Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ntegration which could lead to a reflected XSS that allowed attackers to perform arbitrary actions on behalf of victims. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/378214 - https://hackerone.com/reports/1727985 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3572.json
CVE ID: CVE-2022-3573 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T15:15:38.863Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute arbitrary JavaScript on the self-hosted instances running wit
rameters in the wiki changes page, an attacker can execute arbitrary JavaScript on the self-hosted instances running without strict CSP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/378216 - https://hackerone.com/reports/1730461 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3573.json
CVE ID: CVE-2022-3574 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:29:33.489Z Vendors: Unknown Products: WPForms Pro Problem Types: CWE-1236 Description: The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0eae5189-81af-4344-9e96-dd1f4e223d41
CVE ID: CVE-2022-3575 State: PUBLISHED Published: 2022-11-02T16:15:33.921Z Last Updated: 2025-05-05T13:43:51.404Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Frauscher Sensortechnik Products: Diagnostic System FDS102 Problem Types: CWE-434 Description: Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.frauscher.com/en/psirt
CVE ID: CVE-2022-3576 State: PUBLISHED Published: 2022-10-20T05:50:24.922Z Last Updated: 2025-05-05T20:08:56.194Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-125 Description: A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_22_17
CVE ID: CVE-2022-3577 State: PUBLISHED Published: 2022-10-20T00:00:00.000Z Last Updated: 2025-05-08T18:56:12.043Z Vendors: n/a Products: Kernel Problem Types: CWE-401 Description: An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/
write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc4ef9d5724973193bfa5ebed181dba6de3a56db - https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git/commit/?h=char-misc-next&id=9d64d2405f7d30d49818f6682acd0392348f0fdb - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=945a9a8e448b65bec055d37eba58f711b39f66f0
CVE ID: CVE-2022-3578 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:28:07.376Z Vendors: Unknown Products: ProfileGrid – User Profiles, Memberships, Groups and Communities Problem Types: CWE-79 Description: The ProfileGrid WordPress plugin before 5.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/17596b0e-ff45-4d0c-8e57-a31101e30345
CVE ID: CVE-2022-3579 State: PUBLISHED Published: 2022-10-18T00:00:00 Last Updated: 2024-11-20T14:43:22.943Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Cashier Queuing System Problem Types: CWE-707 Description: A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-211186 is the identifier assigned to this vulnerabi
y. The exploit has been disclosed to the public and may be used. VDB-211186 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DisguisedRoot/Exploit/blob/main/SQLInj/POC - https://vuldb.com/?id.211186
CVE ID: CVE-2022-3580 State: PUBLISHED Published: 2022-10-18T00:00:00 Last Updated: 2024-08-03T01:14:02.617Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Cashier Queuing System Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-211187. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.
ier of this vulnerability is VDB-211187. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.211187
CVE ID: CVE-2022-3581 State: PUBLISHED Published: 2022-10-18T00:00:00 Last Updated: 2024-08-03T01:14:02.353Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Cashier Queuing System Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-211188. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.2
is vulnerability is VDB-211188. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.211188
CVE ID: CVE-2022-3582 State: PUBLISHED Published: 2022-10-18T00:00:00 Last Updated: 2024-08-03T01:14:02.331Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Cold Storage Management System Problem Types: CWE-863 Description: A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to t
ched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jusstSahil/CSRF-/blob/main/POC - https://vuldb.com/?id.211189
CVE ID: CVE-2022-3583 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-04-14T15:58:20.998Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Canteen Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211192. Additional Analyst Notes: - C
sclosed to the public and may be used. The identifier of this vulnerability is VDB-211192. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md - https://vuldb.com/?id.211192
CVE ID: CVE-2022-3584 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-04-15T13:26:31.175Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Canteen Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211193 was assigned to this vulnerability. Additional Analyst N
closed to the public and may be used. The identifier VDB-211193 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql2.md - https://vuldb.com/?id.211193
CVE ID: CVE-2022-3585 State: PUBLISHED Published: 2022-10-18T00:00:00 Last Updated: 2024-08-03T01:14:02.013Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Cold Storage Management System Problem Types: CWE-863 Description: A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assig
ch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/souravkr529/CSRF-in-Cold-Storage-Management-System/blob/main/PoC - https://vuldb.com/?id.211194
CVE ID: CVE-2022-3586 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:48:40.780Z Vendors: n/a Products: Linux Kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/9efd23297cca - https://www.zerodayinitiative.com/advisories
ment: References: - https://github.com/torvalds/linux/commit/9efd23297cca - https://www.zerodayinitiative.com/advisories/upcoming/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE ID: CVE-2022-3587 State: PUBLISHED Published: 2022-10-18T00:00:00 Last Updated: 2024-08-03T01:14:02.786Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Cold Storage Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211201 w
tack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211201 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rsrahulsingh05/POC/blob/main/Stored%20XSS - https://vuldb.com/?id.211201
CVE ID: CVE-2022-3589 State: PUBLISHED Published: 2022-11-21T09:56:37.348Z Last Updated: 2025-04-25T19:29:31.066Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Miele Products: appWash Problem Types: CWE-639 Description: An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP
er user was not possible, thus no impact to Availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/de/advisories/VDE-2022-052/
CVE ID: CVE-2022-3590 State: PUBLISHED Published: 2022-12-14T08:33:40.434Z Last Updated: 2025-04-21T14:12:02.956Z Vendors: WordPress Products: WordPress Problem Types: CWE-918 Server-Side Request Forgery (SSRF), CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition Description: WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c8814e6e-78b3-4f63-a1d3-6906a84c1f11 - https://blog.sonarsour
lnrichment: References: - https://wpscan.com/vulnerability/c8814e6e-78b3-4f63-a1d3-6906a84c1f11 - https://blog.sonarsource.com/wordpress-core-unauthenticated-blind-ssrf/
CVE ID: CVE-2022-3591 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-23T15:53:54.119Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0789. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a5a998c2-4b07-47a7-91be-dbc1886b3921 - https://github.com/vim/vim/commit/8f3c3c6cd044e3b5bf08dbfa3b3f04bb3f711bad - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3592 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T15:14:28.686Z Vendors: n/a Products: samba Problem Types: CWE-61 Description: A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.c
tem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2137776 - https://www.samba.org/samba/security/CVE-2022-3592.html - https://access.redhat.com/security/cve/CVE-2022-3592 - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2022-3593 State: REJECTED Published: N/A Last Updated: 2022-10-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-3594 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-04-14T15:58:13.740Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363. Additional Analyst Notes: - CVE Program
o fix this issue. The associated identifier of this vulnerability is VDB-211363. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93e2be344a7db169b7119de21ac1bf253b8c6907 - https://vuldb.com/?id.211363 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-3595 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-04-15T13:26:23.766Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess_free_buffer of the file fs/cifs/sess.c of the component CIFS Handler. The manipulation leads to double free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211364. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org
211364. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b854b4ee66437e6e1622fda90529c814978cb4ca - https://vuldb.com/?id.211364
CVE ID: CVE-2022-3596 State: PUBLISHED Published: 2023-09-20T19:06:28.487Z Last Updated: 2024-08-03T01:14:02.457Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat OpenStack Platform 13.0 - ELS, Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS Problem Types: CWE-402 Description: An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
ion, including administrator access credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2022:8897 - https://access.redhat.com/security/cve/CVE-2022-3596 - https://bugzilla.redhat.com/show_bug.cgi?id=2136596
CVE ID: CVE-2022-3597 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T20:49:05.971Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff
91. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047 - https://gitlab.com/libtiff/libtiff/-/issues/413 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3597.json - https://security.netapp.com/advisory/ntap-20230110-0001/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-3598 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T20:33:53.528Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/435 - https://gitlab.
gram Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/435 - https://gitlab.com/libtiff/libtiff/-/commit/cfbb883bf6ea7bedcb04177cc4e52d304522fdff - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3598.json - https://security.netapp.com/advisory/ntap-20230110-0001/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
CVE ID: CVE-2022-3599 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T20:34:32.205Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/398 - https://gitlab.com/libtiff/libt
- CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/398 - https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3599.json - https://security.netapp.com/advisory/ntap-20230110-0001/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-3600 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T13:23:33.816Z Vendors: Unknown Products: Easy Digital Downloads Problem Types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File Description: The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/16e2d970-19d0-42d1-8fb1-e7cb14ace1d0