Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31649 State: PUBLISHED Published: 2022-06-09T00:51:14 Last Updated: 2024-08-03T07:26:00.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/ - https://owncloud.com/security-advisories/cve-2022-31649/ - https://cwe.mitre.org/data/definitions/212.html
CVE ID: CVE-2022-31650 State: PUBLISHED Published: 2022-05-25T00:00:00 Last Updated: 2024-08-03T07:26:00.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/sox/bugs/360/ - http://www.openwall.com/lists/oss-security/2023/02/03/3 - https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html - https://www.debian.org/security/2023/dsa-5356
CVE ID: CVE-2022-31651 State: PUBLISHED Published: 2022-05-25T00:00:00 Last Updated: 2024-08-03T07:26:00.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/sox/bugs/360/ - http://www.openwall.com/lists/oss-security/2023/02/03/3 - https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html - https://www.debian.org/security/2023/dsa-5356
CVE ID: CVE-2022-31654 State: PUBLISHED Published: 2022-07-12T20:43:09 Last Updated: 2024-08-03T07:26:00.962Z Vendors: n/a Products: VMware vRealize Log Insight Problem Types: Stored cross-site scripting Description: VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0019.html
CVE ID: CVE-2022-31655 State: PUBLISHED Published: 2022-07-12T20:44:46 Last Updated: 2024-08-03T07:26:00.954Z Vendors: n/a Products: VMware vRealize Log Insight Problem Types: Stored cross-site scripting Description: VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0019.html
CVE ID: CVE-2022-31656 State: PUBLISHED Published: 2022-08-05T15:07:24 Last Updated: 2024-08-03T07:26:01.016Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: Authentication Bypass Vulnerability Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31657 State: PUBLISHED Published: 2022-08-05T15:07:39 Last Updated: 2024-08-03T07:26:00.799Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability Description: VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31658 State: PUBLISHED Published: 2022-08-05T15:07:10 Last Updated: 2024-08-03T07:26:00.994Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31659 State: PUBLISHED Published: 2022-08-05T15:06:41 Last Updated: 2024-11-14T14:10:07.731Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. Description: VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31660 State: PUBLISHED Published: 2022-08-05T15:05:45 Last Updated: 2024-08-03T07:26:00.970Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31661 State: PUBLISHED Published: 2022-08-05T15:06:55 Last Updated: 2024-08-03T07:26:00.875Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31662 State: PUBLISHED Published: 2022-08-05T15:05:34 Last Updated: 2024-08-03T07:26:00.826Z Vendors: n/a Products: VMware Workspace ONE Access, Access Connector, Identity Manager, vIDM Connector and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. Description: VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2
iles. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31663 State: PUBLISHED Published: 2022-08-05T15:06:30 Last Updated: 2024-08-03T07:26:01.099Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window. Additional Analyst Notes: - CVE Program Container: R
may be able to inject javascript code in the target user's window. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31664 State: PUBLISHED Published: 2022-08-05T15:06:15 Last Updated: 2024-08-03T07:26:01.203Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31665 State: PUBLISHED Published: 2022-08-05T15:06:00 Last Updated: 2024-08-03T07:26:00.991Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. Description: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0021.html
CVE ID: CVE-2022-31666 State: PUBLISHED Published: 2024-11-14T11:32:32.600Z Last Updated: 2024-11-14T14:10:46.880Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Harbor Problem Types: CWE-285 Description: Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users. The attacker could modify Webhook policies configured in other projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-8hwq-5f22-jfr3
CVE ID: CVE-2022-31667 State: PUBLISHED Published: 2024-11-14T11:50:48.289Z Last Updated: 2024-11-14T14:11:06.110Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: n/a Products: Harbor Problem Types: CWE-285 Description: Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to. By sending a request that attempts to update a robot account, and specifying a robot account id and robot account name that belongs to a different project that the user doesn’t have access to, it was possible to revoke the robot account permissions. Additional Analyst Notes: - CISA ADP Vulnr
sn’t have access to, it was possible to revoke the robot account permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-xx9w-464f-7h6f
CVE ID: CVE-2022-31668 State: PUBLISHED Published: 2024-11-14T11:56:31.043Z Last Updated: 2024-11-14T19:33:24.795Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: Harbor Problem Types: CWE-285 Description: Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p preheat policy with an id that belongs to a project that the currently authenticated user doesn't have access to, the attacker could modify p2p preheat policies configured in other projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-3wpx-625q-22j
Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-3wpx-625q-22j7
CVE ID: CVE-2022-31669 State: PUBLISHED Published: 2024-11-14T11:48:03.444Z Last Updated: 2024-11-15T17:30:33.229Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: n/a Products: Harbor Problem Types: CWE-285 Description: Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update a tag immutability policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag immutability policies configured in other projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/G
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-8c6p-v837-77f6
CVE ID: CVE-2022-31670 State: PUBLISHED Published: 2024-11-14T11:45:22.257Z Last Updated: 2024-11-14T14:09:48.571Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Harbor Problem Types: CWE-285 Description: Harbor fails to validate the user permissions when updating tag retention policies. By sending a request to update a tag retention policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag retention policies configured in other projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-3637-v6
nalyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-3637-v6vq-xqqw
CVE ID: CVE-2022-31671 State: PUBLISHED Published: 2024-11-14T11:42:22.373Z Last Updated: 2024-11-14T14:10:27.403Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: Harbor Problem Types: CWE-285 Description: Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs stored in the Harbor database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/G
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-q76q-q8hw-hmpw - https://github.com/goharbor/harbor/security/advisories/GHSA-3wpx-625q-22j7
CVE ID: CVE-2022-31672 State: PUBLISHED Published: 2022-08-09T20:18:53.000Z Last Updated: 2025-08-27T18:43:19.905Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Privilege Escalation Vulnerability Description: VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE ID: CVE-2022-31673 State: PUBLISHED Published: 2022-08-09T20:19:45 Last Updated: 2024-08-03T07:26:00.921Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Information Disclosure Vulnerability Description: VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE ID: CVE-2022-31674 State: PUBLISHED Published: 2022-08-09T20:19:31.000Z Last Updated: 2025-08-27T18:44:37.565Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Information Disclosure Vulnerability Description: VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE ID: CVE-2022-31675 State: PUBLISHED Published: 2022-08-09T20:19:18 Last Updated: 2024-08-03T07:26:00.872Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Authentication Bypass Vulnerability Description: VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE ID: CVE-2022-31676 State: PUBLISHED Published: 2022-08-23T00:00:00 Last Updated: 2024-08-03T07:26:00.916Z Vendors: n/a Products: VMware Tools Problem Types: Local privilege escalation vulnerability Description: VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0024.html - http://www.openwall.com/lists/oss-security/2022/08/23/3 - https://www.debian.org/security/2022/dsa-5215 - https://lists.debian.
www.openwall.com/lists/oss-security/2022/08/23/3 - https://www.debian.org/security/2022/dsa-5215 - https://lists.debian.org/debian-lts-announce/2022/08/msg00013.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4TZF6QRJIDECGMEGBPXJCHZ6YC3VZ6Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C5VV2R4LV4T3SNQJYRLFD4C75HBDVV76/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZA63DWRW7HROTVBNRIPBJQWBYIYAQMEW/ - https://security.netapp.com/advisory/ntap-20221017-0003/ - https://security.gentoo.org/glsa/202210-27
CVE ID: CVE-2022-31677 State: PUBLISHED Published: 2022-08-29T14:03:02 Last Updated: 2024-08-03T07:26:01.043Z Vendors: n/a Products: Pinniped Supervisor Problem Types: Insufficient Session Expiration issue Description: An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vmware-tanzu/pinniped/security/advisories/GHSA-rp4v-hhm6-rcv9
CVE ID: CVE-2022-31678 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-08T16:02:58.243Z Vendors: n/a Products: VMware Cloud Foundation (NSX-V) Problem Types: VMware Cloud Foundation contains an XML External Entity (XXE) Description: VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2022-0027.html
CVE ID: CVE-2022-31679 State: PUBLISHED Published: 2022-09-21T17:42:42.000Z Last Updated: 2025-05-22T18:32:45.324Z Vendors: n/a Products: Spring Data REST Problem Types: Potential Unintended Data Exposure for Resource Exposed Description: Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tanzu.vmware.com/security/cve-2022-31679
CVE ID: CVE-2022-31680 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:26:01.110Z Vendors: n/a Products: VMware vCenter Server Problem Types: Unsafe deserialization vulnerability Description: The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0025.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-158
are.com/security/advisories/VMSA-2022-0025.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1587
CVE ID: CVE-2022-31681 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:26:01.077Z Vendors: n/a Products: VMware ESXi Problem Types: Null-pointer dereference vulnerability Description: VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0025.html
CVE ID: CVE-2022-31682 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T07:26:00.939Z Vendors: n/a Products: VMware Aria Operations Problem Types: VMware Aria Operations patches address an arbitrary file read vulnerability. Description: VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0026.html
CVE ID: CVE-2022-31683 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-16T13:57:09.574Z Vendors: n/a Products: Concourse Problem Types: Authorization Bypass vulnerability Description: Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can send a request with body including :team_name=team2 to bypass team scope check to gain access to certain resources belong to any other team. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/concourse/concourse/security/advisories/GHSA-5jp2-vwrj-99rf
CVE ID: CVE-2022-31684 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:29:04.873Z Vendors: n/a Products: Reactor Netty Problem Types: HTTP Server may log request headers Description: Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tanzu.vmware.com/security/cve-2022-31684
CVE ID: CVE-2022-31685 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T17:26:50.014Z Vendors: n/a Products: VMware Workspace ONE Assist Problem Types: Authentication Bypass vulnerability Description: VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2022-0028.html