Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46293 State: PUBLISHED Published: 2023-07-21T20:25:41.277Z Last Updated: 2025-11-04T19:14:20.963Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Final Point and Derivatives section Additional Anal
ability.This vulnerability affects the MOPAC file format, inside the Final Point and Derivatives section Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE ID: CVE-2022-46294 State: PUBLISHED Published: 2023-07-21T20:25:41.378Z Last Updated: 2025-11-04T19:14:22.037Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC Cartesian file format Additional Analyst Notes: - CVE Program Container: -
ability.This vulnerability affects the MOPAC Cartesian file format Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE ID: CVE-2022-46295 State: PUBLISHED Published: 2023-07-21T20:25:41.462Z Last Updated: 2025-11-04T19:14:23.144Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the Gaussian file format Additional Analyst Notes: - CVE Program Container: - CISA AD
ability.This vulnerability affects the Gaussian file format Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE ID: CVE-2022-46296 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:37.967Z Description: No description available.
CVE ID: CVE-2022-46298 State: PUBLISHED Published: 2023-11-14T19:04:38.455Z Last Updated: 2024-08-30T17:43:19.558Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel Unison software Problem Types: denial of service, CWE-459 Description: Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2022-46299 State: PUBLISHED Published: 2023-11-14T19:04:35.061Z Last Updated: 2024-08-30T16:07:11.068Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel Unison software Problem Types: information disclosure, CWE-691 Description: Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2022-46300 State: PUBLISHED Published: 2023-03-21T22:10:34.483Z Last Updated: 2025-01-17T22:08:25.887Z Vendors: VISAM Products: VBASE Problem Types: CWE-611 Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05
CVE ID: CVE-2022-46301 State: PUBLISHED Published: 2023-11-14T19:04:37.311Z Last Updated: 2024-08-30T16:03:05.357Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel Unison software Problem Types: denial of service, CWE-665 Description: Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2022-46302 State: PUBLISHED Published: 2023-04-20T13:06:30.238Z Last Updated: 2025-02-04T21:43:19.638Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-829 Description: Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an attacker to perform remote code execution with root privileges on the underlying host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://c
the underlying host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/14281
CVE ID: CVE-2022-46303 State: PUBLISHED Published: 2023-02-20T16:49:49.961Z Last Updated: 2025-03-12T18:13:23.660Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-20 Description: Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/14381
CVE ID: CVE-2022-46304 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T17:46:14.271Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ChangingTec Products: ServiSign Problem Types: CWE-78 Description: ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allows the attacker to execute arbitrary system command to perform arbitrary system operation or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
orm arbitrary system operation or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6800-b5cf6-1.html
CVE ID: CVE-2022-46305 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T16:29:34.892Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ChangingTec Products: ServiSign Problem Types: CWE-22 Description: ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6801-bb704-1.html
CVE ID: CVE-2022-46306 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T16:29:15.283Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ChangingTec Products: ServiSign Problem Types: CWE-22 Description: ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files under arbitrary file path and allows the attacker to perform arbitrary system operation and disrupt of service. Additional Analyst Notes: - C
path and allows the attacker to perform arbitrary system operation and disrupt of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6802-4341b-1.html
CVE ID: CVE-2022-46307 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T14:36:45.856Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SGUDA Products: U-Lock Problem Types: CWE-863 Description: SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7099-e8897-1.html
CVE ID: CVE-2022-46308 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T14:39:00.938Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SGUDA Products: U-Lock Problem Types: CWE-863 Description: SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privilege can exploit this vulnerability to call privileged APIs to access, modify and delete user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7100-7a15c-1.html
CVE ID: CVE-2022-46309 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T16:28:01.107Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Galaxy Software Services Corporation. Products: Vitals ESP Problem Types: CWE-22 Description: Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6785-86407-1.html
CVE ID: CVE-2022-46310 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:31:24.907Z Vendors: Huawei Products: HarmonyOS Problem Types: Obtaining values vulnerability Description: The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46311 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T14:51:46.896Z Vendors: Huawei Products: HarmonyOS Problem Types: Undefined provider vulnerability Description: The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46312 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T18:46:28.548Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification vulnerability Description: The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46313 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:30:16.574Z Vendors: Huawei Products: HarmonyOS Problem Types: Authentication vulnerability Description: The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46314 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:29:21.749Z Vendors: Huawei Products: HarmonyOS Problem Types: Weaknesses Introduced During Design Description: The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46315 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:19:56.934Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397 - https://consumer.huawei.com/en/support/bulletin/2023/3 - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505
CVE ID: CVE-2022-46316 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:28:17.228Z Vendors: Huawei Products: HarmonyOS Problem Types: Thread security vulnerability Description: A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46317 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:21:30.969Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46318 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:21:10.972Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Function logic error vulnerability Description: The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46319 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:20:35.087Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46320 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:20:13.254Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46321 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:19:46.454Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification vulnerability Description: The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46322 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:19:25.040Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46323 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:19:04.330Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46324 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:18:45.393Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46325 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:18:22.458Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46326 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:18:01.305Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46327 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:27:38.881Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration issues Description: Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46328 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:26:25.638Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Input validation vulnerability Description: Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-46329 State: PUBLISHED Published: 2023-08-11T02:36:53.416Z Last Updated: 2025-02-13T16:33:46.451Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software Problem Types: escalation of privilege, CWE-693 Description: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html - https://lists.fedoraproject.org/archives/list/
ntel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
CVE ID: CVE-2022-46330 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T16:03:10.062Z Vendors: Squirrel Products: Installers generated by Squirrel.Windows Problem Types: Uncontrolled Search Path Element Description: Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop applications. Installers generated by Squirrel.Windows 2.0.1 and earlier contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer. Additional Analyst Notes: - CVE Program Container: - CISA