllermisp/
CVE ID: CVE-2022-47929 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T18:01:31.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.spinics.net/lists/netdev/msg555705.html - https://tldp.org/HOWTO/Traffic-Control-HOWTO/components.html
s: - https://www.spinics.net/lists/netdev/msg555705.html - https://tldp.org/HOWTO/Traffic-Control-HOWTO/components.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96398560f26aa07e8f2969d73c8197e6a6d10407 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.6 - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html