Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3815 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:22.240Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decrypt. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212681 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
12681 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/792 - https://github.com/axiomatic-systems/Bento4/files/9727048/POC_mp4decrypt_34393864.zip - https://vuldb.com/?id.212681
CVE ID: CVE-2022-3816 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:15.702Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212682 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/792 - https://github.com/axiomatic-systems/Bento4/files/9727059/POC_mp4decrypt_654515280.zip - https://vuldb.com/?id.212682
CVE ID: CVE-2022-3817 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:09.687Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
entifier of this vulnerability is VDB-212683. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/792 - https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zip - https://vuldb.com/?id.212683
CVE ID: CVE-2022-3818 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T19:21:26.144Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/3
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/358170 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3818.json
CVE ID: CVE-2022-3819 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T19:20:42.132Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a malicious users to set emojis on internal notes they don't have access to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/365847 - https://gitlab.com/gitlab-org/cves/-/blob/master
t: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/365847 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3819.json
CVE ID: CVE-2022-3820 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:02:18.005Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
lid Deploy Token to misuse it from any location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/378638 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3820.json
CVE ID: CVE-2022-3821 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-02T18:12:20.028Z Vendors: n/a Products: systemd Problem Types: CWE-193 Description: An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2139327 - https://github.com/systemd/systemd/issues/23928 - https://github.com/systemd/systemd/pull/23933 - https://github.com/systemd/system
hub.com/systemd/systemd/issues/23928 - https://github.com/systemd/systemd/pull/23933 - https://github.com/systemd/systemd/commit/9102c625a673a3246d7e73d8737f3494446bad4e - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVBQC2VLSDVQAPJTEMTREXDL4HYLXG2P/ - https://security.gentoo.org/glsa/202305-15 - https://lists.debian.org/debian-lts-announce/2023/06/msg00036.html
CVE ID: CVE-2022-3822 State: PUBLISHED Published: 2022-11-28T13:47:20.788Z Last Updated: 2025-04-25T17:22:24.781Z Vendors: Unknown Products: Donations via PayPal Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/48ec2e4a-0190-4f36-afd1-d5799ba28c13
CVE ID: CVE-2022-3823 State: PUBLISHED Published: 2022-11-28T13:47:24.746Z Last Updated: 2025-04-25T15:07:38.224Z Vendors: Unknown Products: Beautiful Cookie Consent Banner Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a072b091-5e5f-4e88-bd3d-2f4582e6564e
CVE ID: CVE-2022-3824 State: PUBLISHED Published: 2022-11-28T13:47:17.819Z Last Updated: 2025-04-28T15:53:48.551Z Vendors: Unknown Products: WP Admin UI Customize Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3ca6d724-cd79-4e07-b8d0-a8c1688abf16
CVE ID: CVE-2022-3825 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-04-15T13:17:55.873Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Huaxia Products: ERP Problem Types: CWE-707 Description: A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212792. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
entifier of this vulnerability is VDB-212792. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.md - https://vuldb.com/?id.212792
CVE ID: CVE-2022-3826 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-04-15T13:17:49.209Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Huaxia Products: ERP Problem Types: CWE-266 Description: A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability. Additional Analyst Notes: - C
the public and may be used. The identifier VDB-212793 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md - https://vuldb.com/?id.212793
CVE ID: CVE-2022-3827 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-04-15T13:17:42.540Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: centreon Problem Types: CWE-707 Description: A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier as
28f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/pull/11869 - https://github.com/centreon/centreon/commit/293b10628f7d9f83c6c82c78cf637cbe9b907369 - https://vuldb.com/?id.212794
CVE ID: CVE-2022-3828 State: PUBLISHED Published: 2022-11-28T13:47:15.217Z Last Updated: 2025-04-25T15:14:54.244Z Vendors: Unknown Products: Video Thumbnails Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4188ed01-b64b-4aba-a215-e8dc5b308486
CVE ID: CVE-2022-3829 State: PUBLISHED Published: 2024-01-16T15:53:24.250Z Last Updated: 2025-06-20T16:58:42.073Z Vendors: Unknown Products: Font Awesome 4 Menus Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/684941ad-541f-43f9-a7ef-d26c0f4e6e21/
CVE ID: CVE-2022-3830 State: PUBLISHED Published: 2022-12-05T16:50:33.163Z Last Updated: 2025-04-24T13:22:41.136Z Vendors: Unknown Products: WP Page Builder Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/98b2321d-fb66-4e02-9906-63af7b08d647
CVE ID: CVE-2022-3831 State: PUBLISHED Published: 2022-11-28T13:47:11.132Z Last Updated: 2025-04-25T15:01:19.589Z Vendors: Unknown Products: reCAPTCHA Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The reCAPTCHA WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fa23bd68-69f3-440e-902c-a3bb6c8a40b8
CVE ID: CVE-2022-3832 State: PUBLISHED Published: 2022-12-19T13:41:39.280Z Last Updated: 2025-04-17T14:18:54.903Z Vendors: Unknown Products: External Media Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/458ec2fd-4175-4cb4-b334-b63f6e643b92
CVE ID: CVE-2022-3833 State: PUBLISHED Published: 2022-11-28T13:47:18.875Z Last Updated: 2025-04-25T17:23:54.684Z Vendors: Unknown Products: Fancier Author Box by ThematoSoup Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Fancier Author Box by ThematoSoup WordPress plugin through 1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/41096d40-83d4-40b4-9632-afef51e8b
ram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/41096d40-83d4-40b4-9632-afef51e8b00e
CVE ID: CVE-2022-3834 State: PUBLISHED Published: 2022-11-28T13:47:21.589Z Last Updated: 2025-04-25T19:56:03.629Z Vendors: Unknown Products: Google Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1dbe0f24-b757-49fe-846f-7c259df9f361
CVE ID: CVE-2022-3835 State: PUBLISHED Published: 2022-12-26T12:28:18.345Z Last Updated: 2025-04-11T23:12:28.122Z Vendors: Unknown Products: Kwayy HTML Sitemap Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Kwayy HTML Sitemap WordPress plugin before 4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/514ffd28-f2c2-4c95-87b5-d05ce0746f89
CVE ID: CVE-2022-3836 State: PUBLISHED Published: 2024-01-16T15:50:49.665Z Last Updated: 2025-06-11T17:13:32.562Z Vendors: Unknown Products: Seed Social Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/64e144fb-aa9f-4cfe-9c44-a4e1fa2e8dd5/
CVE ID: CVE-2022-3837 State: PUBLISHED Published: 2022-12-05T16:50:31.492Z Last Updated: 2025-04-24T13:30:26.153Z Vendors: Unknown Products: Uji Countdown Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8554ca79-5a4b-49df-a75f-5faa4136bb8c
CVE ID: CVE-2022-3838 State: PUBLISHED Published: 2022-12-05T16:50:38.242Z Last Updated: 2025-04-23T15:03:37.631Z Vendors: Unknown Products: WPUpper Share Buttons Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2dc82bd7-651f-4af0-ad2a-c20a38eea0d0
CVE ID: CVE-2022-3839 State: PUBLISHED Published: 2022-11-28T13:47:23.185Z Last Updated: 2025-04-25T19:58:54.913Z Vendors: Unknown Products: Analytics for WP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Analytics for WP WordPress plugin through 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/809cea63-9dbe-495c-8388-e294299d3e90
CVE ID: CVE-2022-3840 State: PUBLISHED Published: 2022-12-26T12:28:09.060Z Last Updated: 2025-04-14T13:36:20.832Z Vendors: Unknown Products: Login for Google Apps Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/71414436-ef54-4ce6-94e2-62e68d1a371d
CVE ID: CVE-2022-3841 State: PUBLISHED Published: 2023-01-11T20:38:19.315Z Last Updated: 2025-04-09T13:39:27.405Z Vendors: redhat.com Products: RHACM Problem Types: n/a Description: RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-3841
CVE ID: CVE-2022-3842 State: PUBLISHED Published: 2023-01-02T00:00:00 Last Updated: 2024-10-22T15:36:25.707Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_14.html - https://crbug.com/1352445
CVE ID: CVE-2022-3843 State: PUBLISHED Published: 2023-02-16T14:58:44.343Z Last Updated: 2025-03-18T14:41:11.980Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: WAGO Products: Unmanaged Switch 852-111/000-001 Problem Types: CWE-912 Description: In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-055/
CVE ID: CVE-2022-3844 State: PUBLISHED Published: 2022-11-02T00:00:00 Last Updated: 2024-08-03T01:20:59.104Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Webmin Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issue. The patch is identified as d3d33af3c0c3fd3a889c84e287a038b7a457d811. It is recommended to upgrade the affected component. VDB-212862 is the identifier assigned to this vulnerab
8b7a457d811. It is recommended to upgrade the affected component. VDB-212862 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.212862 - https://vuldb.com/?ctiid.212862 - https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811 - https://github.com/webmin/webmin/releases/tag/2.003