Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisories/GHSA-qp5m-c3m9-8q2p - https://github.com/DSpace/DSpace/commit/7569c6374aefeafb996e202cf8d631020eda5f24 - https://github.com/DSpace/DSpace/commit/d1dd7d23329ef055069759df15cfa200c8e3
CVE ID: CVE-2022-31195 State: PUBLISHED Published: 2022-08-01T20:35:11.000Z Last Updated: 2025-04-23T17:55:08.985Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: DSpace Products: DSpace Problem Types: CWE-22 Description: DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF (simple archive format) package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible by a user with speci
DSpace user can write to on the server. However, this path traversal vulnerability is only possible by a user with special privileges (either Administrators or someone with command-line access to the server). This vulnerability impacts the XMLUI, JSPUI and command-line. Users are advised to upgrade. As a basic workaround, users may block all access to the following URL paths: If you are using the XMLUI, block all access to /admin/batchimport path (this is the URL of the Admin Batch Import tool). Keep in mind, if your site uses the path "/xmlui", then you'd need to block access to /xmlui/admin/batchimport. If you are using the JSPUI, block all access to /dspace-admin/batchimport path (this is
ess to /xmlui/admin/batchimport. If you are using the JSPUI, block all access to /dspace-admin/batchimport path (this is the URL of the Admin Batch Import tool). Keep in mind, if your site uses the path "/jspui", then you'd need to block access to /jspui/dspace-admin/batchimport. Keep in mind, only an Administrative user or a user with command-line access to the server is able to import/upload SAF packages. Therefore, assuming those users do not blindly upload untrusted SAF packages, then it is unlikely your site could be impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisori
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisories/GHSA-8rmh-55h4-93h5 - https://github.com/DSpace/DSpace/commit/56e76049185bbd87c994128a9d77735ad7af0199 - https://github.com/DSpace/DSpace/commit/7af52a0883a9dbc475cf3001f04ed11b24c8a4c0
CVE ID: CVE-2022-31196 State: PUBLISHED Published: 2022-09-02T19:45:13.000Z Last Updated: 2025-04-22T17:24:36.312Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: vran-dev Products: databasir Problem Types: CWE-918 Description: Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that returns a non `200` response code, the url is executed, the response is logged (both in terminal and in database) and is included in the response. This would allow an attackers to ob
sponse is logged (both in terminal and in database) and is included in the response. This would allow an attackers to obtain the real IP address and scan Intranet information. This issue was fixed in version 1.0.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vran-dev/databasir/security/advisories/GHSA-qvg8-427f-852q - https://github.com/vran-dev/databasir/commit/226c20e0c9124037671a91d6b3e5083bd2462058 - https://github.com/vran-dev/databasir/releases/tag/v1.0.7
CVE ID: CVE-2022-31197 State: PUBLISHED Published: 2022-08-03T00:00:00.000Z Last Updated: 2025-11-03T21:46:18.502Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: pgjdbc Products: pgjdbc Problem Types: CWE-89 Description: PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column names so a malicious column name that contains a statement terminator, e.g. `;`, could lead to SQL injection. This could lead to executing additional SQL commands as the application's JDBC
r, e.g. `;`, could lead to SQL injection. This could lead to executing additional SQL commands as the application's JDBC user. User applications that do not invoke the `ResultSet.refreshRow()` method are not impacted. User application that do invoke that method are impacted if the underlying database that they are querying via their JDBC application may be under the control of an attacker. The attack requires the attacker to trick the user into executing SQL against a table name who's column names would contain the malicious SQL and subsequently invoke the `refreshRow()` method on the ResultSet. Note that the application's JDBC user and the schema owner need not be the same. A JDBC applicati
thod on the ResultSet. Note that the application's JDBC user and the schema owner need not be the same. A JDBC application that executes as a privileged user querying database schemas owned by potentially malicious less-privileged users would be vulnerable. In that situation it may be possible for the malicious user to craft a schema that causes the application to execute commands as the privileged user. Patched versions will be released as `42.2.26` and `42.4.1`. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c
ogram Container: - CISA ADP Vulnrichment: References: - https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2 - https://github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00009.html
CVE ID: CVE-2022-31198 State: PUBLISHED Published: 2022-08-01T21:00:17.000Z Last Updated: 2025-04-23T17:55:03.186Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: OpenZeppelin Products: openzeppelin-contracts Problem Types: CWE-682 Description: OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor that use the module `GovernorVotesQuorumFraction`, a mechanism that determines quorum requirements as a percentage of the voting token's total supply. In affected instances, when a proposal is passed to lower the quorum requirements, past proposals may become executable if they had been defeated only due
sal is passed to lower the quorum requirements, past proposals may become executable if they had been defeated only due to lack of quorum, and the number of votes it received meets the new quorum requirement. Analysis of instances on chain found only one proposal that met this condition, and we are actively monitoring for new occurrences of this particular issue. This issue has been patched in v4.7.2. Users are advised to upgrade. Users unable to upgrade should consider avoiding lowering quorum requirements if a past proposal was defeated for lack of quorum. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenZeppelin/openzeppelin-
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-xrc4-737v-9q75 - https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3561
CVE ID: CVE-2022-31199 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-10-21T23:15:32.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors. Additional Analyst Notes: - CVE Program Container
er on affected systems, including on systems Netwrix Auditor monitors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bishopfox.com/blog/netwrix-auditor-advisory
CVE ID: CVE-2022-31200 State: PUBLISHED Published: 2023-07-27T00:00:00 Last Updated: 2024-10-23T13:04:54.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/blog/exploiting-xss-in-post-requests - https://medium.com/%40rohitgautam26/cve-2022-31200-5117bac8d548
CVE ID: CVE-2022-31201 State: PUBLISHED Published: 2022-07-17T22:55:02 Last Updated: 2024-08-03T07:11:39.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftGuard Web (SGW) before 5.1.5 allows HTML injection. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp/
CVE ID: CVE-2022-31202 State: PUBLISHED Published: 2022-07-17T22:30:41 Last Updated: 2024-08-03T07:11:39.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via export or man.tcl. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp/
CVE ID: CVE-2022-31204 State: PUBLISHED Published: 2022-07-26T21:28:29 Last Updated: 2024-08-03T07:11:39.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext. Additional Analyst Notes: - CVE Program Container: References: - ht
t Clear, both of which are transmitted in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02
CVE ID: CVE-2022-31205 State: PUBLISHED Published: 2022-07-26T21:28:41 Last Updated: 2024-08-03T07:11:39.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol without any further authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02
CVE ID: CVE-2022-31206 State: PUBLISHED Published: 2022-07-26T21:28:41 Last Updated: 2024-08-03T07:11:39.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowin
e operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https:
t of the RTOS. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02
CVE ID: CVE-2022-31207 State: PUBLISHED Published: 2022-07-26T21:28:46 Last Updated: 2024-08-03T07:11:39.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication flaws as reported in FSCT-2022-0057. Control logic is downloaded to PLC volatile memory using the FINS Program Area Read and Program Area Write commands or to non-volatile memory using other commands from where it can be loaded int
Area Read and Program Area Write commands or to non-volatile memory using other commands from where it can be loaded into volatile memory for execution. The logic that is loaded into and executed from the user program area exists in compiled object code form. Upon execution, these object codes are first passed to a dedicated ASIC that determines whether the object code is to be executed by the ASIC or the microprocessor. In the former case, the object code is interpreted by the ASIC whereas in the latter case the object code is passed to the microprocessor for object code interpretation by a ROM interpreter. In the abnormal case where the object code cannot be handled by either, an abnormal
nterpretation by a ROM interpreter. In the abnormal case where the object code cannot be handled by either, an abnormal condition is triggered and the PLC is halted. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, thus allowing an attacker to manipulate transmitted object code to the PLC and either execute arbitrary object code commands on the ASIC or on the microprocessor interpreter. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02
CVE ID: CVE-2022-31208 State: PUBLISHED Published: 2022-07-17T22:36:18 Last Updated: 2024-08-03T07:11:39.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.infiray.com/infrared-security-database.html - https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE ID: CVE-2022-31209 State: PUBLISHED Published: 2022-07-17T22:38:11 Last Updated: 2024-08-03T07:11:39.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE ID: CVE-2022-31210 State: PUBLISHED Published: 2022-07-17T22:40:18 Last Updated: 2024-08-03T07:11:39.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE ID: CVE-2022-31211 State: PUBLISHED Published: 2022-07-17T22:43:06 Last Updated: 2024-08-03T07:11:39.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/infiray-iray-thermal-camera-multiple-vulnerabilities/
CVE ID: CVE-2022-31212 State: PUBLISHED Published: 2022-07-17T00:00:00 Last Updated: 2024-08-03T07:11:39.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bus1/dbus-broker/compare/v30...v31 - https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/ - https://security.gentoo.org/glsa/202305-04
CVE ID: CVE-2022-31213 State: PUBLISHED Published: 2022-07-17T00:00:00 Last Updated: 2024-08-03T07:11:39.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bus1/dbus-broker/compare/v30...v31 - https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/ - https://security.gentoo.org/glsa/202305-04
CVE ID: CVE-2022-31214 State: PUBLISHED Published: 2022-06-09T00:00:00 Last Updated: 2024-08-03T07:11:39.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker's control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root bin
n this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo. Additional Analyst Notes: - CVE Program Container: References: - https://firejail.wordpress.com/download-2/release-notes/ - https://www.openwall.com/lists/oss-security/2022/06/08/10 - https://www.debian.org/security/2022/dsa-5167 - https://lists.debian.org/debian-lts-announce/2022/06/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIBEBE3KFINMGJATBQQS7D2VQQ62ZVMF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUZZ5M6LIBYRKTKGROXC47T
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUZZ5M6LIBYRKTKGROXC47TDC3FRTGJF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RZOTZ36RUSL6DOVHITY25ZYKWTG5HN3/ - https://security.gentoo.org/glsa/202305-19
CVE ID: CVE-2022-31215 State: PUBLISHED Published: 2022-05-20T11:29:46 Last Updated: 2024-08-03T07:11:39.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11. Additional Analyst Notes: - CVE Program Container: References: - https://goverlan.com - https://www.goverlan.com/knowledge/article/security-advisory-govsa-2022-0506-1-disable-windows-firewall/
CVE ID: CVE-2022-31216 State: PUBLISHED Published: 2022-06-15T18:47:24.977305Z Last Updated: 2024-09-16T18:29:18.649Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Drive Composer entry, Drive Composer pro, ABB Automation Builder, Mint WorkBench Problem Types: CWE-59 Description: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product. Additional Analyst Notes: - CVE Program Container: Reference
privileged user to run a "repair" operation on the product. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A0305&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.38192870.478847987.1655218701-372504397.1647012599
CVE ID: CVE-2022-31217 State: PUBLISHED Published: 2022-06-15T18:47:49.978Z Last Updated: 2025-04-23T18:14:35.662Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Drive Composer entry, Drive Composer pro, ABB Automation Builder, Mint WorkBench Problem Types: CWE-59 Description: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
vileged user to run a "repair" operation on the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A0305&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.38192870.478847987.1655218701-372504397.1647012599
CVE ID: CVE-2022-31218 State: PUBLISHED Published: 2022-06-15T18:48:17.775Z Last Updated: 2025-04-23T18:14:29.872Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Drive Composer entry, Drive Composer pro, ABB Automation Builder, Mint WorkBench Problem Types: CWE-59 Description: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP V