Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0149 State: PUBLISHED Published: 2022-02-07T15:47:26 Last Updated: 2024-08-02T23:18:41.718Z Vendors: Unknown Products: WooCommerce – Store Exporter Problem Types: CWE-79 Description: The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e47c288a-2ea3-4926-93cc-113867cbc77c - https://plugins.trac.wordpress.org/changeset/2654545/woocommerce-exporter
CVE ID: CVE-2022-0150 State: PUBLISHED Published: 2022-02-28T09:06:41 Last Updated: 2024-08-02T23:18:41.799Z Vendors: Unknown Products: WP Accessibility Helper (WAH) Problem Types: CWE-79 Description: The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7142a538-7c3d-4dd0-bd2c-cbd2efaf53c5 - https://plugins.trac.wordpress.org/changeset/2661008
CVE ID: CVE-2022-0151 State: PUBLISHED Published: 2022-01-18T16:51:58 Last Updated: 2024-08-02T23:18:41.720Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not correctly handling requests to delete existing packages which could result in a Denial of Service under specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://gitla
ial of Service under specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/348176 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0151.json
CVE ID: CVE-2022-0152 State: PUBLISHED Published: 2022-01-18T16:51:56 Last Updated: 2024-08-02T23:18:42.056Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to unauthorized access to some particular fields through the GraphQL API. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/347467 - https://gitla
alyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/347467 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0152.json
CVE ID: CVE-2022-0153 State: PUBLISHED Published: 2022-03-24T17:05:16 Last Updated: 2024-08-02T23:18:41.795Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: forkcms Products: forkcms/forkcms Problem Types: CWE-89 Description: SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/841503dd-311c-470a-a8ec-d4579b3274eb - https://github.com/forkcms/forkcms/commit/7a12046a67ae5d8cf04face3ee75e55f03a1a608
CVE ID: CVE-2022-0154 State: PUBLISHED Published: 2022-01-18T16:52:04 Last Updated: 2024-08-02T23:18:41.740Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GitLab Products: GitLab Problem Types: Cross-site request forgery (csrf) in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery attack that allows a malicious user to have their GitHub project imported on another GitLab user account. Additional Analyst Notes: - CVE Program Container: References:
r GitHub project imported on another GitLab user account. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/29580 - https://hackerone.com/reports/605576 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0154.json
CVE ID: CVE-2022-0155 State: PUBLISHED Published: 2022-01-10T19:30:10 Last Updated: 2024-08-02T23:18:42.041Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: follow-redirects Products: follow-redirects/follow-redirects Problem Types: CWE-359 Description: follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406 - https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22 - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
CVE ID: CVE-2022-0156 State: PUBLISHED Published: 2022-01-10T15:26:33 Last Updated: 2024-08-02T23:18:41.990Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: vim is vulnerable to Use After Free Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36 - https://github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fe
g/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213344 - http://seclists.org/fulldisclosure/2022/Jul/13 - https://security.gentoo.org/glsa/202208-32
CVE ID: CVE-2022-0157 State: PUBLISHED Published: 2022-01-10T15:25:42 Last Updated: 2024-08-02T23:18:41.947Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: phoronix-test-suite Products: phoronix-test-suite/phoronix-test-suite Problem Types: CWE-79 Description: phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2c0fe81b-0977-4e1e-b5d8-7646c9a7ebbd - https://github.com/phoronix-test-suite/phoronix-test-suite/commit/56fd0a3b69fb33c1c90a6017ed735889aaa59486 - https://lists.fedoraproject.org/archives/l
t-suite/phoronix-test-suite/commit/56fd0a3b69fb33c1c90a6017ed735889aaa59486 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BU7E6OOZCXS3ZWHOQ2AR7MKM56IN2R6R/
CVE ID: CVE-2022-0158 State: PUBLISHED Published: 2022-01-10T15:25:35 Last Updated: 2024-08-02T23:18:42.015Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: vim is vulnerable to Heap-based Buffer Overflow Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ac5d7005-07c6-4a0a-b251-ba9cdbf6738b - https://github.com/vim/vim/commit/5f25c3855071bd7e26255c68bf458b1b5cf92f39 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - http
raproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213344 - http://seclists.org/fulldisclosure/2022/Jul/13 - https://security.gentoo.org/glsa/202208-32
CVE ID: CVE-2022-0159 State: PUBLISHED Published: 2022-01-12T02:55:10 Last Updated: 2024-08-02T23:18:41.930Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: orchardcms Products: orchardcms/orchardcore Problem Types: CWE-79 Description: orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/00937280-e2ab-49fe-8d43-8235b3c3db4b - https://github.com/orchardcms/orchardcore/commit/4da927d39a49138527c30db09c962ff706f95202
CVE ID: CVE-2022-0161 State: PUBLISHED Published: 2022-03-14T14:41:19 Last Updated: 2024-08-02T23:18:42.042Z Vendors: Unknown Products: ARI Fancy Lightbox – WordPress Popup Problem Types: CWE-79 Description: The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6b37fa17-0dcb-47a7-b1eb-f9f6abb458c0 - https://plugins.trac.wordpress.org/changeset/2680993
CVE ID: CVE-2022-0162 State: PUBLISHED Published: 2022-02-09T22:05:30.830425Z Last Updated: 2024-09-16T17:13:50.223Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TP-Link Products: TL-WR841N Problem Types: CWE-319 Description: The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format. Successful exploitation of this vulnerability could allow a remote attacker to intercept credentials and subsequently perform administrative operations on the affected device through web-based management interface. Additional Analyst Notes: - CVE Program Container:
ations on the affected device through web-based management interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0068
CVE ID: CVE-2022-0163 State: PUBLISHED Published: 2022-03-07T08:16:22 Last Updated: 2024-08-02T23:18:41.802Z Vendors: Unknown Products: Smart Forms – when you need more than just a contact form Problem Types: CWE-862 Description: The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2b6b0731-4515-498a-82bd-d416f5885268
CVE ID: CVE-2022-0164 State: PUBLISHED Published: 2022-02-21T10:46:00 Last Updated: 2024-08-02T23:18:42.067Z Vendors: Unknown Products: Coming soon and Maintenance mode Problem Types: CWE-862 Missing Authorization, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its coming_soon_send_mail AJAX action, allowing any authenticated users, with a role as low as subscriber to send arbitrary emails to all subscribed users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/942535f9-73bf-4467-872a-20075f03bc51 - https://plugins.trac.wor
ontainer: References: - https://wpscan.com/vulnerability/942535f9-73bf-4467-872a-20075f03bc51 - https://plugins.trac.wordpress.org/changeset/2655973
CVE ID: CVE-2022-0165 State: PUBLISHED Published: 2022-03-14T14:41:21 Last Updated: 2024-08-02T23:18:41.976Z Vendors: Unknown Products: Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme Problem Types: CWE-601 Description: The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/906d0c31-370e-46b4-af1f-e52fbddd00cb
CVE ID: CVE-2022-0166 State: PUBLISHED Published: 2022-01-19T11:05:11 Last Updated: 2024-08-02T23:18:42.062Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Agent for Windows Problem Types: CWE- 269: Improper Privilege Management Description: A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary code with SYSTEM privileges by creating the appropriate pathway to the specifically created malicious o
ecuted arbitrary code with SYSTEM privileges by creating the appropriate pathway to the specifically created malicious openssl.cnf file. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10378 - https://www.kb.cert.org/vuls/id/287178
CVE ID: CVE-2022-0167 State: PUBLISHED Published: 2022-07-01T17:02:23 Last Updated: 2024-08-02T23:18:41.986Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Insufficiently protected credentials in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not disabling the Autocomplete attribute of fields related to sensitive information making it possible to be retrieved under certain conditions. Additional Analyst Notes: - CVE Program Container: References:
ng it possible to be retrieved under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/339146 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0167.json
CVE ID: CVE-2022-0168 State: PUBLISHED Published: 2022-08-26T17:25:46 Last Updated: 2024-08-02T23:18:41.954Z Vendors: n/a Products: kernel Problem Types: CWE-476 Description: A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2037386 - https://access.redhat.com/security/cve/CVE-2022-0168 - https://git.kernel.org/pub/scm/linux/kernel/git/torvald
2037386 - https://access.redhat.com/security/cve/CVE-2022-0168 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d6f5e358452479fa8a773b5c6ccc9e4ec5a20880
CVE ID: CVE-2022-0169 State: PUBLISHED Published: 2022-03-14T14:41:22 Last Updated: 2024-08-02T23:18:41.932Z Vendors: Unknown Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-89 Description: The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0b4d870f-eab8-4544-91f8-9c5f0538709c - https://plugins.trac.wordpress.org/c
ferences: - https://wpscan.com/vulnerability/0b4d870f-eab8-4544-91f8-9c5f0538709c - https://plugins.trac.wordpress.org/changeset/2672822/photo-gallery#file9
CVE ID: CVE-2022-0170 State: PUBLISHED Published: 2022-01-11T15:20:12 Last Updated: 2024-08-02T23:18:41.998Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: chocobozzz Products: chocobozzz/peertube Problem Types: CWE-284 Description: peertube is vulnerable to Improper Access Control Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f2a003fc-b911-43b6-81ec-f856cdfeaefc - https://github.com/chocobozzz/peertube/commit/84c8d9866890f479faf0168c29be5eb7816ccc8e
CVE ID: CVE-2022-0171 State: PUBLISHED Published: 2022-08-26T00:00:00 Last Updated: 2024-08-02T23:18:41.799Z Vendors: n/a Products: kernel Problem Types: CWE-459 Description: A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2038940 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=683412ccf61294d727ead4a73d97397396e69a6b - https://access.
el.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=683412ccf61294d727ead4a73d97397396e69a6b - https://access.redhat.com/security/cve/CVE-2022-0171 - https://www.debian.org/security/2022/dsa-5257 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE ID: CVE-2022-0172 State: PUBLISHED Published: 2022-01-18T16:51:53 Last Updated: 2024-08-02T23:18:41.998Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/348411 - https://gitlab.com/gitlab
- CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/348411 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0172.json
CVE ID: CVE-2022-0173 State: PUBLISHED Published: 2022-01-11T16:55:10 Last Updated: 2024-08-02T23:18:41.953Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-125 Description: radare2 is vulnerable to Out-of-bounds Read Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/727d8600-88bc-4dde-8dea-ee3d192600e5 - https://github.com/radareorg/radare2/commit/37897226a1a31f982bfefdc4aeefc2e50355c73c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKGIB52R4XPCPNEW6GF56EHW7ST24IJU/ - https://lists.fedoraproject.org/archiv
ge-announce%40lists.fedoraproject.org/message/SKGIB52R4XPCPNEW6GF56EHW7ST24IJU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQIRJ72UALGMSWH6MYPVJQQLXFGZ23RS/
CVE ID: CVE-2022-0174 State: PUBLISHED Published: 2022-01-10T17:30:21 Last Updated: 2024-08-02T23:18:42.030Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: dolibarr Products: dolibarr/dolibarr Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ed3ed4ce-3968-433c-a350-351c8f8b60db - https://github.com/dolibarr/dolibarr/commit/d892160f4f130385a3ce520f66cb8cf2eb8c5c32
CVE ID: CVE-2022-0175 State: PUBLISHED Published: 2022-08-26T00:00:00 Last Updated: 2024-08-02T23:18:41.984Z Vendors: n/a Products: virglrenderer Problem Types: CWE-909 Description: A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/virgl/virglrenderer/-/merge_requests/654 - https://gitlab.freedesktop.org/virgl/virglrenderer/-/c
gitlab.freedesktop.org/virgl/virglrenderer/-/merge_requests/654 - https://gitlab.freedesktop.org/virgl/virglrenderer/-/commit/b05bb61f454eeb8a85164c8a31510aeb9d79129c - https://bugzilla.redhat.com/show_bug.cgi?id=2039003 - https://security-tracker.debian.org/tracker/CVE-2022-0175 - https://access.redhat.com/security/cve/CVE-2022-0175 - https://security.gentoo.org/glsa/202210-05
CVE ID: CVE-2022-0176 State: PUBLISHED Published: 2022-02-14T09:20:56 Last Updated: 2024-08-02T23:18:41.933Z Vendors: Unknown Products: PowerPack Lite for Beaver Builder Problem Types: CWE-79 Description: The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/564a66d5-7fab-4de0-868a-e19466a507af - https://plugins.trac.wordpress.org/changeset/2655379
CVE ID: CVE-2022-0177 State: REJECTED Published: 2022-01-24T20:55:10 Last Updated: 2022-01-28T14:12:21 Description: No description available.
CVE ID: CVE-2022-0178 State: PUBLISHED Published: 2022-01-13T22:25:11 Last Updated: 2024-08-02T23:18:42.014Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-862 Description: Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/81c6b974-d0b3-410b-a902-8324a55b1368 - https://github.com/snipe/snipe-it/commit/0e5ef53c352754de2778ffa20c85da15fd6f7ae0
CVE ID: CVE-2022-0179 State: PUBLISHED Published: 2022-01-12T00:00:00 Last Updated: 2024-08-02T23:18:41.991Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-862 Description: snipe-it is vulnerable to Missing Authorization Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7 - https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e
CVE ID: CVE-2022-0180 State: PUBLISHED Published: 2022-01-17T09:10:26 Last Updated: 2024-08-02T23:18:41.968Z Vendors: ExpressTech Products: Quiz And Survey Master Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://quizandsurveymaster.com/ - https://wordpress.org/plugins/quiz-master-next/ - https://jvn.jp/en/jp/JVN72788165/index.html