Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41801 State: PUBLISHED Published: 2023-05-10T13:17:18.763Z Last Updated: 2025-01-24T17:40:48.858Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Connect M Android application Problem Types: denial of service, CWE-400 Description: Uncontrolled resource consumption in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00779.html
CVE ID: CVE-2022-41802 State: PUBLISHED Published: 2022-12-08T00:00:00 Last Updated: 2024-08-03T12:56:38.164Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-120 Description: Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
CVE ID: CVE-2022-41803 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:57.686Z Description: No description available.
CVE ID: CVE-2022-41804 State: PUBLISHED Published: 2023-08-11T02:37:08.111Z Last Updated: 2025-02-13T16:33:13.258Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H) Vendors: n/a Products: Intel(R) Xeon(R) Processors Problem Types: escalation of privilege, CWE-1334 Description: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html - https://www.debian.org/security/202
ttp://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html - https://www.debian.org/security/2023/dsa-5474 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html - https://security.netapp.com/advisory/ntap-20230915-0003/
CVE ID: CVE-2022-41805 State: PUBLISHED Published: 2022-11-18T18:44:15.302Z Last Updated: 2025-02-20T19:52:49.393Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Pluggabl LLC Products: Booster for WooCommerce (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-jetpack/wordpress-booster-for-woocommerce-plugin-5-6-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41806 State: PUBLISHED Published: 2022-10-19T21:22:58.738Z Last Updated: 2025-05-08T18:58:59.022Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP AFM Problem Types: CWE-400 Description: In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K00721320
CVE ID: CVE-2022-41807 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:29:43.153Z Vendors: KYOCERA Document Solutions Inc. Products: Kyocera Document Solutions MFPs and printers Problem Types: Missing authorization Description: Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026
3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html - https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html - https://jvn.jp/en/jp/JVN463451
tml - https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html - https://jvn.jp/en/jp/JVN46345126/index.html
CVE ID: CVE-2022-41808 State: PUBLISHED Published: 2023-05-10T13:16:55.654Z Last Updated: 2025-01-27T18:06:21.577Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel QAT Driver for Linux Problem Types: denial of service, CWE-92 Description: Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00809.html
CVE ID: CVE-2022-41809 State: REJECTED Published: N/A Last Updated: 2023-01-11T20:42:03.774Z Description: No description available.
CVE ID: CVE-2022-41810 State: REJECTED Published: N/A Last Updated: 2023-01-11T20:42:03.866Z Description: No description available.
CVE ID: CVE-2022-41811 State: REJECTED Published: N/A Last Updated: 2023-01-11T20:42:04.176Z Description: No description available.
CVE ID: CVE-2022-41812 State: REJECTED Published: N/A Last Updated: 2023-01-11T20:42:04.250Z Description: No description available.
CVE ID: CVE-2022-41813 State: PUBLISHED Published: 2022-10-19T21:23:22.803Z Last Updated: 2025-05-08T18:58:41.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP AFM & PEM Problem Types: CWE-20 Description: In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K93723284
CVE ID: CVE-2022-41814 State: PUBLISHED Published: 2022-11-15T14:24:50.408Z Last Updated: 2025-04-29T19:13:52.679Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hallo Welt! GmbH Products: BlueSpice Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the history view of a wikipage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-04
CVE ID: CVE-2022-41828 State: PUBLISHED Published: 2022-09-29T00:00:00.000Z Last Updated: 2025-05-20T19:50:56.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aws/amazon-redshift-jdbc-driver/commit/40b143b4698faf90c788ffa89f2d4d8d2ad068b5 - https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-jc69-hjw2-fm86
CVE ID: CVE-2022-41830 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:28:26.845Z Vendors: KYOCERA Document Solutions Inc. Products: Kyocera Document Solutions MFPs and printers Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 550
lfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html - https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html - https://jvn.jp/en/jp/JVN46345126/index.html
CVE ID: CVE-2022-41831 State: PUBLISHED Published: 2023-03-21T05:36:51.815Z Last Updated: 2025-02-19T21:40:14.236Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: TCBarrett Products: WP Glossary Problem Types: CWE-79 Description: Auth. (contributor+) Cross-Site Scripting vulnerability in TCBarrett WP Glossary plugin <= 3.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-glossary/wordpress-wp-glossary-plugin-3-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-41832 State: PUBLISHED Published: 2022-10-19T21:24:03.152Z Last Updated: 2025-05-08T17:36:11.040Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-401 Description: In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when a SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory resource utilization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K10347453
CVE ID: CVE-2022-41833 State: PUBLISHED Published: 2022-10-19T21:24:25.532Z Last Updated: 2025-05-07T20:52:37.688Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-400 Description: In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K69940053
CVE ID: CVE-2022-41834 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:59.786Z Description: No description available.
CVE ID: CVE-2022-41835 State: PUBLISHED Published: 2022-10-19T21:24:53.599Z Last Updated: 2025-05-07T20:52:17.700Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: F5 Products: F5OS-A, F5OS-C Problem Types: CWE-269 Description: In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K33484483
CVE ID: CVE-2022-41836 State: PUBLISHED Published: 2022-10-19T21:25:43.571Z Last Updated: 2025-05-07T20:51:50.072Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Advanced WAF & ASM Problem Types: CWE-20 Description: When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K47204506
CVE ID: CVE-2022-41837 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-15T14:28:04.614Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-562 Description: An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerabili
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1636 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33 - https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html
CVE ID: CVE-2022-41838 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-15T14:24:43.935Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-122 Description: A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1634 - https
iner: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1634 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33
CVE ID: CVE-2022-41839 State: PUBLISHED Published: 2022-11-18T21:47:53.453Z Last Updated: 2025-02-20T19:51:48.570Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WPBrigade Products: LoginPress | Custom Login Page Customizer (WordPress plugin) Problem Types: CWE-264 Description: Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/loginpress/wordpress-loginpress-plugin-1-6-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-41840 State: PUBLISHED Published: 2022-11-18T18:27:05.985Z Last Updated: 2025-02-20T19:53:11.910Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Collne Inc. Products: Welcart e-Commerce (WordPress plugin) Problem Types: CWE-22 Description: Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-7-7-unauth-directory-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2022-41841 State: PUBLISHED Published: 2022-09-30T04:21:56.000Z Last Updated: 2025-05-20T19:36:16.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_File::ParseStream in Core/Ap4File.cpp, which is called from AP4_File::AP4_File. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/779
CVE ID: CVE-2022-41842 State: PUBLISHED Published: 2022-09-30T04:21:47.000Z Last Updated: 2025-05-20T19:37:39.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.xpdfreader.com/download.html - https://forum.xpdfreader.com/viewtopic.php?f=1&t=42340&p=43928&hilit=gfseek#p43928
CVE ID: CVE-2022-41843 State: PUBLISHED Published: 2022-09-30T04:21:36.000Z Last Updated: 2025-05-20T19:40:18.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421 - https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
CVE ID: CVE-2022-41844 State: PUBLISHED Published: 2022-09-30T04:21:27.000Z Last Updated: 2025-05-20T19:41:45.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.xpdfreader.com/download.html - https://forum.xpdfreader.com/viewtopic.php?f=1&t=42340&p=43928&hilit=gfseek#p43928 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42308&p=43844&hilit=XRef%3A%3Afetch#p43844
CVE ID: CVE-2022-41845 State: PUBLISHED Published: 2022-09-30T04:42:12.000Z Last Updated: 2025-05-20T19:26:33.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_Array<AP4_ElstEntry>::EnsureCapacity in Core/Ap4Array.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/770 - https://github.com/axiomatic-systems/Bento4/issues/747
CVE ID: CVE-2022-41846 State: PUBLISHED Published: 2022-09-30T04:42:04.000Z Last Updated: 2025-05-20T19:33:29.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/342 - https://github.com/axiomatic-systems/Bento4/issues/770
CVE ID: CVE-2022-41847 State: PUBLISHED Published: 2022-09-30T04:41:54.000Z Last Updated: 2025-05-20T19:35:10.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStream::Mode, AP4_ByteStream*&) in System/StdC/Ap4StdCFileByteStream.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/750 - https://github.com/axiomatic-systems/Bento4/issues/759 - https://github.com/axiomatic-systems/Bento4/issues/775
CVE ID: CVE-2022-41848 State: PUBLISHED Published: 2022-09-30T05:15:10.000Z Last Updated: 2025-05-20T19:23:56.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl, aka a race condition between mgslpc_ioctl and mgslpc_detach. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/lkml/20220919040251.GA302541%40ubuntu/T/#rc85e751f467b3e6f9ccef92cfa7fb8a6cc50c270 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
ubuntu/T/#rc85e751f467b3e6f9ccef92cfa7fb8a6cc50c270 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/char/pcmcia/synclink_cs.c
CVE ID: CVE-2022-41849 State: PUBLISHED Published: 2022-09-30T00:00:00 Last Updated: 2024-08-03T12:56:38.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_disconnect. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/20220925133243.GA383897%40ubuntu/T/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - ht
.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5610bcfe8693c02e2e4c8b31427f1bdbdecc839c
CVE ID: CVE-2022-41850 State: PUBLISHED Published: 2022-09-30T00:00:00 Last Updated: 2024-08-03T12:56:38.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/20220904193115.GA28134%40ubuntu/t/#u - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - https://git.kernel.org/cgit/linu
12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cacdb14b1c8d3804a3a7d31773bc7569837b71a4
CVE ID: CVE-2022-41851 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T14:13:22.359Z Vendors: Siemens Products: JTTK, Simcenter Femap V2022.1, Simcenter Femap V2022.2 Problem Types: CWE-824 Description: A vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-16973) Additional Analyst Notes: - CVE Program Container
to execute code in the context of the current process. (ZDI-CAN-16973) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-611756.pdf
CVE ID: CVE-2022-41852 State: REJECTED Published: 2022-10-06T17:14:59.886Z Last Updated: 2025-02-13T15:46:33.700Z Description: No description available.