Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30560 State: PUBLISHED Published: 2022-06-28T13:41:11 Last Updated: 2024-08-03T06:48:36.391Z Vendors: n/a Products: IPCHDBW2XXX IPCHFW2XXX ASI7XXXX Problem Types: Denial of service Description: When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/1017
CVE ID: CVE-2022-30561 State: PUBLISHED Published: 2022-06-28T13:42:37 Last Updated: 2024-08-03T06:48:36.529Z Vendors: n/a Products: IPCHDBW2XXX IPCHFW2XXX ASI7XXXX Problem Types: Replay Attacks Description: When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/1017
CVE ID: CVE-2022-30562 State: PUBLISHED Published: 2022-06-28T13:43:54 Last Updated: 2024-08-03T06:48:36.390Z Vendors: n/a Products: IPCHDBW2XXX IPCHFW2XXX ASI7XXXX Problem Types: URL Redirection to Untrusted Site ('Open Redirect') Description: If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/1017
CVE ID: CVE-2022-30563 State: PUBLISHED Published: 2022-06-28T13:44:56 Last Updated: 2024-08-03T06:48:36.397Z Vendors: n/a Products: IPCHDBW2XXX[IPCHFW2XXX[ASI7XXXX Problem Types: Replay Attacks Description: When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/1017
CVE ID: CVE-2022-30564 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:53:16.110Z Vendors: n/a Products: IPC-HX5XXX,IPC-HX7XXX,SD5A,SD22,SD59,NVR5XXX-I,NVR5XXX-I/L,NVR4XXX-I,NVR2XXX-I,XVRXXXX-I2,XVRXXXX-X Problem Types: Improper Access Control Description: Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dahuasecurity.com/support/cybersecurity/details/1147
CVE ID: CVE-2022-30570 State: PUBLISHED Published: 2022-07-19T17:50:10.149998Z Last Updated: 2024-09-16T18:18:20.062Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Data Virtualization, TIBCO Data Virtualization for AWS Marketplace Problem Types: Successful execution of this vulnerability can result in unauthorized read access to application information on the affected system. Description: The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network acc
for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.5.2 and below and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.2 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/06/tibco-security-advisory-july-19-2022-tdv-cve-2022-30570
CVE ID: CVE-2022-30571 State: PUBLISHED Published: 2022-08-02T16:50:10.613170Z Last Updated: 2024-09-16T20:07:14.375Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO iWay Service Manager Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with netw
s easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/07/tibco-security-advisory-august-2-2022-tibco-iway-sm-cve-2022-30571
CVE ID: CVE-2022-30572 State: PUBLISHED Published: 2022-08-02T16:50:15.580152Z Last Updated: 2024-09-17T02:47:18.987Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO iWay Service Manager Problem Types: Successful execution of this vulnerability can result in unauthorized read access of resources on the affected system. Description: The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability that allows a low privileged attacker with network access to read arbitrary resources on the affected system. Affected releases are TIBC
w privileged attacker with network access to read arbitrary resources on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/07/tibco-security-advisory-august-2-2022-tibco-iway-sm-cve-2022-30572
CVE ID: CVE-2022-30573 State: PUBLISHED Published: 2022-08-09T17:20:11.921396Z Last Updated: 2024-09-16T16:48:53.136Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition Problem Types: Successful exploitation of this vulnerability may result in an attacker gaining full administrative access to the affected ftlserver. Description: The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulner
eloper Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO FTL - Enterprise Edition: version 6.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/08/tibco-se
erences: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/08/tibco-security-advisory-august-9-2022-tibco-ftl-cve-2022-30573
CVE ID: CVE-2022-30574 State: PUBLISHED Published: 2022-08-09T17:20:16.285207Z Last Updated: 2024-09-16T18:49:54.765Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: TIBCO Software Inc. Products: TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition Problem Types: Successful exploitation of this vulnerability may result in an attacker gaining full administrative access to the affected ftlserver. Description: The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO F
: The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition, and TIBCO eFTL - Enterprise Edition contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to obtain user credentials to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, TIBCO FTL
Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, TIBCO FTL - Enterprise Edition: version 6.8.0, TIBCO eFTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO eFTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO eFTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO eFTL - Enterprise Edition: version 6.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/08/tibco-security-advisory-august-9-2022-tibco-ftl-cve-2022-30574
CVE ID: CVE-2022-30575 State: PUBLISHED Published: 2022-08-16T17:55:10.368153Z Last Updated: 2024-09-16T17:29:00.246Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, TIBCO Statistica Trial Problem Types: Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user. Description: The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily exploitable
- Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - Workbench: versions 14.0.0 and below, TIBCO Statistica: versions 14.0.0 and below, TIBCO Statistica - Estore Edition: versions 14.0.0 and below, and TIBCO Statistica Trial: versions 14.0.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://
ional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/08/tibco-security-advisory-august-16-2022-tibco-statistica-cve-2022-30575
CVE ID: CVE-2022-30576 State: PUBLISHED Published: 2022-08-16T17:55:23.538875Z Last Updated: 2024-09-17T00:40:59.946Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, TIBCO Statistica Trial Problem Types: Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user. Description: The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploita
- Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - Workbench: versions 14.0.0 and below, TIBCO Statistica: versions 14.0.0 and below, TIBCO Statistica - Estore Edition: versions 14.0.0 and below, and TIBCO Statistica Trial: versions 14.0.0 and below. Additional Analyst Notes: - CVE Program Container: Referenc
elow, and TIBCO Statistica Trial: versions 14.0.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/08/tibco-security-advisory-august-16-2022-tibco-statistica-cve-2022-30576
CVE ID: CVE-2022-30577 State: PUBLISHED Published: 2022-09-21T17:55:08.767Z Last Updated: 2025-05-22T18:31:58.704Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX Problem Types: Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user. Description: The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human i
Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 6.0.0 through 6.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-cve-2022-30577
CVE ID: CVE-2022-30578 State: PUBLISHED Published: 2022-09-21T17:55:09.549Z Last Updated: 2025-05-28T13:58:17.131Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX Add-ons Problem Types: Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user. Description: The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability
ccess to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-add-ons-cve-2022 - https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-sep-21-2022-ebx-add-ons-cve-2022-30578
CVE ID: CVE-2022-30579 State: PUBLISHED Published: 2022-09-20T18:55:08.406Z Last Updated: 2025-05-28T15:59:43.490Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to Spotfire Server data and the ability to cause a partial denial of service. This vulnerability could allow an attacker to access resources other than the vulnerable system. Description: The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AW
lnerable system. Description: The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/09/tibco-securi
ces: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-20-2022-tibco-spotfire-cve-2022-30579
CVE ID: CVE-2022-30580 State: PUBLISHED Published: 2022-08-09T20:18:04 Last Updated: 2024-08-03T06:56:12.971Z Vendors: Go standard library Products: os/exec Problem Types: CWE-94: Improper Control of Generation of Code ('Code Injection') Description: Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working directory named either "..com" or "..exe" by calling Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/403759 - https://go.googlesource.com/go/+/960ffa98ce73ef2c2060c84c7ac28d37a83f345e - https://go.dev/issue/52574 - ht
/cl/403759 - https://go.googlesource.com/go/+/960ffa98ce73ef2c2060c84c7ac28d37a83f345e - https://go.dev/issue/52574 - https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ - https://pkg.go.dev/vuln/GO-2022-0532
CVE ID: CVE-2022-30584 State: PUBLISHED Published: 2022-05-26T19:18:55 Last Updated: 2024-08-03T06:56:12.946Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functionality that could potentially be exploited by malicious users to compromise the affected system. 6.10 P3 (6.10.0.3) and 6.9 SP3 P4 (6.9.3.4) are also fixed releases. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/releases/tkb-p/releases - https://www.archerirm.community/t5/security-advi
erences: - https://www.archerirm.community/t5/releases/tkb-p/releases - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/677341
CVE ID: CVE-2022-30585 State: PUBLISHED Published: 2022-05-26T19:18:49 Last Updated: 2024-08-03T06:56:12.788Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) contains an Authorization Bypass Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to view sensitive information. 6.10 P3 (6.10.0.3) and 6.9 SP3 P4 (6.9.3.4) are also fixed releases. Additional Analyst Notes: - CVE Program Container: References: - https://www.archerirm.community/t5/releases/tkb-p/releases - https://www.archerirm.community/t5/securit
r: References: - https://www.archerirm.community/t5/releases/tkb-p/releases - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/677341
CVE ID: CVE-2022-30586 State: PUBLISHED Published: 2022-06-06T18:33:45 Last Updated: 2024-08-03T06:56:13.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gradle.com - https://security.gradle.com/advisory/2022-09
CVE ID: CVE-2022-30587 State: PUBLISHED Published: 2022-06-06T19:51:13 Last Updated: 2024-08-03T06:56:12.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://security.gradle.com - https://security.gradle.com/advisory/2022-10
CVE ID: CVE-2022-30591 State: PUBLISHED Published: 2022-07-06T11:19:21 Last Updated: 2024-08-03T06:56:12.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtu_discoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the vendor's position is that this behavior should not be listed as a vulnerability on the CVE List Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lucas-clemente/quic-go/blob/84e03e59760ceee37359688
yst Notes: - CVE Program Container: References: - https://github.com/lucas-clemente/quic-go/blob/84e03e59760ceee37359688871bb0688fcc4e98f/mtu_discoverer.go
CVE ID: CVE-2022-30592 State: PUBLISHED Published: 2022-05-11T22:12:10 Last Updated: 2024-08-03T06:56:13.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/litespeedtech/lsquic/releases/tag/v3.1.0 - https://github.com/litespeedtech/lsquic/commit/a74702c630e108125e71898398737baec8f02238#diff-73a138506faffe5f1efa8586346ab573c88e9dd2097774ecca5949a718a57cae
CVE ID: CVE-2022-30594 State: PUBLISHED Published: 2022-05-12T00:00:00 Last Updated: 2024-08-03T06:56:13.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2276 - https://github.com/torvalds/linux/commit/ee1fee900537b5d9560e9f937402de5ddc8412f3 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id
it/ee1fee900537b5d9560e9f937402de5ddc8412f3 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee1fee900537b5d9560e9f937402de5ddc8412f3 - http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173 - https://security.netapp.com/advisory/ntap-20220707-0001/ - http://packetstormsecurity.com/files/170362/Linux-PT_SUSPEND_SECCOMP-Permission-Bypass-Ptracer-Death-Race.html
CVE ID: CVE-2022-30595 State: PUBLISHED Published: 2022-05-25T11:46:45 Last Updated: 2024-08-03T06:56:12.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python-pillow/Pillow/blob/main/src/libImaging/TgaRleDecode.c - https://pillow.readthedocs.io/en/stable/releasenotes/9.1.1.html