Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34465 State: PUBLISHED Published: 2022-07-12T10:07:20 Last Updated: 2024-08-03T09:15:15.156Z Vendors: Siemens Products: Parasolid V33.1, Parasolid V34.0, Parasolid V34.1, Simcenter Femap V2022.1, Simcenter Femap V2022.2 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34.1 (All versions < V34.1.233), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted NEU files. This could all
s an out of bounds read past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15420) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-243317.pdf
CVE ID: CVE-2022-34466 State: PUBLISHED Published: 2022-07-12T10:07:22 Last Updated: 2024-08-03T09:15:15.104Z Vendors: Siemens Products: Mendix Applications using Mendix 9, Mendix Applications using Mendix 9 (V9.12) Problem Types: CWE-74 Description: A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration. Additional Analyst Notes: -
lity could allow a malicious user to leak sensitive information in a certain configuration. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf
CVE ID: CVE-2022-34467 State: PUBLISHED Published: 2022-07-12T10:07:23 Last Updated: 2024-08-03T09:15:15.207Z Vendors: Siemens Products: Mendix Excel Importer Module (Mendix 8 compatible), Mendix Excel Importer Module (Mendix 9 compatible) Problem Types: CWE-776 Description: A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component. Additional Analyst Notes: - CVE Program Container: References: - https://cert
he availability of the affected component. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-610768.pdf
CVE ID: CVE-2022-34468 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:20:18.507Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI Description: An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/a
ulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1768537
CVE ID: CVE-2022-34469 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:18:24.634Z Vendors: Mozilla Products: Firefox Problem Types: TLS certificate errors on HSTS-protected domains could be bypassed by the user on Firefox for Android Description: When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.
g only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1721220
CVE ID: CVE-2022-34470 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:51:11.816Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in nsSHistory Description: Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/
4/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1765951
CVE ID: CVE-2022-34471 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:48:58.793Z Vendors: Mozilla Products: Firefox Problem Types: Compromised server could trick a browser into an addon downgrade Description: When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1766047
CVE ID: CVE-2022-34472 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T19:41:32.614Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Unavailable PAC file resulted in OCSP requests being blocked Description: If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.
ontainer: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1770123
CVE ID: CVE-2022-34473 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T19:32:51.517Z Vendors: Mozilla Products: Firefox Problem Types: HTML Sanitizer could have been bypassed via use tags Description: The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code>&lt;use&gt;</code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1770888
CVE ID: CVE-2022-34474 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T19:31:19.021Z Vendors: Mozilla Products: Firefox Problem Types: Sandboxed iframes could redirect to external schemes Description: Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the redirect and prompt the user as appropriate. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1677138
CVE ID: CVE-2022-34475 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T19:29:30.087Z Vendors: Mozilla Products: Firefox Problem Types: HTML Sanitizer could have been bypassed via same-origin script via use tags Description: SVG <code>&lt;use&gt;</code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API. This would have required the attacker to reference a same-origin JavaScript file containing the script to be executed. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.or
< 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1757210
CVE ID: CVE-2022-34476 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:26:49.845Z Vendors: Mozilla Products: Firefox Problem Types: ASN.1 parser could have been tricked into accepting malformed ASN.1 Description: ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1387919
CVE ID: CVE-2022-34477 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:16:15.551Z Vendors: Mozilla Products: Firefox Problem Types: MediaError message property leaked information on cross-origin same-site pages Description: The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla
CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1731614
CVE ID: CVE-2022-34478 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:14:28.263Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Microsoft protocols can be attacked if a user accepts a prompt Description: The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have had known vulnerabilities, exploited in the wild (although we know of none exploited through Thunderbird), so in this release Thunderbird has blocked these protocols from prompting the user to open them.<br>*This bug only affects
in this release Thunderbird has blocked these protocols from prompting the user to open them.<br>*This bug only affects Thunderbird on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1773717
CVE ID: CVE-2022-34479 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:09:34.544Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: A popup window could be resized in a way to overlay the address bar with web content Description: A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - C
ty affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1745595
CVE ID: CVE-2022-34480 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:56:16.526Z Vendors: Mozilla Products: Firefox Problem Types: Free of uninitialized pointer in lg_init Description: Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1454072
CVE ID: CVE-2022-34481 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:53:16.294Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Potential integer overflow in ReplaceElementsAt Description: In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.moz
ainer: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1497246
CVE ID: CVE-2022-34482 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:51:26.041Z Vendors: Mozilla Products: Firefox Problem Types: Drag and drop of malicious image could have led to malicious executable and potential code execution Description: An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from CVE-2022-34483. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
22-34483. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=845880
CVE ID: CVE-2022-34483 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:49:14.355Z Vendors: Mozilla Products: Firefox Problem Types: Drag and drop of malicious image could have led to malicious executable and potential code execution Description: An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from CVE-2022-34482. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
22-34482. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1335845
CVE ID: CVE-2022-34484 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:42:56.699Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird 102 Description: The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
Thunderbird < 102, and Thunderbird < 91.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763634%2C1772651
CVE ID: CVE-2022-34485 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T17:34:51.260Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 102 Description: Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https
ogram Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-24/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1768409%2C1768578
CVE ID: CVE-2022-34486 State: PUBLISHED Published: 2022-08-23T06:30:48 Last Updated: 2024-08-03T09:15:15.251Z Vendors: PukiWiki Development Team Products: PukiWiki Problem Types: Directory traversal Description: Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://pukiwiki.osdn.jp/?PukiWiki/Errata - https://jvn.jp/en/vu/JVNVU96002401/index.html
CVE ID: CVE-2022-34487 State: PUBLISHED Published: 2022-07-21T17:27:58.708Z Last Updated: 2025-02-20T20:16:35.216Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: biplob018 Products: Shortcode Addons (WordPress plugin) Problem Types: CWE-264 Description: Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/shortcode-addons/#developers - https://patchstack.com/database/vulnerability/shortcode-addons/wordpress-shortcode-addons-plugin-3-0-3-unauthenticated-arbitrary-option-update
/database/vulnerability/shortcode-addons/wordpress-shortcode-addons-plugin-3-0-3-unauthenticated-arbitrary-option-update-vulnerability
CVE ID: CVE-2022-34488 State: PUBLISHED Published: 2022-08-18T20:04:30.000Z Last Updated: 2025-02-18T15:21:34.209Z Vendors: n/a Products: Intel(R) NUC Laptop Kits Problem Types: escalation of privilege Description: Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE ID: CVE-2022-34489 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:59.170Z Description: No description available.
CVE ID: CVE-2022-34491 State: REJECTED Published: 2022-06-25T20:59:12 Last Updated: 2022-06-28T04:45:40 Description: No description available.
CVE ID: CVE-2022-34494 State: PUBLISHED Published: 2022-06-26T15:28:19 Last Updated: 2024-08-03T09:15:15.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/1680939e9ecf7764fba8689cfb3429c2fe2bb23c - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
CVE ID: CVE-2022-34495 State: PUBLISHED Published: 2022-06-26T15:28:07 Last Updated: 2024-08-03T09:15:15.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4 - https://github.com/torvalds/linux/commit/c2eecefec5df1306eafce28ccdf1ca159a552ecc
CVE ID: CVE-2022-34496 State: PUBLISHED Published: 2022-07-29T22:26:39 Last Updated: 2024-08-03T09:15:15.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hiby R3 PRO firmware v1.5 to v1.7 was discovered to contain a file upload vulnerability via the file upload feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/feric/Findings/tree/main/Hiby/Web%20Server/File%20uploading - https://github.com/vext01/hiby-issues/issues/52
CVE ID: CVE-2022-34500 State: PUBLISHED Published: 2022-07-22T14:17:19 Last Updated: 2024-08-03T09:15:15.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/bin-collect/ - https://github.com/Gmiller290488/bin_collection/issues/1
CVE ID: CVE-2022-34501 State: PUBLISHED Published: 2022-07-22T14:17:19 Last Updated: 2024-08-03T09:15:15.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/bin-collection/ - https://github.com/Gmiller290488/bin_collection/issues/2
CVE ID: CVE-2022-34502 State: PUBLISHED Published: 2022-07-22T14:17:20 Last Updated: 2024-08-03T09:15:15.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/20336