Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2207 State: PUBLISHED Published: 2022-06-27T00:00:00 Last Updated: 2024-08-03T00:32:08.718Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9 - https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/l
CVE ID: CVE-2022-2208 State: PUBLISHED Published: 2022-06-27T00:00:00 Last Updated: 2024-08-03T00:32:08.726Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/7bfe3d5b-568f-4c34-908f-a39909638cc1 - https://github.com/vim/vim/commit/cd38bb4d83c942c4bad596835c6766cbf32e5195 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archive
e-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2209 State: REJECTED Published: 2022-07-22T10:15:15 Last Updated: 2022-07-25T11:10:08 Description: No description available.
CVE ID: CVE-2022-2210 State: PUBLISHED Published: 2022-06-27T00:00:00 Last Updated: 2024-08-03T00:32:08.749Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-787 Description: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/020845f8-f047-4072-af0f-3726fe1aea25 - https://github.com/vim/vim/commit/c101abff4c6756db4f5e740fde289decb9452efa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/list/pac
%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2211 State: PUBLISHED Published: 2022-07-12T20:33:33 Last Updated: 2024-08-03T00:32:08.724Z Vendors: n/a Products: libguestfs Problem Types: Buffer Overflow Description: A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2022-2211
CVE ID: CVE-2022-2212 State: PUBLISHED Published: 2022-06-27T06:45:24.000Z Last Updated: 2025-04-15T14:13:12.465Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Library Management System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/File_Upload/POC.md - https://vuldb.com/?id.202758
CVE ID: CVE-2022-2213 State: PUBLISHED Published: 2022-06-27T06:45:28.000Z Last Updated: 2025-04-15T14:13:03.254Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Library Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_admin_details.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CV
k can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/Cross%20Site%20Scripting%28Stored%29/POC.md - https://vuldb.com/?id.202759
CVE ID: CVE-2022-2214 State: PUBLISHED Published: 2022-06-27T06:45:30.000Z Last Updated: 2025-04-15T14:12:51.898Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Library Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may
- PbtB leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/Sql%20Injection/POC.md - https://vuldb.com/?id.202760 - https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-2.md
CVE ID: CVE-2022-2215 State: PUBLISHED Published: 2022-08-01T12:50:18 Last Updated: 2024-08-03T00:32:09.421Z Vendors: Unknown Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-79 Description: The GiveWP WordPress plugin before 2.21.3 does not properly sanitise and escape the currency settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/daa9b6c1-1ee1-434c-9f88-fd273b7e20bb
CVE ID: CVE-2022-2216 State: PUBLISHED Published: 2022-06-27T12:10:18 Last Updated: 2024-08-03T00:32:08.627Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: ionicabizau Products: ionicabizau/parse-url Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3 - https://huntr.dev/bounties/505a3d39-2723-4a06-b1f7-9b2d133c92e1
CVE ID: CVE-2022-2217 State: PUBLISHED Published: 2022-06-27T10:15:24 Last Updated: 2024-08-03T00:32:08.663Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ionicabizau Products: ionicabizau/parse-url Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4e046c63-b1ca-4bcc-b418-29796918a71b - https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
CVE ID: CVE-2022-2218 State: PUBLISHED Published: 2022-06-27T12:10:09 Last Updated: 2024-08-03T00:32:09.411Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ionicabizau Products: ionicabizau/parse-url Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3 - https://huntr.dev/bounties/024912d3-f103-4daf-a1d0-567f4d9f2bf5
CVE ID: CVE-2022-2219 State: PUBLISHED Published: 2022-07-25T12:47:27 Last Updated: 2024-08-03T00:32:08.902Z Vendors: Unknown Products: Unyson Problem Types: CWE-79 Description: The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1240797c-7f45-4c36-83f0-501c544ce76a
CVE ID: CVE-2022-2220 State: REJECTED Published: 2022-08-31T15:32:59.279Z Last Updated: 2025-02-13T15:46:20.015Z Description: No description available.
CVE ID: CVE-2022-2221 State: PUBLISHED Published: 2022-06-27T18:38:57 Last Updated: 2024-08-03T00:32:08.840Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: CWE-200 Description: Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8. Additional Analyst Notes: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2022-0004
CVE ID: CVE-2022-2222 State: PUBLISHED Published: 2022-07-17T10:37:28 Last Updated: 2024-08-03T00:32:08.748Z Vendors: Unknown Products: Download Monitor Problem Types: CWE-552 Description: The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dd48624a-1781-419c-a3c4-1e3eaf5e2c1b
CVE ID: CVE-2022-2223 State: PUBLISHED Published: 2022-07-18T16:12:59.000Z Last Updated: 2025-05-05T16:20:16.151Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: ghozylab Products: Image Slider Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewic_duplicate_slider. This make it possible for unauthenticated attackers to duplicate existing posts or pages granted they can trick a site administrator into performing an action such as clicking on a l
te existing posts or pages granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6356e226-a449-4cd0-be60-2a1c9c70aa59?source=cve - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2223 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2749352%40image-slider-widget&new=2749352%40image-slider-widget&sfp_email=&sfph_mail=
CVE ID: CVE-2022-2224 State: PUBLISHED Published: 2022-07-18T16:18:58 Last Updated: 2024-08-03T00:32:08.673Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: ghozylab Products: Gallery for Social Photo Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.0.27 due to failure to properly check for the existence of a nonce in the function gifeed_duplicate_feed. This make it possible for unauthenticated attackers to duplicate existing posts or pages granted they can trick a site administrator into performing an action suc
attackers to duplicate existing posts or pages granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c6683edc-8c77-446c-bd7e-e97b8c5d0c57?source=cve - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2224 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2749351%40feed-instagram-lite&new=2749351%40feed-instagram-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2022-2225 State: PUBLISHED Published: 2022-07-26T11:35:10 Last Updated: 2024-08-03T00:32:09.058Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H) Vendors: Cloudflare Products: WARP Problem Types: CWE-284 Description: By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as 'Lock WARP switch'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-cg88-vx48-976c
CVE ID: CVE-2022-2226 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T15:01:41.069Z Vendors: Mozilla Products: Thunderbird Problem Types: An email with a mismatching OpenPGP signature date was accepted as valid Description: An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the
ttack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature's date roughly matches the displayed date of the email. This vulnerability affects Thunderbird < 102 and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1775441
CVE ID: CVE-2022-2227 State: PUBLISHED Published: 2022-07-01T15:53:58 Last Updated: 2024-08-03T00:32:09.371Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a previous maintainer of a project with a specific runner to access job and project meta data under certain conditions Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/300842 - https://hackerone.com/reports
VE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/300842 - https://hackerone.com/reports/1092199 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2227.json
CVE ID: CVE-2022-2228 State: PUBLISHED Published: 2022-07-01T16:08:11 Last Updated: 2024-08-03T00:32:09.424Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker with the appropriate access tokens to obtain CI variables in a group with using IP-based access restrictions even if the GitLab Runner is calling from outside the allowed IP range Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/
ide the allowed IP range Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/security/gitlab/-/issues/682 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2228.json
CVE ID: CVE-2022-2229 State: PUBLISHED Published: 2022-07-01T16:30:45 Last Updated: 2024-08-03T00:32:09.479Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/355738 - https://hac
Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/355738 - https://hackerone.com/reports/1511133 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2229.json
CVE ID: CVE-2022-2230 State: PUBLISHED Published: 2022-07-01T15:55:13 Last Updated: 2024-08-03T00:32:09.532Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitl
in GitLab on a victim's behalf. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/364164 - https://hackerone.com/reports/1588732 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2230.json
CVE ID: CVE-2022-2231 State: PUBLISHED Published: 2022-06-28T00:00:00 Last Updated: 2024-08-03T00:32:09.511Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8dae6ab4-7a7a-4716-a65c-9b090fa057b5 - https://github.com/vim/vim/commit/79481367a457951aabd9501b510fd7e3eb29c3d8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2232 State: PUBLISHED Published: 2024-11-14T14:51:14.594Z Last Updated: 2024-11-14T17:06:46.384Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Single Sign-On 7 Problem Types: CWE-20 Description: A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0094 - https://access.redhat.com/errata/RHSA-2024:0095 - https://access.redhat.com/errata/RHSA-2024:0096 - https://access.redhat.com/security/
redhat.com/errata/RHSA-2024:0095 - https://access.redhat.com/errata/RHSA-2024:0096 - https://access.redhat.com/security/cve/CVE-2022-2232 - https://bugzilla.redhat.com/show_bug.cgi?id=2096994
CVE ID: CVE-2022-2233 State: PUBLISHED Published: 2022-09-06T17:18:55.000Z Last Updated: 2025-05-05T16:20:05.667Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: jkriddle Products: Banner Cycler Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabc_admin_slides_postback() function found in the ~/admin/admin.php file. This makes it possible for unauthenticated attackers to inject malicious web scripts into the page, granted they can trick a site’s administrator into performin
ed attackers to inject malicious web scripts into the page, granted they can trick a site’s administrator into performing an action such as clicking on a link Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6cc1d7f2-053d-42d4-afb7-6fb69fd71b91?source=cve - https://plugins.trac.wordpress.org/browser/banner-cycler/trunk/admin/admin.php#L131 - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2233
CVE ID: CVE-2022-2234 State: PUBLISHED Published: 2022-08-24T15:15:48.755Z Last Updated: 2025-04-16T17:50:14.167Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: mySCADA Technologies Products: mySCADA myPRO Problem Types: CWE-77 Description: An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-03
CVE ID: CVE-2022-2235 State: PUBLISHED Published: 2022-07-01T15:51:14 Last Updated: 2024-08-03T00:32:09.564Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to perform cross-site scripting when a victim clicks on a maliciously crafted ZenTao link Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-or
iously crafted ZenTao link Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/360540 - https://hackerone.com/reports/1542510 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2235.json
CVE ID: CVE-2022-2237 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T19:15:29.345Z Vendors: n/a Products: Keycloak Problem Types: CWE-601 Description: A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2097007