Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2130 State: PUBLISHED Published: 2022-06-20T08:45:15 Last Updated: 2024-08-03T00:24:44.324Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0142970a-5cb8-4dba-8bbc-4fa2f3bee65c - https://github.com/microweber/microweber/commit/dbd37dda91911360db23269897c737e0abae2c24
CVE ID: CVE-2022-2131 State: PUBLISHED Published: 2022-07-25T14:20:53.830360Z Last Updated: 2024-09-17T01:10:51.016Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: OpenKM Products: OpenKM Document Management Community Problem Types: CWE-611 Description: OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/openkm-xxe-injection
CVE ID: CVE-2022-2132 State: PUBLISHED Published: 2022-08-31T15:32:58 Last Updated: 2024-08-03T00:24:44.195Z Vendors: n/a Products: dpdk Problem Types: CWE-791 Description: A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2099475 - https://bugs.dpdk.org/show_bug.cgi?id=1031 - https://lists.debian.org/debian-lts-announce/2022/09/msg00000.html
CVE ID: CVE-2022-2133 State: PUBLISHED Published: 2022-07-17T10:36:17 Last Updated: 2024-08-03T00:24:44.224Z Vendors: Unknown Products: OAuth Single Sign On – SSO (OAuth Client) Problem Types: CWE-287 Description: The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e76939ca-180f-4472-a26a-e0c36cfd32de
CVE ID: CVE-2022-2134 State: PUBLISHED Published: 2022-06-20T00:00:00 Last Updated: 2024-08-03T00:24:44.433Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: inventree Products: inventree/inventree Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/57b0f272-a97f-4cb3-b546-c863c68a561a - https://github.com/inventree/inventree/commit/63b4ff3eb6e80861962fafe79c9b483cd7239d6c
CVE ID: CVE-2022-2135 State: PUBLISHED Published: 2022-07-22T14:58:45.454Z Last Updated: 2025-04-16T16:14:00.977Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Advantech iView Products: iView Problem Types: CWE-89 Description: The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE ID: CVE-2022-2136 State: PUBLISHED Published: 2022-07-22T14:58:55.154Z Last Updated: 2025-04-16T17:51:20.418Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech iView Products: iView Problem Types: CWE-89 Description: The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE ID: CVE-2022-2137 State: PUBLISHED Published: 2022-07-22T14:57:57.232Z Last Updated: 2025-04-16T16:14:29.858Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Advantech iView Products: iView Problem Types: CWE-89 Description: The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE ID: CVE-2022-2138 State: PUBLISHED Published: 2022-07-22T14:58:18.441Z Last Updated: 2025-04-16T16:14:11.150Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Advantech iView Products: iView Problem Types: CWE-306 Description: The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE ID: CVE-2022-2139 State: PUBLISHED Published: 2022-07-22T14:58:03.033Z Last Updated: 2025-04-16T16:14:20.749Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Advantech iView Products: iView Problem Types: CWE-23 Description: The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE ID: CVE-2022-2140 State: PUBLISHED Published: 2022-06-27T16:14:48.000Z Last Updated: 2025-04-16T17:51:46.939Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Elcomplus Products: SmartICS Problem Types: CWE-79 Description: Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-05
CVE ID: CVE-2022-2141 State: PUBLISHED Published: 2022-07-20T15:24:21.042Z Last Updated: 2025-04-16T16:15:07.602Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MiCODUS Products: MV720 Problem Types: CWE-287 Description: SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-200-01
CVE ID: CVE-2022-2142 State: PUBLISHED Published: 2022-07-22T14:59:30.208Z Last Updated: 2025-04-16T17:51:07.409Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech iView Products: iView Problem Types: CWE-89 Description: The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE ID: CVE-2022-2143 State: PUBLISHED Published: 2022-07-22T14:59:13.360Z Last Updated: 2025-04-16T16:13:52.871Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech iView Products: iView Problem Types: CWE-77 Description: The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03 - http://packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.html
CVE ID: CVE-2022-2144 State: PUBLISHED Published: 2022-07-17T10:36:23 Last Updated: 2024-08-03T00:24:44.277Z Vendors: Unknown Products: Jquery Validation For Contact Form 7 Problem Types: CWE-352 Description: The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like default_role, users_can_register via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/419054d4-95e8-4f4a-b864-a98b3e18435a
CVE ID: CVE-2022-2145 State: PUBLISHED Published: 2022-06-28T17:45:20 Last Updated: 2024-08-03T00:24:44.183Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H) Vendors: Cloudflare Products: WARP Problem Types: CWE-20, CWE-59 Description: Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-6fpc-qxmr-6wrq
CVE ID: CVE-2022-2146 State: PUBLISHED Published: 2022-07-17T10:36:27 Last Updated: 2024-08-03T00:24:44.217Z Vendors: Unknown Products: Import CSV Files Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them back in a page, and is lacking CSRF check when performing such action as well, resulting in a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/adc1d752-331e-44af-b5dc-b463d56c2cb4
CVE ID: CVE-2022-2147 State: PUBLISHED Published: 2022-06-23T21:00:16 Last Updated: 2024-08-03T00:24:44.346Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Cloudflare Products: WARP Problem Types: CWE-428 Description: Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r
CVE ID: CVE-2022-2148 State: PUBLISHED Published: 2022-07-17T10:36:29 Last Updated: 2024-08-03T00:24:44.311Z Vendors: Unknown Products: LinkedIn Company Updates Problem Types: CWE-79 Description: The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/92214311-da6d-49a8-95c9-86f47635264f
CVE ID: CVE-2022-2149 State: PUBLISHED Published: 2022-07-17T10:36:35 Last Updated: 2024-08-03T00:24:44.276Z Vendors: Unknown Products: Very Simple Breadcrumb Problem Types: CWE-79 Description: The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/40191e87-8648-47ef-add0-d7180e8ffe13
CVE ID: CVE-2022-2151 State: PUBLISHED Published: 2022-07-17T10:36:40 Last Updated: 2024-08-03T00:24:44.266Z Vendors: Unknown Products: Best Contact Management Software for WordPress Problem Types: CWE-79 Description: The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7c08e4c1-57c5-471c-a990-dcb9fd7ce0f4
CVE ID: CVE-2022-2152 State: PUBLISHED Published: 2022-08-15T08:36:07 Last Updated: 2024-08-03T00:24:44.254Z Vendors: Unknown Products: Duplicate Page and Post Problem Types: CWE-79 Description: The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e972e2c5-0d56-4d2a-81cc-2b0dff750124
CVE ID: CVE-2022-2153 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T00:32:07.943Z Vendors: n/a Products: kernel Problem Types: CWE-476 Description: A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2069736 - https://www.openwall.com/lists/oss-security/2022/
r: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2069736 - https://www.openwall.com/lists/oss-security/2022/06/22/1 - https://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a - https://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46ce - https://github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44 - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE ID: CVE-2022-2154 State: REJECTED Published: 2022-09-20T17:35:32.233Z Last Updated: 2025-02-13T15:46:19.358Z Description: No description available.
CVE ID: CVE-2022-2155 State: PUBLISHED Published: 2023-01-12T14:01:51.857Z Last Updated: 2025-04-07T15:06:41.003Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Hitachi Energy Products: Lumada APM Problem Types: CWE-863 Description: A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. An attacker that manages to exploit the vulnerability on a customer’s Lumada APM could access unauthorized information by gaining unauthorized access to any Power BI reports installed by the cu
ada APM could access unauthorized information by gaining unauthorized access to any Power BI reports installed by the customer. Furthermore, the vulnerability enables an attacker to manipulate asset issue comments on assets, which should not be available to the attacker. Affected versions * Lumada APM on-premises version 6.0.0.0 - 6.4.0.* List of CPEs: * cpe:2.3:a:hitachienergy:lumada_apm:6.0.0.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:lumada_apm:6.1.0.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:lumada_apm:6.2.0.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:lumada_apm:6.3.0.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:lumada_apm:6.4.0.0:*:*:*:*:*:*:* Additional Analyst Notes: - CVE Program Container:
:*:*:*:*:* * cpe:2.3:a:hitachienergy:lumada_apm:6.4.0.0:*:*:*:*:*:*:* Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000112&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-2156 State: PUBLISHED Published: 2022-07-28T00:40:20 Last Updated: 2024-08-03T00:32:07.960Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1335458 - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/
nce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-2157 State: PUBLISHED Published: 2022-07-28T00:40:26 Last Updated: 2024-08-03T00:32:08.541Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1327312 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCR
/lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-2158 State: PUBLISHED Published: 2022-07-28T00:40:31 Last Updated: 2024-08-03T00:32:07.973Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1321078 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/pa
e%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-2160 State: PUBLISHED Published: 2022-07-28T00:40:37 Last Updated: 2024-08-03T00:32:08.612Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1116450 - https://lists.fedoraproject.org/archives/list/packa
ble-channel-update-for-desktop_21.html - https://crbug.com/1116450 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-2161 State: PUBLISHED Published: 2022-07-28T00:40:43 Last Updated: 2024-08-03T00:32:07.946Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1330289 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQ
crbug.com/1330289 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-2162 State: PUBLISHED Published: 2022-07-28T00:40:48 Last Updated: 2024-08-03T00:32:07.995Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1307930 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ -
.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-2163 State: PUBLISHED Published: 2022-07-28T01:00:25 Last Updated: 2024-08-03T00:32:08.018Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1308341 - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDN
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25 - https://security.gentoo.org/glsa/202208-35
CVE ID: CVE-2022-2164 State: PUBLISHED Published: 2022-07-28T00:41:01 Last Updated: 2024-08-03T00:32:07.993Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1268445 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
ttps://crbug.com/1268445 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ - https://security.gentoo.org/glsa/202208-25