Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44724 State: PUBLISHED Published: 2022-11-04T00:00:00.000Z Last Updated: 2025-05-02T18:43:58.800Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://stiltsoft.atlassian.net/browse/VD-3 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-049.txt
CVE ID: CVE-2022-44725 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T14:47:56.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/ - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2
discovery-server-lds/ - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-44725.pdf
CVE ID: CVE-2022-44726 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T16:50:18.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-050.txt
CVE ID: CVE-2022-44727 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-05-01T14:01:49.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf - https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html - https://securityandstuff.com/posts/cve-2022-44727/
CVE ID: CVE-2022-44729 State: PUBLISHED Published: 2023-08-22T14:12:50.301Z Last Updated: 2025-02-13T16:33:42.214Z Vendors: Apache Software Foundation Products: Apache XML Graphics Batik Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. Additional Analyst Notes: - CVE Program Container: References: - https://xmlgraphics.apache.org/secu
sion 1.17 or later. Additional Analyst Notes: - CVE Program Container: References: - https://xmlgraphics.apache.org/security.html - https://lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2 - http://www.openwall.com/lists/oss-security/2023/08/22/2 - http://www.openwall.com/lists/oss-security/2023/08/22/4 - https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html - https://security.gentoo.org/glsa/202401-11
CVE ID: CVE-2022-44730 State: PUBLISHED Published: 2023-08-22T13:57:00.282Z Last Updated: 2025-02-13T16:33:42.755Z Vendors: Apache Software Foundation Products: Apache XML Graphics Batik Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0 - https://xmlgraphics.apache.org/security.html - http://www.openwall.com/lists/oss-security/2023/08/
4v1zogh0fngj9pwjyj0 - https://xmlgraphics.apache.org/security.html - http://www.openwall.com/lists/oss-security/2023/08/22/3 - http://www.openwall.com/lists/oss-security/2023/08/22/5 - https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html - https://security.gentoo.org/glsa/202401-11
CVE ID: CVE-2022-44731 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:43:45.574Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC WinCC OA V3.15, SIMATIC WinCC OA V3.16, SIMATIC WinCC OA V3.17, SIMATIC WinCC OA V3.18 Problem Types: CWE-88 Description: A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend appl
l versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances. This could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-547714.pdf
CVE ID: CVE-2022-44732 State: PUBLISHED Published: 2022-11-07T18:46:44.444Z Last Updated: 2025-05-01T17:32:58.362Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-269 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39900. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3040
CVE ID: CVE-2022-44733 State: PUBLISHED Published: 2022-11-07T18:55:00.740Z Last Updated: 2025-05-01T17:33:22.808Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-269 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39900. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3968
CVE ID: CVE-2022-44734 State: PUBLISHED Published: 2023-04-16T08:35:00.486Z Last Updated: 2025-01-10T18:51:41.523Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: BestWebSoft Products: Car Rental by BestWebSoft Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Car Rental by BestWebSoft plugin <= 1.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/car-rental/wordpress-car-rental-by-bestwebsoft-plugin-1-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-44735 State: PUBLISHED Published: 2023-04-18T12:56:20.945Z Last Updated: 2025-02-19T21:33:18.678Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Gus Sevilla Products: WP Clictracker Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gus Sevilla WP Clictracker plugin <= 1.0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/clictracker/wordpress-clictracker-plugin-1-0-5-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-44736 State: PUBLISHED Published: 2022-11-17T22:16:07.003444Z Last Updated: 2024-09-17T04:25:25.780Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Fahad Mahmood Products: Chameleon (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/chameleon/wordpress-chameleon-plugin-1-4-3-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-44737 State: PUBLISHED Published: 2022-11-22T16:00:10.628Z Last Updated: 2025-02-20T19:49:17.285Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: All In One WP Security & Firewall Team Products: All-In-One Security (AIOS) – Security and Firewall (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery vulnerabilities in All-In-One Security (AIOS) – Security and Firewall (WordPress plugin) <= 5.1.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall/wordpress-all-in-one-wp-secu
rences: - https://patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall/wordpress-all-in-one-wp-security-plugin-5-1-0-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-44738 State: PUBLISHED Published: 2023-11-07T17:08:55.729Z Last Updated: 2024-09-04T16:09:18.246Z Vendors: Patrick Robrecht Products: Posts and Users Stats Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/posts-and-users-stats/wordpress-posts-and-users-stats-plugin-1-1-3-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-44739 State: PUBLISHED Published: 2023-05-22T09:46:01.344Z Last Updated: 2025-01-08T22:07:11.720Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: ThingsForRestaurants Products: Quick Restaurant Reservations Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin <= 1.5.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quick-restaurant-reservations/wordpress-quick-restaurant-reservations-plugin-1-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-44740 State: PUBLISHED Published: 2022-11-18T22:03:34.592Z Last Updated: 2025-02-20T19:51:20.563Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Constant Contact Products: Creative Mail (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/creative-mail-by-constant-contact/wordpress-creative-mail-plugin-1-5-4-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve - https://wordpress.org/plu
reative-mail-plugin-1-5-4-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve - https://wordpress.org/plugins/creative-mail-by-constant-contact/#developers
CVE ID: CVE-2022-44741 State: PUBLISHED Published: 2022-11-08T18:36:33.552277Z Last Updated: 2024-09-16T17:04:00.976Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: David Anderson Products: Testimonial Slider (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/testimonial-slider/wordpress-testimonial-slider-plugin-1-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wo
al-slider/wordpress-testimonial-slider-plugin-1-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/testimonial-slider/
CVE ID: CVE-2022-44742 State: PUBLISHED Published: 2023-03-23T11:33:40.660Z Last Updated: 2025-01-10T19:18:19.976Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Yannick Lefebvre Products: Community Events Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/community-events/wordpress-community-events-plugin-1-4-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-44743 State: PUBLISHED Published: 2023-04-23T09:59:49.317Z Last Updated: 2025-02-19T21:33:09.645Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BlueGlass Products: Jobs for WordPress Problem Types: CWE-79 Description: Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.11.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/job-postings/wordpress-jobs-for-wordpress-plugin-2-5-10-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-44744 State: PUBLISHED Published: 2022-11-07T19:00:53.561Z Last Updated: 2025-04-30T19:15:08.673Z Severity: LOW (CVSS 2.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-2718
CVE ID: CVE-2022-44745 State: PUBLISHED Published: 2022-11-07T19:00:59.626Z Last Updated: 2025-05-01T14:52:47.400Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-532 Description: Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3481
CVE ID: CVE-2022-44746 State: PUBLISHED Published: 2022-11-07T19:01:04.527Z Last Updated: 2025-04-30T14:07:24.204Z Severity: LOW (CVSS 2.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-200 Description: Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4398
CVE ID: CVE-2022-44747 State: PUBLISHED Published: 2022-11-07T19:00:37.931Z Last Updated: 2025-05-01T17:33:54.502Z Severity: LOW (CVSS 2.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-610 Description: Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4540
CVE ID: CVE-2022-44748 State: PUBLISHED Published: 2022-11-24T06:36:23.587Z Last Updated: 2025-04-25T18:00:24.531Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: KNIME Products: KNIME Server Problem Types: CWE-22 Description: A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being uploaded, can overwrite arbitrary files that the operating system user running the KNIME Server process has write access to. The user must be authenticated
les that the operating system user running the KNIME Server process has write access to. The user must be authenticated and have permissions to upload files to KNIME Server. This can impact data integrity (file contents are changed) or cause errors in other software (vital files being corrupted). It can even lead to remote code execution if executable files are being replaced and subsequently executed by the KNIME Server process user. In all cases the attacker has to know the location of files on the server's file system, though. Note that users that have permissions to upload workflows usually also have permissions to run them on the KNIME Server and can therefore already execute arbitrary
oad workflows usually also have permissions to run them on the KNIME Server and can therefore already execute arbitrary code in the context of the KNIME Executor's operating system user. There is no workaround to prevent this vulnerability from being exploited. Updates to fixed versions 4.13.6, 4.14.3, or 4.15.3 are advised. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.knime.com/security/advisories
CVE ID: CVE-2022-44749 State: PUBLISHED Published: 2022-11-24T06:39:22.017Z Last Updated: 2025-04-24T18:25:41.647Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: KNIME Products: KNIME Analytics Platform Problem Types: CWE-22 Description: A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being opened by a user, can overwrite arbitrary files that the user has write access to. It's not necessary to execute the workflow, openin
ser, can overwrite arbitrary files that the user has write access to. It's not necessary to execute the workflow, opening the workflow is sufficient. The user will notice that something is wrong because an error is being reported but only after the files have already been written. This can impact data integrity (file contents are changed) or cause errors in other software (vital files being corrupted). It can even lead to remote code execution if executable files are being replaced and subsequently executed by the user. In all cases the attacker has to know the location of files on the user's system, though. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
files on the user's system, though. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.knime.com/security/advisories
CVE ID: CVE-2022-44750 State: PUBLISHED Published: 2022-12-17T03:24:14.670Z Last Updated: 2025-04-17T15:26:45.302Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: Domino Problem Types: n/a Description: HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44754. This vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA
vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102151
CVE ID: CVE-2022-44751 State: PUBLISHED Published: 2022-12-17T01:48:38.704Z Last Updated: 2025-04-17T14:32:37.793Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: Notes Problem Types: n/a Description: HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44755. This vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA A
ulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260
CVE ID: CVE-2022-44752 State: PUBLISHED Published: 2022-12-17T03:27:16.768Z Last Updated: 2025-04-17T15:19:53.355Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: Domino Problem Types: n/a Description: HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=k
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102151
CVE ID: CVE-2022-44753 State: PUBLISHED Published: 2022-12-17T01:52:52.495Z Last Updated: 2025-04-17T14:32:13.332Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: Notes Problem Types: n/a Description: HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260
CVE ID: CVE-2022-44754 State: PUBLISHED Published: 2022-12-17T03:33:30.577Z Last Updated: 2025-04-17T15:19:24.078Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: Domino Problem Types: n/a Description: HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44750. This vulnerability applies to software previously licensed by IBM. Additional Analyst Notes: - CVE Program Container: - CISA