Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/7c7f0a3c6cb30939d9039043c0b86ea8 - https://github.com/RamonSilva20/mapos/issues/2010 - https://github.com/RamonSilva20/mapos/pull/2015#pullrequestreview-1271395780
CVE ID: CVE-2022-48328 State: PUBLISHED Published: 2023-02-20T00:00:00 Last Updated: 2024-11-27T14:57:55.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/commit/1edbc2569989f844799261a5f90edfa433d7dbcc - https://github.com/MISP/MISP/commit/206f540f0275af2dd2a86275abc199df41e72a21 - https://github.com/MISP/MISP/compare/v2.4.166...v2.4.167 - https://zigrin.com/cakephp-application-cybersecurity-research-hiding-in-plain-sight-the-hidden
are/v2.4.166...v2.4.167 - https://zigrin.com/cakephp-application-cybersecurity-research-hiding-in-plain-sight-the-hidden-danger-of-sql-injection-in-input-field-names/ - https://zigrin.com/advisories/misp-sql-injection-in-crud-component/
CVE ID: CVE-2022-48329 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-18T15:32:14.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/commit/afbe08d256d609eee5195c5b0003cfb723ae7af1 - https://github.com/MISP/MISP/commit/a73c1c461bc6f8a048eae92b5e99823afd892d1e - https://github.com/MISP/MISP/compare/v2.4.165...v2.4.166
CVE ID: CVE-2022-48330 State: PUBLISHED Published: 2023-06-16T12:51:41.699Z Last Updated: 2024-12-17T16:29:34.318Z Vendors: Huawei Products: FLMG-10 Problem Types: Out-of-Bounds Write Description: A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause buffer overflow. Affected product versions include:FLMG-10 versions FLMG-10 10.0.1.0(H100SP22C00). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-oobwviatp-89e403d4-en
CVE ID: CVE-2022-48331 State: PUBLISHED Published: 2023-06-26T00:00:00.000Z Last Updated: 2025-02-13T16:34:03.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberintel.es/cve/CVE-2022-48331_Buffer_Overflow_in_Widevine_drm_save_keys_0x69b0/
CVE ID: CVE-2022-48332 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-12-05T15:26:23.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberintel.es/cve/CVE-2022-48332_Buffer_Overflow_in_Widevine_drm_save_keys_0x6a18/
CVE ID: CVE-2022-48333 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-12-04T16:58:23.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberintel.es/cve/CVE-2022-48333_Buffer_Overflow_in_Widevine_drm_verify_keys_0x730c/
CVE ID: CVE-2022-48334 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-11-27T19:44:31.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberintel.es/cve/CVE-2022-48334_Buffer_Overflow_in_Widevine_drm_verify_keys_0x7370/
CVE ID: CVE-2022-48335 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-12-04T16:55:53.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberintel.es/cve/CVE-2022-48335_Buffer_Overflow_in_Widevine_PRDiagVerifyProvisioning_0x5f90/
CVE ID: CVE-2022-48336 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-12-04T17:00:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberintel.es/cve/CVE-2022-48336_Buffer_Overflow_in_Widevine_PRDiagParseAndStoreData_0x5cc8/
CVE ID: CVE-2022-48337 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-18T15:30:23.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u *" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gn
input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=01a4035c869b91c153af9a9132c87adb7669ea1c - https://www.debian.org/security/2023/dsa-5360 - https://lists.debian.org/debian-lts-announce/2023/05/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6HDBUQNAH2WL4MHWCTUZLN7NGF7CHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/
CVE ID: CVE-2022-48338 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-18T15:21:22.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may cause commands to be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
may cause commands to be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=9a3b08061feea14d6f37685ca1ab8801758bfd1c - https://www.debian.org/security/2023/dsa-5360 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6HDBUQNAH2WL4MHWCTUZLN7NGF7CHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/
CVE ID: CVE-2022-48339 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-18T15:19:50.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=1b4dc4691c1f87fc970fbe568b43869a15ad0d4c - https://www.d
ences: - https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=1b4dc4691c1f87fc970fbe568b43869a15ad0d4c - https://www.debian.org/security/2023/dsa-5360 - https://lists.debian.org/debian-lts-announce/2023/05/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6HDBUQNAH2WL4MHWCTUZLN7NGF7CHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/
CVE ID: CVE-2022-48340 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-14T18:25:00.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gluster/glusterfs/issues/3732 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE6K2DXP4QZVKP32Z7BSYDSRBL4H7JSE/
CVE ID: CVE-2022-48341 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:45:04.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://thingsboard.io/docs/reference/releases/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/238543
CVE ID: CVE-2022-48342 State: PUBLISHED Published: 2023-02-23T15:44:23.524Z Last Updated: 2025-03-12T13:57:33.235Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-1188 Description: In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48343 State: PUBLISHED Published: 2023-02-23T15:44:23.994Z Last Updated: 2025-03-11T18:13:25.085Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48344 State: PUBLISHED Published: 2023-02-23T15:44:24.533Z Last Updated: 2025-03-11T19:45:28.533Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48345 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T15:36:20.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/braintree/sanitize-url/commit/d4bdc89f1743fe3cdb7c3f24b06e4c875f349b0c - https://github.com/braintree/sanitize-url/compare/v6.0.1...v6.0.2
CVE ID: CVE-2022-48346 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:27:55.968Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Logic bypass vulnerability Description: The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48347 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:26:13.680Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification vulnerability Description: The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48348 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T19:10:14.845Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unauthorized data read vulnerability Description: The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48349 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T19:08:56.212Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Spoofing vulnerability Description: The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48350 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T17:48:00.999Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unauthorized file access vulnerability Description: The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48351 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T17:45:11.969Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defect Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48352 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T15:05:24.094Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Data initialization vulnerability Description: Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48353 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T14:58:29.921Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defect Description: Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48354 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-20T15:31:38.339Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap out-of-bounds write vulnerability Description: The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48355 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:23:27.020Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap out-of-bounds read vulnerability Description: The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48356 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:22:03.893Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Input parameter verification vulnerability Description: The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48357 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:56:57.607Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Double fetch vulnerability Description: Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48358 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:53:19.896Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Redirection vulnerability Description: The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48359 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:51:54.880Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Arbitrary disk modification vulnerability Description: The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48360 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:22:24.765Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper permission control vulnerability Description: The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48361 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:13:58.392Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Path traversal vulnerability Description: The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48362 State: PUBLISHED Published: 2023-02-25T00:00:00.000Z Last Updated: 2025-03-11T20:28:51.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop
eferences: - https://srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop-central.html - https://www.manageengine.com/products/desktop-central/cve-2022-48362.html
CVE ID: CVE-2022-48363 State: PUBLISHED Published: 2023-02-26T00:00:00.000Z Last Updated: 2025-03-11T19:54:43.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gerrit.automotivelinux.org/gerrit/q/project:src%252Flibqtappfw+status:open - https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28484 - htt
rrit/q/project:src%252Flibqtappfw+status:open - https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28484 - https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28485 - https://jira.automotivelinux.org/browse/SPEC-4661