Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0016 State: PUBLISHED Published: 2022-02-10T18:10:16.879284Z Last Updated: 2024-09-17T02:00:45.459Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-703 Description: An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue do
is issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0016
CVE ID: CVE-2022-0017 State: PUBLISHED Published: 2022-02-10T18:10:18.618578Z Last Updated: 2024-09-16T17:58:01.158Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-59 Description: An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions
mpacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0017
CVE ID: CVE-2022-0018 State: PUBLISHED Published: 2022-02-10T18:10:20.308594Z Last Updated: 2024-09-16T23:36:47.780Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-201 Description: An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the GlobalProtect portal configuration. This product behavior is intentional and poses no security risk when connecting to trusted GlobalProtect portals configured to use the sa
vior is intentional and poses no security risk when connecting to trusted GlobalProtect portals configured to use the same Single Sign-On credentials both for the local user account as well as the GlobalProtect login. However when the credentials are different, the local account credentials are inadvertently sent to the GlobalProtect portal for authentication. A third party MITM type of attacker cannot see these credentials in transit. This vulnerability is a concern where the GlobalProtect app is deployed on Bring-your-Own-Device (BYOD) type of clients with private local user accounts or GlobalProtect app is used to connect to different organizations. Fixed versions of GlobalProtect app hav
ser accounts or GlobalProtect app is used to connect to different organizations. Fixed versions of GlobalProtect app have an app setting to prevent the transmission of the user's local user credentials to the target GlobalProtect portal regardless of the portal configuration. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows and MacOS; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS This issue does not affect GlobalProtect app on other platforms. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0018
CVE ID: CVE-2022-0019 State: PUBLISHED Published: 2022-02-10T18:10:21.940684Z Last Updated: 2024-09-16T20:06:53.694Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-522 Description: An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed credentials enable a local attacker to authenticate to the GlobalProtect portal or gateway as the target user without knowing of
als enable a local attacker to authenticate to the GlobalProtect portal or gateway as the target user without knowing of the target user’s plaintext password. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Linux. GlobalProtect app 5.2 versions earlier than and including GlobalProtect app 5.2.7 on Linux. GlobalProtect app 5.3 versions earlier than GlobalProtect app 5.3.2 on Linux. This issue does not affect the GlobalProtect app on other platforms. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0019
CVE ID: CVE-2022-0020 State: PUBLISHED Published: 2022-02-10T18:10:23.382535Z Last Updated: 2024-09-16T16:53:59.807Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Cortex XSOAR Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0
ncounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0020 - http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html
CVE ID: CVE-2022-0021 State: PUBLISHED Published: 2022-02-10T18:10:24.695182Z Last Updated: 2024-09-16T19:20:33.408Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-532 Description: An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms. Additional Analyst Notes:
er than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0021
CVE ID: CVE-2022-0022 State: PUBLISHED Published: 2022-03-09T17:35:09.466087Z Last Updated: 2024-09-16T20:47:18.031Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access Problem Types: CWE-916 Description: Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient level of computational effort, which allows for password cracking attacks on accounts in normal (non-FIPS-CC) operational mode. An attacker must have access to the account password hashes to take advantage of this weakness and can acqu
tional mode. An attacker must have access to the account password hashes to take advantage of this weakness and can acquire those hashes if they are able to gain access to the PAN-OS software configuration. Fixed versions of PAN-OS software use a secure cryptographic algorithm for account password hashes. This issue does not impact Prisma Access firewalls. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.21; All versions of PAN-OS 9.0; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11; PAN-OS 10.0 versions earlier than PAN-OS 10.0.7. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0022
CVE ID: CVE-2022-0023 State: PUBLISHED Published: 2022-04-13T18:35:10.474819Z Last Updated: 2024-09-16T19:05:33.962Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access Problem Types: CWE-755 Description: An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle (MITM) to send specifically crafted traffic to the firewall that causes the service to restart unexpectedly. Repeated attempts to send this request result in denial-of-service to all PAN-OS services by restarting the device in maintenance mode. T
to send this request result in denial-of-service to all PAN-OS services by restarting the device in maintenance mode. This issue does not impact Panorama appliances and Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.22; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5. This issue does not impact PAN-OS 10.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0023
CVE ID: CVE-2022-0024 State: PUBLISHED Published: 2022-05-11T16:30:22.795895Z Last Updated: 2024-09-17T02:21:50.846Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-138 Description: A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committed on both hardware and virtual firewalls. This issue does not impact Panorama appliances or Prisma Access customers. This issue impac
dware and virtual firewalls. This issue does not impact Panorama appliances or Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.23; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0024
CVE ID: CVE-2022-0025 State: PUBLISHED Published: 2022-05-11T16:30:24.228159Z Last Updated: 2024-09-17T02:42:23.753Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-427 Description: A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts: All versions of the Cortex XDR agent when upgrading to Cortex XDR agent 7.7.0 on Windows; Cortex XDR agent 7.7.0 without con
versions of the Cortex XDR agent when upgrading to Cortex XDR agent 7.7.0 on Windows; Cortex XDR agent 7.7.0 without content update 500 or a later version on Windows. This issue does not impact other platforms or other versions of the Cortex XDR agent. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0025
CVE ID: CVE-2022-0026 State: PUBLISHED Published: 2022-05-11T16:30:25.746724Z Last Updated: 2024-09-17T01:26:10.764Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-282 Description: A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version. Additional Analyst Notes: - CV
ersions of Cortex XDR agent without content update 330 or a later content update version. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0026
CVE ID: CVE-2022-0027 State: PUBLISHED Published: 2022-05-11T16:30:27.103576Z Last Updated: 2024-09-16T23:06:08.634Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Palo Alto Networks Products: Cortex XSOAR Problem Types: CWE-285 Description: An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR
ss. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0027
CVE ID: CVE-2022-0028 State: PUBLISHED Published: 2022-08-10T16:00:16.743Z Last Updated: 2025-10-21T23:15:36.930Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-406 Description: A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container) firewall against an attacker-specified target. To be misused by an external attacker, the firewall configuration mu
ner) firewall against an attacker-specified target. To be misused by an external attacker, the firewall configuration must have a URL filtering profile with one or more blocked categories assigned to a source zone that has an external facing interface. This configuration is not typical for URL filtering and, if set, is likely unintended by the administrator. If exploited, this issue would not impact the confidentiality, integrity, or availability of our products. However, the resulting denial-of-service (DoS) attack may help obfuscate the identity of the attacker and implicate the firewall as the source of the attack. We have taken prompt action to address this issue in our PAN-OS software.
ate the firewall as the source of the attack. We have taken prompt action to address this issue in our PAN-OS software. All software updates for this issue are expected to be released no later than the week of August 15, 2022. This issue does not impact Panorama M-Series or Panorama virtual appliances. This issue has been resolved for all Cloud NGFW and Prisma Access customers and no additional action is required from them. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0028
CVE ID: CVE-2022-0029 State: PUBLISHED Published: 2022-09-14T16:35:08.910Z Last Updated: 2025-06-04T15:08:32.763Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-59 Description: An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2022-0029
CVE ID: CVE-2022-0030 State: PUBLISHED Published: 2022-10-12T16:30:12.300Z Last Updated: 2025-05-15T14:00:04.162Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-290 Description: An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2022
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2022-0030
CVE ID: CVE-2022-0031 State: PUBLISHED Published: 2022-11-09T17:24:34.557Z Last Updated: 2025-05-01T19:10:17.973Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Cortex XSOAR Problem Types: CWE-345 Description: A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2022-0031
CVE ID: CVE-2022-0070 State: PUBLISHED Published: 2022-04-19T22:15:23.412366Z Last Updated: 2024-09-17T04:10:29.989Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Amazon Web Services Products: log4j-cve-2021-44228-hotpatch Problem Types: CWE-250 Description: Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to. Additional Analyst Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities - https://alas.aws.amazon.
er: References: - https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities - https://alas.aws.amazon.com/cve/html/CVE-2022-0070.html
CVE ID: CVE-2022-0071 State: PUBLISHED Published: 2022-04-19T22:15:25.022600Z Last Updated: 2024-09-17T04:24:20.485Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Amazon Web Services Products: Hotdog Problem Types: CWE-250 Description: Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust the resources of the host, modify devices, or make syscalls that would otherwise be blocked. Additional Analyst Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabili
st Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities - https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-jr96-7frv-3mpj
CVE ID: CVE-2022-0072 State: PUBLISHED Published: 2022-10-27T19:28:49.031Z Last Updated: 2025-05-09T19:18:17.065Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: LiteSpeed Technologies Products: OpenLiteSpeed Web Server, LiteSpeed Web Server Problem Types: CWE-22 Description: Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/litespeedtech/openlitespeed/bl
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/src/main/httpserver.cpp#L2060-L2061 - https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061
CVE ID: CVE-2022-0073 State: PUBLISHED Published: 2022-10-27T19:30:54.053Z Last Updated: 2025-05-05T18:12:47.674Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: LiteSpeed Technologies Products: OpenLiteSpeed Web Server, LiteSpeed Web Server Problem Types: CWE-20 Description: Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.php#L5
t: References: - https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.php#L565 - https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.php#L565
CVE ID: CVE-2022-0074 State: PUBLISHED Published: 2022-10-27T19:32:19.200Z Last Updated: 2025-05-09T19:19:06.373Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: LiteSpeed Technologies Products: OpenLiteSpeed Web Server, LiteSpeed Web Server Problem Types: CWE-426 Description: Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29
CVE ID: CVE-2022-0079 State: PUBLISHED Published: 2022-01-03T03:00:11 Last Updated: 2024-08-02T23:18:41.565Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-209 Description: showdoc is vulnerable to Generation of Error Message Containing Sensitive Information Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b37f0e26-355a-4d50-8495-a567c10828ee - https://github.com/star7th/showdoc/commit/e43df0a190f68aefa272507d3bd54475f566c1db
CVE ID: CVE-2022-0080 State: PUBLISHED Published: 2022-01-02T11:30:09.000Z Last Updated: 2025-05-22T15:01:54.420Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: mruby Products: mruby/mruby Problem Types: CWE-122 Description: mruby is vulnerable to Heap-based Buffer Overflow Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2e - https://github.com/mruby/mruby/commit/28ccc664e5dcd3f9d55173e9afde77c4705a9ab6
CVE ID: CVE-2022-0083 State: PUBLISHED Published: 2022-01-04T06:15:12 Last Updated: 2024-08-02T23:18:41.639Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-209 Description: livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4c477440-3b03-42eb-a6e2-a31b55090736 - https://github.com/livehelperchat/livehelperchat/commit/fbed8728be59040a7218610e72f6eceb5f8bc152