Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3479 State: PUBLISHED Published: 2022-10-14T00:00:00 Last Updated: 2024-11-20T16:21:14.279Z Vendors: n/a Products: nss Problem Types: segmentation fault Description: A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmentation fault or crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1774654 - https://bugzilla.redhat.com/show_bug.cgi?id=2134331 - https://security.gentoo.org/glsa/202212-05
CVE ID: CVE-2022-3480 State: PUBLISHED Published: 2022-11-15T10:58:25.780Z Last Updated: 2025-04-29T20:13:45.498Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PHOENIX CONTACT Products: FL MGUARD CENTERPORT, FL MGUARD CENTERPORT VPN-1000, FL MGUARD CORE TX, FL MGUARD CORE TX VPN, FL MGUARD DELTA TX/TX, FL MGUARD DELTA TX/TX VPN, FL MGUARD GT/GT, FL MGUARD GT/GT VPN, FL MGUARD PCI4000, FL MGUARD PCI4000 VPN, FL MGUARD PCIE4000, FL MGUARD PCIE4000 VPN, FL MGUARD RS2000 TX/TX-B, FL MGUARD RS2000 TX/TX VPN, FL MGUARD RS2005 TX VPN, FL MGUARD RS4000 TX/TX, FL MGUARD RS4000 TX/TX-M, FL MGUARD RS4000 TX/TX-P, FL MGUARD RS4000 TX/TX VPN, FL MGUARD RS4004 TX/DTX, FL
4000 TX/TX, FL MGUARD RS4000 TX/TX-M, FL MGUARD RS4000 TX/TX-P, FL MGUARD RS4000 TX/TX VPN, FL MGUARD RS4004 TX/DTX, FL MGUARD RS4004 TX/DTX VPN, FL MGUARD SMART2, FL MGUARD SMART2 VPN, TC MGUARD RS2000 3G VPN, TC MGUARD RS2000 4G ATT VPN, TC MGUARD RS2000 4G VPN, TC MGUARD RS2000 4G VZW VPN, TC MGUARD RS4000 3G VPN, TC MGUARD RS4000 4G ATT VPN, TC MGUARD RS4000 4G VPN, TC MGUARD RS4000 4G VZW VPN Problem Types: CWE-770 Description: A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall
nding a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections cannot prevent the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-051/
CVE ID: CVE-2022-3481 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T19:59:21.555Z Vendors: Unknown Products: WooCommerce Dropshipping Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c5e395f8-257e-49eb-afbd-9c1e26045373
CVE ID: CVE-2022-3482 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:04:21.592Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allowed an unauthorized user to see release names even when releases we set to be restricted to project members only Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377802 - https://ha
gram Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377802 - https://hackerone.com/reports/1725841 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3482.json
CVE ID: CVE-2022-3483 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T19:28:48.167Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2. A malicious maintainer could exfiltrate a Datadog integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server. Additional Analyst Notes: - CVE Program
URL such that authenticated requests are sent to an attacker controlled server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377799 - https://hackerone.com/reports/1724402 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3483.json
CVE ID: CVE-2022-3484 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:35:33.397Z Vendors: Unknown Products: wpb-show-core Problem Types: CWE-79 Description: The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3afaed61-6187-4915-acf0-16e79d5c2464
CVE ID: CVE-2022-3485 State: PUBLISHED Published: 2022-12-12T11:39:32.224Z Last Updated: 2025-04-22T17:52:53.648Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ifm Products: moneo appliance Problem Types: CWE-640 Description: In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-050/
CVE ID: CVE-2022-3486 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T19:28:07.599Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Url redirection to untrusted site ('open redirect') in GitLab Description: An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allows an attacker to redirect users to an arbitrary location if they trust the URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377810 - https://hackeron
ontainer: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/377810 - https://hackerone.com/reports/1725190 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3486.json
CVE ID: CVE-2022-3487 State: REJECTED Published: N/A Last Updated: 2023-04-02T00:00:00 Description: No description available.
CVE ID: CVE-2022-3488 State: PUBLISHED Published: 2023-01-25T21:37:47.872Z Last Updated: 2025-04-01T14:12:27.102Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Problem Types: n/a Description: Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1. Additional Ana
r name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2022-3488
CVE ID: CVE-2022-3489 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T19:28:00.180Z Vendors: Unknown Products: Wp-Hide Problem Types: CWE-862, CWE-352 Description: The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/36d78b6c-0da5-44f8-b7b3-eae78edac505
CVE ID: CVE-2022-3490 State: PUBLISHED Published: 2022-11-28T13:47:16.015Z Last Updated: 2025-04-25T15:13:40.572Z Vendors: Unknown Products: Checkout Field Editor (Checkout Manager) for WooCommerce Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136
CVE ID: CVE-2022-3491 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-23T18:26:52.197Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/6e6e05c2-2cf7-4aa5-a817-a62007bf92cb - https://github.com/vim/vim/commit/3558afe9e9e904cabb8475392d859f2d2fc21041 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-3492 State: PUBLISHED Published: 2022-10-13T00:00:00 Last Updated: 2024-08-03T01:14:01.426Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-707 Description: A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Handler. The manipulation of the argument parameter leads to os command injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210772. Additional Analyst Notes: - CVE Program Container: References: - h
. The identifier of this vulnerability is VDB-210772. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.210772
CVE ID: CVE-2022-3493 State: PUBLISHED Published: 2022-10-13T00:00:00 Last Updated: 2024-11-20T16:18:56.775Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-210773 was assigned to this vulnerability. Additional Ana
ting. The attack may be initiated remotely. The identifier VDB-210773 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.210773
CVE ID: CVE-2022-3494 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T19:27:15.809Z Vendors: Unknown Products: Complianz – GDPR/CCPA Cookie Consent, Complianz Premium Problem Types: CWE-89 Description: The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/71db75c0-5907-
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/71db75c0-5907-4237-884f-8db88b1a9b34
CVE ID: CVE-2022-3495 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-04-14T15:58:36.602Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple Online Public Access Catalog Problem Types: CWE-707 Description: A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affects unknown code of the file /opac/Actions.php?a=login of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The ident
injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210784. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hakcoder/Simple-Online-Public-Access-Catalog-OPAC---SQL-injection/blob/main/POC - https://vuldb.com/?id.210784
CVE ID: CVE-2022-3496 State: PUBLISHED Published: 2022-10-14T00:00:00 Last Updated: 2024-08-03T01:14:01.610Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-266 Description: A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access controls. The attack may be initiated remotely. The identifier VDB-210785 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Re
ely. The identifier VDB-210785 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.210785
CVE ID: CVE-2022-3497 State: PUBLISHED Published: 2022-10-14T00:00:00 Last Updated: 2024-08-03T01:14:02.353Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unknown function of the component Master List. The manipulation of the argument city/state/country/position leads to cross site scripting. It is possible to launch the attack remotely. VDB-210786 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Prog
h the attack remotely. VDB-210786 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.210786
CVE ID: CVE-2022-3499 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-05T14:19:19.466Z Vendors: n/a Products: Tenable Nessus Problem Types: Improper Access Control Description: An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2022-21
CVE ID: CVE-2022-3500 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:27:39.253Z Vendors: n/a Products: keylime Problem Types: CWE-248 Description: A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-3500 - https://github.com/keylime/keylime/pull/1128 -
ent: References: - https://access.redhat.com/security/cve/CVE-2022-3500 - https://github.com/keylime/keylime/pull/1128 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQH5CJRX65QYMQN5WGUKKKE3IRJBWG5Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QX4XVCAUFGJ2I2NCTOKONTJGRJB2NBBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUTHMDVFNGGVPCNPOGULMJAAFEP7MEXP/
CVE ID: CVE-2022-3501 State: PUBLISHED Published: 2022-10-17T08:55:11.089Z Last Updated: 2025-05-10T02:54:36.517Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Accessing template content without permissions Products: OTRS Problem Types: CWE-200 Description: Article template contents with sensitive data could be accessed from agents without permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-14/
CVE ID: CVE-2022-3502 State: PUBLISHED Published: 2022-10-14T00:00:00 Last Updated: 2024-08-03T01:14:01.538Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Human Resource Management System Problem Types: CWE-707 Description: A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210831. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210831. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/draco1725/POC/blob/main/Exploit/Stored%20Xss - https://vuldb.com/?id.210831
CVE ID: CVE-2022-3503 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-04-15T13:45:08.723Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Purchase Order Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identi
cripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210832. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DisguisedRoot/Exploit/blob/main/Persistent%20XSS/PoC - https://vuldb.com/?id.210832
CVE ID: CVE-2022-3504 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-04-15T13:44:57.660Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /php-sms/?p=services/view_service. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-2108
he exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210839. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Drun1baby/CVE_Pentest/blob/main/Sanitization%20Management%20System%20Project%20CMS/images/sqli.png - https://vuldb.com/?id.210839
CVE ID: CVE-2022-3505 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-04-15T13:44:49.870Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Sanitization Management System. It has been classified as problematic. Affected is an unknown function of the file /php-sms/admin/. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210840. Additional
exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210840. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Drun1baby/CVE_Pentest/blob/main/Sanitization%20Management%20System%20Project%20CMS/images/reflectedXSS.png - https://vuldb.com/?id.210840
CVE ID: CVE-2022-3506 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:03:07.503Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: barrykooij Products: barrykooij/related-posts-for-wp Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/08251542-88f6-4264-9074-a89984034828 - https://github.com/barrykooij/related-posts-for-wp/commit/37733398dd88863fc0bdb3d6d378598429fd0b81
CVE ID: CVE-2022-3509 State: PUBLISHED Published: 2022-11-01T18:09:31.634Z Last Updated: 2025-04-22T15:10:13.149Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Google Products: ProtocolBuffers Problem Types: n/a Description: A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend up
ck-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9
CVE ID: CVE-2022-3510 State: PUBLISHED Published: 2022-11-11T16:35:20.765Z Last Updated: 2025-04-22T15:09:17.050Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Google Products: ProtocolBuffers Problem Types: n/a Description: A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We