Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
o its design and architecture. Additional Analyst Notes: - CVE Program Container: References: - https://support.pega.com/support-doc/pega-security-advisory-b22-vulnerability-%E2%80%93-hotfix-matrix-0 - http://packetstormsecurity.com/files/169480/Pega-Platform-8.7.3-Remote-Code-Execution.html
CVE ID: CVE-2022-24083 State: PUBLISHED Published: 2022-07-25T16:07:16 Last Updated: 2024-08-03T03:59:23.635Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pegasystems Products: Pega Infinity Problem Types: CWE-285 Description: Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.pega.com/support-doc/pega-security-advisory-c22-vulnerability-%E2%80%93-hotfix-matrix-0
CVE ID: CVE-2022-24086 State: PUBLISHED Published: 2022-02-16T16:38:28.383Z Last Updated: 2025-10-21T23:15:46.117Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb22-12.html
CVE ID: CVE-2022-24090 State: PUBLISHED Published: 2022-03-11T17:54:33.398Z Last Updated: 2025-04-23T18:54:45.719Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Photoshop Problem Types: CWE-125 Description: Adobe Photoshop versions 23.1.1 (and earlier) and 22.5.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
ctim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-14.html
CVE ID: CVE-2022-24091 State: PUBLISHED Published: 2022-03-18T17:59:08.803761Z Last Updated: 2024-09-16T16:13:58.054Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.
m must open a malicious font file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-01.html
CVE ID: CVE-2022-24092 State: PUBLISHED Published: 2022-03-18T17:59:07.910459Z Last Updated: 2024-09-17T01:37:09.238Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.
CVE ID: CVE-2022-24093 State: PUBLISHED Published: 2023-09-12T07:36:03.118Z Last Updated: 2025-02-27T20:56:18.692Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-20 Description: Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb22-13.html
CVE ID: CVE-2022-24094 State: PUBLISHED Published: 2022-03-11T17:54:30.855Z Last Updated: 2025-04-23T18:55:11.797Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-121 Description: Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/pro
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb22-17.html
CVE ID: CVE-2022-24095 State: PUBLISHED Published: 2022-03-11T17:54:29.256Z Last Updated: 2025-04-23T18:55:26.054Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-121 Description: Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/pro
CVE ID: CVE-2022-24096 State: PUBLISHED Published: 2022-03-11T17:54:32.528Z Last Updated: 2025-04-23T18:54:51.545Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-122 Description: Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/pro
CVE ID: CVE-2022-24097 State: PUBLISHED Published: 2022-03-11T17:54:30.043Z Last Updated: 2025-04-23T18:55:19.604Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-787 Description: Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/a
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb22-17.html
CVE ID: CVE-2022-24098 State: PUBLISHED Published: 2022-05-06T17:03:41.461Z Last Updated: 2025-04-23T18:29:12.609Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-20 Description: Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an improper input validation vulnerability when parsing a PCX file that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PCX file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.ado
us PCX file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-20.html
CVE ID: CVE-2022-24099 State: PUBLISHED Published: 2022-05-06T17:04:35.141Z Last Updated: 2025-04-23T18:29:02.060Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Photoshop Problem Types: CWE-125 Description: Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-20.html
CVE ID: CVE-2022-24101 State: PUBLISHED Published: 2022-05-11T17:04:27.495408Z Last Updated: 2024-09-16T22:30:51.000Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Conta
sue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-24102 State: PUBLISHED Published: 2022-05-11T17:06:12.292206Z Last Updated: 2024-09-17T04:05:10.682Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
t open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-24103 State: PUBLISHED Published: 2022-05-11T17:07:33.458821Z Last Updated: 2024-09-17T01:15:42.436Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
CVE ID: CVE-2022-24104 State: PUBLISHED Published: 2022-05-11T17:08:48.324244Z Last Updated: 2024-09-17T03:59:02.036Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
CVE ID: CVE-2022-24105 State: PUBLISHED Published: 2022-05-06T17:05:54.277Z Last Updated: 2025-04-23T18:28:53.319Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-787 Description: Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious U3D file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/phot
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-20.html
CVE ID: CVE-2022-24106 State: PUBLISHED Published: 2022-08-30T03:05:08.438053Z Last Updated: 2024-09-16T19:15:21.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - http://www.xpdfreader.com/security-fixes.html - https://dl.xpdfreader.com/xpdf-4.04.tar.gz
CVE ID: CVE-2022-24107 State: PUBLISHED Published: 2022-08-30T03:04:49.762010Z Last Updated: 2024-09-17T02:42:28.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. Additional Analyst Notes: - CVE Program Container: References: - http://www.xpdfreader.com/security-fixes.html - https://dl.xpdfreader.com/xpdf-4.04.tar.gz
CVE ID: CVE-2022-24108 State: PUBLISHED Published: 2022-05-17T15:55:07 Last Updated: 2024-08-03T03:59:23.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted data. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartaddons.com/opencart-extensions/so-listing-tabs-responsive-opencart-30x-opencart-2x-module - https://codecanyon.net/item/so-listing-tabs-responsive
ions/so-listing-tabs-responsive-opencart-30x-opencart-2x-module - https://codecanyon.net/item/so-listing-tabs-responsive-opencart-module/12388133 - https://seclists.org/fulldisclosure/2022/May/30 - http://packetstormsecurity.com/files/167197/OpenCart-So-Listing-Tabs-2.2.0-Unsafe-Deserialization.html
CVE ID: CVE-2022-24109 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-02-05T15:14:02.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.onosproject.org/display/ONOS/Intent+Framework - https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf
CVE ID: CVE-2022-24110 State: PUBLISHED Published: 2022-02-14T03:52:59 Last Updated: 2024-08-03T03:59:23.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.kiteworks.com/platform/simple/managed-file-transfer/ - https://github.com/accellion/CVEs/blob/main/CVE-2022-24110.txt
CVE ID: CVE-2022-24111 State: PUBLISHED Published: 2022-02-10T16:01:03 Last Updated: 2024-08-03T03:59:23.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1959146 - https://mahara.org/interaction/forum/topic.php?id=8996
CVE ID: CVE-2022-24112 State: PUBLISHED Published: 2022-02-11T12:20:13.000Z Last Updated: 2025-10-21T23:15:46.674Z Vendors: Apache Software Foundation Products: Apache APISIX Problem Types: CWE-290 Description: An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides
o bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/lcdqywz8zy94mdysk7p3gfdgn51jmt94 - http://www.openwall.com/lists/oss-security/2022/02/11/3 - http://packetstormsecurity.com/files/166228/Apache-APISIX-Remote-Code-Execution.html - http://packetstormsecurity.com/files/166328/Apache-APISIX-2.12.1-Remote-Code-Execution.html
CVE ID: CVE-2022-24113 State: PUBLISHED Published: 2022-02-04T22:29:30.215128Z Last Updated: 2024-09-16T19:57:01.189Z Vendors: Acronis Products: Acronis Cyber Protect 15, Acronis Agent, Acronis Cyber Protect Home Office, Acronis True Image 2021 Problem Types: CWE-250 Description: Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security
mage 2021 (Windows) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2881
CVE ID: CVE-2022-24114 State: PUBLISHED Published: 2022-02-04T22:29:32.323632Z Last Updated: 2024-09-17T03:07:25.536Z Vendors: Acronis Products: Acronis Cyber Protect Home Office, Acronis True Image 2021 Problem Types: CWE-362 Description: Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3316
CVE ID: CVE-2022-24115 State: PUBLISHED Published: 2022-02-04T22:29:30.925782Z Last Updated: 2024-09-16T16:52:37.123Z Vendors: Acronis Products: Acronis Cyber Protect Home Office, Acronis True Image 2021 Problem Types: CWE-347 Description: Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3359
CVE ID: CVE-2022-24116 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-12T00:02:24.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
CVE ID: CVE-2022-24117 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-11T23:58:41.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
CVE ID: CVE-2022-24118 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-11T23:53:21.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
CVE ID: CVE-2022-24119 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-11T23:41:26.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
CVE ID: CVE-2022-24120 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-11T23:31:04.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
CVE ID: CVE-2022-24121 State: PUBLISHED Published: 2022-02-03T03:41:31 Last Updated: 2024-08-03T03:59:23.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://unifiedoffice.com/total-connect-now/ - https://www.coresecurity.com/core-labs/advisories/unified-office-total-connect-sql-injection
CVE ID: CVE-2022-24122 State: PUBLISHED Published: 2022-01-29T21:33:55 Last Updated: 2024-08-03T03:59:23.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f9d87929d451d3e649699d0f1d74f71f77ad38f5 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9d87929d451d3e649699d0f1d74f71f77ad38f5 - https://www.openwall.com/lists/oss-security/2022/01/29/1 -