Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n.org/debian-security-announce/2022/msg00182.html - https://lists.debian.org/debian-lts-announce/2022/08/msg00007.html - https://security.gentoo.org/glsa/202210-11
CVE ID: CVE-2022-2788 State: PUBLISHED Published: 2022-08-19T20:56:05.000Z Last Updated: 2025-04-16T16:12:38.328Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Emerson Electric Products: Proficy Machine Edition Problem Types: CWE-29 Description: Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code. Additional Analyst Notes: - CVE Program Container: - CISA AD
ion onto Windows in a way that executes the malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE ID: CVE-2022-2789 State: PUBLISHED Published: 2022-08-19T22:32:58.000Z Last Updated: 2025-04-16T16:12:15.697Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Emerson Electric Products: Proficy Machine Edition Problem Types: CWE-345 Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE ID: CVE-2022-2790 State: PUBLISHED Published: 2022-08-19T22:32:03.000Z Last Updated: 2025-04-16T16:12:23.536Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Emerson Electric Products: Proficy Machine Edition Problem Types: CWE-347 Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE ID: CVE-2022-2791 State: PUBLISHED Published: 2022-11-22T19:19:29.460Z Last Updated: 2025-04-16T16:05:57.183Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Emerson Electric Products: Proficy Machine Edition Problem Types: CWE-434 Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE ID: CVE-2022-2792 State: PUBLISHED Published: 2022-08-19T22:08:02.000Z Last Updated: 2025-04-16T16:12:30.667Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: Emerson Electric Products: Proficy Machine Edition Problem Types: CWE-284 Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE ID: CVE-2022-2793 State: PUBLISHED Published: 2022-08-19T22:33:42.000Z Last Updated: 2025-04-16T16:12:08.233Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Emerson Electric Products: Proficy Machine Edition Problem Types: CWE-353 Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE ID: CVE-2022-2794 State: PUBLISHED Published: 2022-11-18T20:48:49.100Z Last Updated: 2025-04-29T18:36:46.662Z Vendors: HP Inc. Products: Certain HP PageWide Pro printers Problem Types: n/a Description: Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6720386-6720411-16/hpsbpi03807
CVE ID: CVE-2022-2795 State: PUBLISHED Published: 2022-09-21T10:15:25.796304Z Last Updated: 2024-11-29T12:04:33.614Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ISC Products: BIND9 Problem Types: In BIND 9.0.0 -> 9.16.32, 9.18.0 -> 9.18.6, versions 9.9.3-S1 -> 9.11.37-S1, 9.16.8-S1 -> 9.16.32-S1 of the BIND Supported Preview Edition, and versions 9.19.0 -> 9.19.4 of the BIND 9.19 development branch, a flaw in resolver code can cause named to spend excessive amounts of time on processing large delegations. Description: By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effecti
rget resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://kb.isc.org/docs/cve-2022-2795 - http://www.openwall.com/lists/oss-security/2022/09/21/3 - https://www.debian.org/security/2022/dsa-5235 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/ - https://
roject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html - https://security.gentoo.org/glsa/202210-25
CVE ID: CVE-2022-2796 State: PUBLISHED Published: 2022-08-23T08:00:20 Last Updated: 2024-08-03T00:46:04.428Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097 - https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
CVE ID: CVE-2022-2797 State: PUBLISHED Published: 2022-08-12T19:00:13.000Z Last Updated: 2025-04-15T13:51:14.909Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Student Information System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Student Information System. Affected by this vulnerability is an unknown functionality of the file /admin/students/view_student.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-206245 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA
The identifier VDB-206245 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206245
CVE ID: CVE-2022-2798 State: PUBLISHED Published: 2022-09-16T08:40:34 Last Updated: 2024-08-03T00:46:04.536Z Vendors: Unknown Products: Affiliates Manager Problem Types: CWE-1236 Description: The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the data Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f169567d-c682-4abe-94df-a9d00be90edd
CVE ID: CVE-2022-2799 State: PUBLISHED Published: 2022-09-16T08:40:35 Last Updated: 2024-08-03T00:46:04.581Z Vendors: Unknown Products: Affiliates Manager Problem Types: CWE-79 Description: The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4385370e-cf99-4249-b2c1-90cbfa8378a4
CVE ID: CVE-2022-2800 State: PUBLISHED Published: 2022-08-12T19:45:33.000Z Last Updated: 2025-04-15T13:51:01.380Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-451 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-206246 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA
. VDB-206246 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Blythe-LU/Record4/blob/main/Gym%20management%20system%20project%20-%20ClickJacking%20exists%20on%20multiple%20pages.md - https://vuldb.com/?id.206246
CVE ID: CVE-2022-2801 State: PUBLISHED Published: 2022-08-12T19:45:34.000Z Last Updated: 2025-04-15T13:50:47.129Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Automated Beer Parlour Billing System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247. Additional Analyst Notes: - CVE Program Container: - CISA
he associated identifier of this vulnerability is VDB-206247. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206247
CVE ID: CVE-2022-2802 State: PUBLISHED Published: 2022-08-12T19:45:36.000Z Last Updated: 2025-04-14T15:59:32.857Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gas Agency Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerability affects unknown code of the file gasmark/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206248. Additional Analyst Not
been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206248. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://img-blog.csdnimg.cn/e1f59036a87b46529b2403445caf85c2.png - https://vuldb.com/?id.206248
CVE ID: CVE-2022-2803 State: PUBLISHED Published: 2022-08-12T19:45:37.000Z Last Updated: 2025-04-15T13:50:35.795Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Zoo Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument class_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206249 was assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. The identifier VDB-206249 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1.ax1x.com/2022/08/12/vJ4zHH.png - https://vuldb.com/?id.206249
CVE ID: CVE-2022-2804 State: PUBLISHED Published: 2022-08-12T19:45:39.000Z Last Updated: 2025-04-15T13:50:26.656Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Zoo Management System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability. Additio
t has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1.ax1x.com/2022/08/12/vJ5pEd.png - https://vuldb.com/?id.206250
CVE ID: CVE-2022-2805 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:33:34.709Z Vendors: n/a Products: ovirt-engine Problem Types: CWE-312 Description: A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2079545 - https://access.redhat.com/security/cve/CVE-2022-2805
CVE ID: CVE-2022-2806 State: PUBLISHED Published: 2022-09-01T19:58:50 Last Updated: 2024-08-03T00:52:59.579Z Vendors: n/a Products: ovirt-log-collector Problem Types: CWE-200 Description: It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sosreport/sos/pull/2947
CVE ID: CVE-2022-2807 State: PUBLISHED Published: 2022-12-12T01:50:00.293Z Last Updated: 2025-04-22T18:05:13.027Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Algan Software Products: Prens Student Information System Problem Types: CWE-89 Description: SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-22-0708
CVE ID: CVE-2022-2808 State: PUBLISHED Published: 2022-12-12T01:49:10.008967Z Last Updated: 2024-09-16T19:47:17.330Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Algan Software Products: Prens Student Information System Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-22-0708
CVE ID: CVE-2022-2809 State: PUBLISHED Published: 2022-10-27T13:09:19.424Z Last Updated: 2025-05-05T20:20:18.093Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: OpenBMC Project Products: OpenBMC Problem Types: CWE-229, CWE-122 Description: A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser handles unclosed http headers. If long enough http header is passed in the multipart form without colon there is one byte overwrite on heap. It can be conducted multiple
header is passed in the multipart form without colon there is one byte overwrite on heap. It can be conducted multiple times in a loop to cause DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openbmc/bmcweb
CVE ID: CVE-2022-2811 State: PUBLISHED Published: 2022-08-14T10:15:20.000Z Last Updated: 2025-04-15T13:50:14.968Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Guest Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unknown part of the file myform.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206397 was assigned to this vulnerability. Additional Analyst Notes: - C
the public and may be used. The identifier VDB-206397 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1.ax1x.com/2022/08/13/vtDEFO.png - https://vuldb.com/?id.206397
CVE ID: CVE-2022-2812 State: PUBLISHED Published: 2022-08-14T10:15:47.000Z Last Updated: 2025-04-14T15:59:25.886Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Guest Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Guest Management System. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-206398 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Pro
public and may be used. VDB-206398 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1.ax1x.com/2022/08/13/vtDVYD.png - https://vuldb.com/?id.206398
CVE ID: CVE-2022-2813 State: PUBLISHED Published: 2022-08-14T10:16:12.000Z Last Updated: 2025-04-15T13:50:06.726Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Guest Management System Problem Types: CWE-312 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-206400. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206400
CVE ID: CVE-2022-2814 State: PUBLISHED Published: 2022-08-15T06:00:20.000Z Last Updated: 2025-04-15T13:49:58.156Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple and Nice Shopping Cart Script Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /mkshope/login.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206401 was assig
be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206401 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1.ax1x.com/2022/08/13/vNcnHA.png - https://vuldb.com/?id.206401
CVE ID: CVE-2022-2815 State: PUBLISHED Published: 2023-01-14T00:00:00.000Z Last Updated: 2025-04-07T18:30:42.045Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: publify Products: publify/publify Problem Types: CWE-922 Description: Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/22fdcc39-8c1a-4e4c-8eae-be3fd764f8b4 - https://github.com/publify/publify/commit/af69097d349f4c00f244c51cd3c3e937fd3387cd
CVE ID: CVE-2022-2816 State: PUBLISHED Published: 2022-08-15T00:00:00 Last Updated: 2024-08-03T00:52:58.831Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e2a83037-fcf9-4218-b2b9-b7507dacde58 - https://github.com/vim/vim/commit/dbdd16b62560413abcc3c8e893cc3010ccf31666 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2817 State: PUBLISHED Published: 2022-08-15T00:00:00 Last Updated: 2024-08-03T00:52:58.962Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0213. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a7b7d242-3d88-4bde-a681-6c986aff886f - https://github.com/vim/vim/commit/249e1b903a9c0460d618f6dcc59aeb8c03b24b20 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2818 State: PUBLISHED Published: 2022-08-15T09:50:24 Last Updated: 2024-08-03T00:52:58.603Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-212 Description: Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491 - https://github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4
CVE ID: CVE-2022-2819 State: PUBLISHED Published: 2022-08-15T00:00:00 Last Updated: 2024-08-03T00:52:59.508Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0a9bd71e-66b8-4eb1-9566-7dfd9b097e59 - https://github.com/vim/vim/commit/d1d8f6bacb489036d0fd479c9dd3c0102c988889 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/ - https://security.gentoo.org/glsa/2023
age-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/ - https://security.gentoo.org/glsa/202305-16