Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1334 State: PUBLISHED Published: 2022-05-16T14:30:47 Last Updated: 2024-08-03T00:03:05.934Z Vendors: Unknown Products: WP YouTube Live Problem Types: CWE-79 Description: The WP YouTube Live WordPress plugin before 1.8.3 does not validate, sanitise and escape various of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/af3b32c9-f386-4bb6-a362-86a27f49a739
CVE ID: CVE-2022-1335 State: PUBLISHED Published: 2022-06-13T12:41:44 Last Updated: 2024-08-03T00:03:06.054Z Vendors: Unknown Products: Slideshow CK Problem Types: CWE-79 Description: The Slideshow CK WordPress plugin before 1.4.10 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cfc80857-8674-478f-9604-7a8849e5b85e
CVE ID: CVE-2022-1336 State: PUBLISHED Published: 2022-06-13T12:41:45 Last Updated: 2024-08-03T00:03:05.862Z Vendors: Unknown Products: Carousel CK Problem Types: CWE-79 Description: The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/39e127f1-c36e-4699-892f-3755ee17bab6
CVE ID: CVE-2022-1337 State: PUBLISHED Published: 2022-04-13T17:06:00 Last Updated: 2024-12-06T23:10:06.768Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2022-1338 State: PUBLISHED Published: 2022-05-09T16:50:50 Last Updated: 2024-08-03T00:03:05.658Z Vendors: Unknown Products: Easily Generate Rest API Url Problem Types: CWE-79 Description: The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/51b91d0e-33af-41ce-b95f-d422586f1d5f
CVE ID: CVE-2022-1339 State: PUBLISHED Published: 2022-04-13T09:45:15 Last Updated: 2024-08-03T00:03:05.610Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-89 Description: SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ae8dc737-844e-40da-a9f7-e72d8e50f6f9 - https://github.com/pimcore/pimcore/commit/adae3be64427466bf0df15ceaea2ac30da93752c
CVE ID: CVE-2022-1340 State: PUBLISHED Published: 2022-08-22T12:10:14 Last Updated: 2024-08-03T00:03:05.630Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: yetiforcecompany Products: yetiforcecompany/yetiforcecrm Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4746f149-fc55-48a1-a7ab-fd7c7412c05a - https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c23528450618
CVE ID: CVE-2022-1341 State: PUBLISHED Published: 2022-04-18T16:20:34 Last Updated: 2024-08-03T00:03:06.296Z Vendors: n/a Products: bwm-ng Problem Types: CWE-476 Description: An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vgropp/bwm-ng/issues/26 - https://github.com/vgropp/bwm-ng/commit/9774f23bf78a6e6d3ae4cfe3d73bad34f2fdcd17
CVE ID: CVE-2022-1342 State: PUBLISHED Published: 2022-06-15T16:09:30.876032Z Last Updated: 2024-09-17T03:55:09.040Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: CWE-549 Description: A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive information. This issue affects: Devolutions Remote Desktop Manager 2022.1.24 version and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://devolutions.net/securit
ion and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2022-0003
CVE ID: CVE-2022-1343 State: PUBLISHED Published: 2022-05-03T15:15:21.496Z Last Updated: 2025-05-05T16:42:39.898Z Vendors: OpenSSL Products: OpenSSL Problem Types: Incorrect signature verfication Description: The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in
_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL "ocsp" application. When verifying an ocsp response with the "-no_cert_checks" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Additional
ure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20220503.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a - https://security.netapp.com/advisory/ntap-20220602-0009/ - https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
CVE ID: CVE-2022-1344 State: PUBLISHED Published: 2022-04-13T18:05:11 Last Updated: 2024-08-03T00:03:05.936Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-79 Description: Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8c - https://github.com/causefx/organizr/commit/a09d834d995
https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8c - https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a
CVE ID: CVE-2022-1345 State: PUBLISHED Published: 2022-04-13T18:10:18 Last Updated: 2024-08-03T00:03:05.882Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-434 Description: Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a - https://huntr.dev/bounties/781b5c2a-bc98-41a0-a276
om/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a - https://huntr.dev/bounties/781b5c2a-bc98-41a0-a276-ea12399e5a25
CVE ID: CVE-2022-1346 State: PUBLISHED Published: 2022-04-13T18:10:12 Last Updated: 2024-08-03T00:03:05.823Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-79 Description: Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a - https://huntr.dev/bounties/8fe435b0-192f-41ca-b41e-580fcd34892f
CVE ID: CVE-2022-1347 State: PUBLISHED Published: 2022-04-13T18:20:12 Last Updated: 2024-08-03T00:03:05.862Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-79 Description: Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation Additional Analyst Notes: - CVE Program Container: References: - https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a - https://huntr.dev/bounties/6059501f-05d2-4e76-ae03-5eb64835e6bf
CVE ID: CVE-2022-1348 State: PUBLISHED Published: 2022-05-25T15:13:39.000Z Last Updated: 2025-06-09T14:55:12.017Z Vendors: n/a Products: logrotate Problem Types: CWE-732 Description: A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzil
before 3.20.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348 - http://www.openwall.com/lists/oss-security/2022/05/25/3 - http://www.openwall.com/lists/oss-security/2022/05/25/4 - http://www.openwall.com/lists/oss-security/2022/05/25/5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/
CVE ID: CVE-2022-1349 State: PUBLISHED Published: 2022-05-16T14:30:48 Last Updated: 2024-08-03T00:03:06.362Z Vendors: Unknown Products: WPQA Builder Plugin Problem Types: CWE-287 Description: The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the value passed to the image_id parameter of the ajax action wpqa_remove_image belongs to the requesting user, allowing any users (with privileges as low as Subscriber) to delete the profile pictures of any other user. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7ee95a53-5fe9-404c-a77a-d1218265e4aa
CVE ID: CVE-2022-1350 State: PUBLISHED Published: 2022-04-14T06:15:17.000Z Last Updated: 2025-04-15T14:41:24.833Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: unspecified Products: GhostPCL Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The exploit has been disclosed to the public as a POC and may be used. It is recommended to apply the patches to fix this issue. Additional Analys
osed to the public as a POC and may be used. It is recommended to apply the patches to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=705156 - https://bugs.ghostscript.com/attachment.cgi?id=22323 - https://vuldb.com/?id.197290
CVE ID: CVE-2022-1351 State: PUBLISHED Published: 2022-04-14T09:15:15 Last Updated: 2024-08-03T00:03:05.672Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c23ae6c2-2e53-4bf5-85b0-e90418476615 - https://github.com/pimcore/pimcore/commit/8c39a8b8f14dce078b31f61c4da599ca6f8fc7ac
CVE ID: CVE-2022-1352 State: PUBLISHED Published: 2022-05-11T14:30:02 Last Updated: 2024-08-03T00:03:05.823Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Authorization bypass through user-controlled key in GitLab Description: Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1, an endpoint may reveal the issue title to a user who crafted an API call with the ID of the issue from a public project that restricts access to issue only to project members. Additional Analyst Notes: - CVE Program Container
public project that restricts access to issue only to project members. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/350691 - https://hackerone.com/reports/1450306 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1352.json
CVE ID: CVE-2022-1353 State: PUBLISHED Published: 2022-04-29T15:46:44 Last Updated: 2024-08-03T00:03:05.935Z Vendors: n/a Products: Kernel Problem Types: CWE-200 Description: A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2066819 - https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c - https://www.debian.org/security/2022/dsa-5127 - https://security.netapp.com/adv
564bccb78a76740ea9d75a259942df8143d02c - https://www.debian.org/security/2022/dsa-5127 - https://security.netapp.com/advisory/ntap-20220629-0001/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-1354 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T00:03:06.284Z Vendors: n/a Products: libtiff Problem Types: CWE-125 Description: A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2074404 - https://gitlab.com/libtiff/libtiff/-/issues/319 - https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542
lab.com/libtiff/libtiff/-/issues/319 - https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798 - https://access.redhat.com/security/cve/CVE-2022-1354 - https://security.netapp.com/advisory/ntap-20221014-0007/ - https://security.gentoo.org/glsa/202210-10 - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-1355 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T00:03:05.863Z Vendors: n/a Products: libtiff Problem Types: CWE-121 Description: A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2074415 - https://gitlab.com/libtiff/libtiff/-/issues/400 - https://gitlab.com/libtiff/libtiff/-/merge_requests/323 - https://ac
- https://gitlab.com/libtiff/libtiff/-/issues/400 - https://gitlab.com/libtiff/libtiff/-/merge_requests/323 - https://access.redhat.com/security/cve/CVE-2022-1355 - https://security.netapp.com/advisory/ntap-20221014-0007/ - https://security.gentoo.org/glsa/202210-10 - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-1356 State: PUBLISHED Published: 2022-05-17T20:11:50.607Z Last Updated: 2025-04-16T16:20:36.735Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-78 Description: cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1357 State: PUBLISHED Published: 2022-05-17T20:10:59.652Z Last Updated: 2025-04-16T16:20:45.656Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-78 Description: The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1358 State: PUBLISHED Published: 2022-05-17T20:12:45.478Z Last Updated: 2025-04-16T17:54:18.183Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-89 Description: The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1359 State: PUBLISHED Published: 2022-05-17T20:15:55.669Z Last Updated: 2025-04-16T16:20:28.857Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-78 Description: The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server. Additional Analyst Notes: - CVE Program Container: - CI
d allow an attacker to write any data to any file in the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1360 State: PUBLISHED Published: 2022-05-17T20:17:51.582Z Last Updated: 2025-04-16T16:20:21.687Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-78 Description: The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1361 State: PUBLISHED Published: 2022-05-17T20:18:28.888Z Last Updated: 2025-04-16T17:54:08.232Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-89 Description: The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1362 State: PUBLISHED Published: 2022-05-17T20:19:35.434Z Last Updated: 2025-04-16T16:20:13.501Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Cambium Networks Products: cnMaestro Problem Types: CWE-78 Description: The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
CVE ID: CVE-2022-1364 State: PUBLISHED Published: 2022-07-26T21:30:44.000Z Last Updated: 2025-10-21T23:15:37.491Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1315901 - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1365 State: PUBLISHED Published: 2022-04-15T22:40:10 Last Updated: 2024-08-03T00:03:05.870Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: lquixada Products: lquixada/cross-fetch Problem Types: CWE-359 Description: Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ab55dfdd-2a60-437a-a832-e3efe3d264ac - https://github.com/lquixada/cross-fetch/commit/a3b3a9481091ddd06b8f83784ba9c4e034dc912a