Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1262 State: PUBLISHED Published: 2022-04-11T19:38:13 Last Updated: 2024-08-02T23:55:24.531Z Vendors: n/a Products: D-Link Routers Problem Types: Command Injection Description: A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2022-09
CVE ID: CVE-2022-1263 State: PUBLISHED Published: 2022-08-31T15:33:00 Last Updated: 2024-08-02T23:55:24.614Z Vendors: n/a Products: Kernel:KVM Problem Types: CWE-476 Description: A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2072698 - https://www.openwall.com/lists/oss-security/2022/04/07/1 - https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa
all.com/lists/oss-security/2022/04/07/1 - https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4 - https://access.redhat.com/security/cve/CVE-2022-1263
CVE ID: CVE-2022-1264 State: PUBLISHED Published: 2022-07-20T15:34:59.675Z Last Updated: 2025-04-16T16:14:44.951Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Inductive Automation Products: Ignition Problem Types: CWE-22 Description: The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-03
CVE ID: CVE-2022-1265 State: PUBLISHED Published: 2022-05-16T14:30:43 Last Updated: 2024-08-02T23:55:24.622Z Vendors: Unknown Products: BulletProof Security Problem Types: CWE-79 Description: The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9b66819d-8479-4c0b-b206-7f7ff769f758
CVE ID: CVE-2022-1266 State: PUBLISHED Published: 2022-06-20T10:25:48 Last Updated: 2024-08-02T23:55:24.438Z Vendors: Unknown Products: Post Grid, Slider & Carousel Ultimate Problem Types: CWE-79 Description: The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7800d583-fcfc-4360-9dc3-af3f73e12ab4
CVE ID: CVE-2022-1267 State: PUBLISHED Published: 2022-05-16T14:30:45 Last Updated: 2024-08-02T23:55:24.555Z Vendors: Unknown Products: BMI BMR Calculator Problem Types: CWE-79 Description: The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ed2971c2-b99c-4320-ac46-bea5a0a493ed
CVE ID: CVE-2022-1268 State: PUBLISHED Published: 2022-05-23T07:15:31 Last Updated: 2024-08-02T23:55:24.561Z Vendors: Unknown Products: Donate Extra Problem Types: CWE-79 Description: The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6d596afb-cac3-4ef2-9742-235c068d1006
CVE ID: CVE-2022-1269 State: PUBLISHED Published: 2022-05-02T16:05:53 Last Updated: 2024-08-02T23:55:24.584Z Vendors: Unknown Products: Fast Flow Problem Types: CWE-79 Description: The Fast Flow WordPress plugin before 1.2.12 does not sanitise and escape the page parameter before outputting back in an attribute in an admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/65ff0e71-0fcd-4357-9b00-143cb18901bf
CVE ID: CVE-2022-1270 State: PUBLISHED Published: 2022-09-28T00:00:00.000Z Last Updated: 2025-05-21T14:59:12.296Z Vendors: n/a Products: GraphicsMagick Problem Types: CWE-119 Description: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/graphicsmagick/bugs/664/ - https://security.gentoo.org/glsa/202209-19 - https://lists.debian.org/debian-lts-announce/2022/11/msg00028.html - https://www.debian.org/security/2022/dsa-5288
CVE ID: CVE-2022-1271 State: PUBLISHED Published: 2022-08-31T15:33:00.000Z Last Updated: 2025-06-09T14:56:35.875Z Vendors: n/a Products: gzip, xz-utils Problem Types: CWE-179 Description: An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep
e names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2073310 - https://www.openwall.com/lists/oss-security/2022/04/07/8 - https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html - https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch - https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6 - https://security-tracker.debian.org/tracker/CVE-2022-1271 - https://access.redhat.com/security/cve/CVE-2022-1271 - https://security.gen
y-tracker.debian.org/tracker/CVE-2022-1271 - https://access.redhat.com/security/cve/CVE-2022-1271 - https://security.gentoo.org/glsa/202209-01 - https://security.netapp.com/advisory/ntap-20220930-0006/
CVE ID: CVE-2022-1273 State: PUBLISHED Published: 2022-05-02T16:05:55 Last Updated: 2024-08-02T23:55:24.599Z Vendors: Unknown Products: Import WP – Import and Export WordPress data to XML or CSV files Problem Types: CWE-434 Description: The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files (such as PHP), leading to RCE Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ad99b9ba-5f24-4682-a787-00f0e8e32603
CVE ID: CVE-2022-1274 State: PUBLISHED Published: 2023-03-29T00:00:00 Last Updated: 2024-08-02T23:55:24.548Z Vendors: n/a Products: keycloak Problem Types: CWE-80 Description: A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2073157 - https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725 - https://herolab.usd.de/security-advisories/usd-2021-0033/
CVE ID: CVE-2022-1275 State: PUBLISHED Published: 2022-05-30T08:35:40 Last Updated: 2024-08-02T23:55:24.533Z Vendors: Unknown Products: BannerMan Problem Types: CWE-79 Description: The BannerMan WordPress plugin through 0.2.4 does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in multisite) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bc2e5be3-cd2b-4ee9-8d7a-cabce46b7092
CVE ID: CVE-2022-1276 State: PUBLISHED Published: 2022-04-10T09:35:10 Last Updated: 2024-08-02T23:55:24.623Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mruby Products: mruby/mruby Problem Types: CWE-125 Description: Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6ea041d1-e2aa-472c-bf3e-da5fa8726c25 - https://github.com/mruby/mruby/commit/c8c083cb750606b2da81582cd8e43b442bb143e6
CVE ID: CVE-2022-1277 State: PUBLISHED Published: 2022-07-29T12:45:19.527212Z Last Updated: 2024-09-16T23:51:10.629Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Inavitas Products: Inavitas Solar Log Problem Types: CWE-89 Description: Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-22-0514
CVE ID: CVE-2022-1278 State: PUBLISHED Published: 2022-09-13T13:38:02 Last Updated: 2024-08-02T23:55:24.610Z Vendors: n/a Products: WildFly Problem Types: CWE-1188 Description: A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2073401
CVE ID: CVE-2022-1279 State: PUBLISHED Published: 2022-04-14T07:40:09 Last Updated: 2024-08-02T23:55:24.529Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ebics-java Products: ebics-java-client Problem Types: CWE-325 Description: A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ebics-java/ebics-java-client/releases/tag/1.2
CVE ID: CVE-2022-1280 State: PUBLISHED Published: 2022-04-13T17:05:51 Last Updated: 2024-08-02T23:55:24.553Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2071022 - https://www.openwall.com/lists/oss-security/2022/04/12/3
CVE ID: CVE-2022-1281 State: PUBLISHED Published: 2022-05-02T16:05:57 Last Updated: 2024-08-02T23:55:24.531Z Vendors: Unknown Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-89 Description: The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2b4866f2-f511-41c6-8135-cf1e0263d8de - https://plugins.trac.wordpress.org/changeset/2706797/photo-gallery/trunk/frontend/models/BWGModelGalleryBox.php?old=2587758&old_path=photo-gallery%2Ftrun
g/changeset/2706797/photo-gallery/trunk/frontend/models/BWGModelGalleryBox.php?old=2587758&old_path=photo-gallery%2Ftrunk%2Ffrontend%2Fmodels%2FBWGModelGalleryBox.php
CVE ID: CVE-2022-1282 State: PUBLISHED Published: 2022-05-02T16:05:58 Last Updated: 2024-08-02T23:55:24.617Z Vendors: Unknown Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-79 Description: The Photo Gallery by 10Web WordPress plugin before 1.6.3 does not properly sanitize the $_GET['image_url'] variable, which is reflected back to the users when executing the editimage_bwg AJAX action. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/37a58f4e-d2bc-4825-8e1b-4aaf0a1cf1b6 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2706798%40photo-gallery&old=2694928%40photo-gallery&sfp_
rac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2706798%40photo-gallery&old=2694928%40photo-gallery&sfp_email=&sfph_mail=
CVE ID: CVE-2022-1283 State: PUBLISHED Published: 2022-04-08T17:55:10 Last Updated: 2024-08-02T23:55:24.530Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-476 Description: NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bfeb8fb8-644d-4587-80d4-cb704c404013 - https://github.com/radareorg/radare2/commit/18d1d064bf599a255d55f09fca3104776fc34a67
CVE ID: CVE-2022-1284 State: PUBLISHED Published: 2022-04-08T18:45:14 Last Updated: 2024-08-02T23:55:24.602Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-416 Description: heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e98ad92c-3a64-48fb-84d4-d13afdbcbdd7 - https://github.com/radareorg/radare2/commit/64a82e284dddabaeb549228380103b57dead32a6
CVE ID: CVE-2022-1285 State: PUBLISHED Published: 2022-06-01T05:55:10 Last Updated: 2024-08-02T23:55:24.665Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: gogs Products: gogs/gogs Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/da1fbd6e-7a02-458e-9c2e-6d226c47046d - https://github.com/gogs/gogs/commit/7885f454a4946c4bbec1b4f8c603b5eea7429c7f
CVE ID: CVE-2022-1286 State: PUBLISHED Published: 2022-04-10T10:40:09 Last Updated: 2024-08-02T23:55:24.606Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: mruby Products: mruby/mruby Problem Types: CWE-122 Description: heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f918376e-b488-4113-963d-ffe8716e4189 - https://github.com/mruby/mruby/commit/b1d0296a937fe278239bdfac840a3fd0e93b3ee9
CVE ID: CVE-2022-1287 State: PUBLISHED Published: 2022-04-09T20:10:12.000Z Last Updated: 2025-04-15T14:41:56.410Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: unspecified Products: School Club Application System Problem Types: CWE-99 Description: A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not require authentication. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Progra
ire authentication. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.196750
CVE ID: CVE-2022-1288 State: PUBLISHED Published: 2022-04-09T20:10:13.000Z Last Updated: 2025-04-15T14:41:41.768Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: School Club Application System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a reflected cross site scripting. The attack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the p
ttack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.196751
CVE ID: CVE-2022-1289 State: PUBLISHED Published: 2022-04-10T15:15:15.000Z Last Updated: 2025-04-15T14:41:32.876Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: tildearrow Products: Furnace Problem Types: CWE-404 Description: A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tildearrow/furn
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655 - https://github.com/tildearrow/furnace/commit/0eb02422d5161767e9983bdaa5c429762d3477ce - https://vuldb.com/?id.196755
CVE ID: CVE-2022-1290 State: PUBLISHED Published: 2022-04-10T15:50:09 Last Updated: 2024-08-02T23:55:24.554Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-79 Description: Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/da6d03e6-053f-43b6-99a7-78c2e386e3ed - https://github.com/polonel/trudesk/commit/4f48b3bb86ba66a008580
untr.dev/bounties/da6d03e6-053f-43b6-99a7-78c2e386e3ed - https://github.com/polonel/trudesk/commit/4f48b3bb86ba66a0085803591065bb6437e864ec
CVE ID: CVE-2022-1291 State: PUBLISHED Published: 2022-04-10T19:15:17 Last Updated: 2024-08-02T23:55:24.657Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: hhurz Products: hhurz/tableexport.jquery.plugin Problem Types: CWE-79 Description: XSS vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. Transmitting cookies to third-party servers. Sending data from secure sessions to third-party servers Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/49a14371-6058-47dd-9801-ec38a7459fc5 - https://github.com/hhurz/tableexport.jquery.plugin/commit/dcbaee23cf
dev/bounties/49a14371-6058-47dd-9801-ec38a7459fc5 - https://github.com/hhurz/tableexport.jquery.plugin/commit/dcbaee23cf98328397a153e71556f75202988ec9
CVE ID: CVE-2022-1292 State: PUBLISHED Published: 2022-05-03T15:15:19.758Z Last Updated: 2025-08-13T14:06:18.130Z Vendors: OpenSSL Products: OpenSSL Problem Types: Command injection Description: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affecte
OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20220503.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb - https://lists.debian.org/debian-lts-announce/20
penssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb - https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html - https://www.debian.org/security/2022/dsa-5139 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220602-0009/ - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 - https://security.netapp.com/advisory/ntap-20220729-0004/ - htt
psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 - https://security.netapp.com/advisory/ntap-20220729-0004/ - https://security.gentoo.org/glsa/202210-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
CVE ID: CVE-2022-1293 State: PUBLISHED Published: 2022-08-02T15:24:27.869103Z Last Updated: 2024-09-16T23:46:35.111Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Thales Products: Citadel Web Client, Citadel Macosx Desktop Client, Citadel Windows Desktop Client Problem Types: CWE-80 Description: The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions. Additional Analyst Notes: - CVE Program Container: References: - https://www.ercom.com/security-updates
CVE ID: CVE-2022-1294 State: PUBLISHED Published: 2022-05-30T08:35:41 Last Updated: 2024-08-02T23:55:24.540Z Vendors: Unknown Products: IMDB Info Box Problem Types: CWE-79 Description: The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/205a24b8-6d14-4458-aecd-79748e1324c7
CVE ID: CVE-2022-1295 State: PUBLISHED Published: 2022-04-11T11:20:13 Last Updated: 2024-08-02T23:55:24.630Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: alvarotrigo Products: alvarotrigo/fullpage.js Problem Types: CWE-1321 Description: Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3b9d450c-24ac-4037-b04d-4d4dafbf593a - https://github.com/alvarotrigo/fullpage.js/commit/bf62492a22e5d296e63c3ed918a42fc5645a0d48