Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4258 State: PUBLISHED Published: 2023-01-16T09:52:09.647Z Last Updated: 2025-04-03T13:40:22.235Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HIMA Products: HOPCS, X-OPC DA, X-OPC A+E , X-OTS Problem Types: CWE-428 Description: In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-059/
CVE ID: CVE-2022-4259 State: PUBLISHED Published: 2023-05-04T10:38:25.076Z Last Updated: 2024-08-03T01:34:49.836Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: CMC, Guardian Problem Types: CWE-89 Description: Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:1-01
CVE ID: CVE-2022-4260 State: PUBLISHED Published: 2023-01-02T21:49:42.572Z Last Updated: 2025-04-10T18:33:18.971Z Vendors: Unknown Products: WP-Ban Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d0cf24be-df87-4e1f-aae7-e9684c88e7db
CVE ID: CVE-2022-4261 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-14T17:57:38.662Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Rapid7 Products: Nexpose, InsightVM Problem Types: CWE-494 Description: Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could allow an attacker to provide a malicious update and alter the functionality of Rapid7 Nexpose. The attacker would need some pre-existing mechanism to provide a malicious update, either through a social engineering effort, privileged access to replace downloaded updates in transit, or by perfo
ate, either through a social engineering effort, privileged access to replace downloaded updates in transit, or by performing an Attacker-in-the-Middle attack on the update service itself. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/release-notes/nexpose/20221207/ - https://www.rapid7.com/blog/post/2022/12/7/cve-2022-4261-rapid7-nexpose-update-validation-issue-fixed - https://docs.rapid7.com/release-notes/insightvm/20221207/
CVE ID: CVE-2022-4262 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-10-21T23:15:30.490Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html - https://crbug.com/1394403
CVE ID: CVE-2022-4264 State: PUBLISHED Published: 2022-12-09T14:08:40.778Z Last Updated: 2024-08-28T20:00:42.953Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: M-Files Products: M-Files Web Problem Types: CWE-269 Description: Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to change some configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.m-files.com/about/trust-center/security-advisories/cve-2022-4264/ - https://product.m-files.com/security-advisories/cve-2022-4264/
CVE ID: CVE-2022-4265 State: PUBLISHED Published: 2023-03-06T13:33:59.581Z Last Updated: 2025-03-06T15:13:09.630Z Vendors: Unknown Products: Replyable Problem Types: CWE-502 Deserialization of Untrusted Data, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could also be done via a CSRF vector against any authenticated user Additional Analyst Notes: - CVE Program Co
he attack could also be done via a CSRF vector against any authenticated user Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/095cba08-7edd-41fb-9776-da151c0885dd
CVE ID: CVE-2022-4266 State: PUBLISHED Published: 2022-12-26T12:28:14.471Z Last Updated: 2025-04-14T13:46:38.230Z Vendors: Unknown Products: Bulk Delete Users by Email Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1bcda9d3-c573-441e-828f-055fbec2e08d
CVE ID: CVE-2022-4267 State: PUBLISHED Published: 2022-12-26T12:28:06.649Z Last Updated: 2025-04-14T14:17:53.562Z Vendors: Unknown Products: Bulk Delete Users by Email Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e09754f2-e241-4bf8-8c95-a3fbc0ba7585
CVE ID: CVE-2022-4268 State: PUBLISHED Published: 2022-12-26T12:27:56.219Z Last Updated: 2025-04-14T14:20:45.512Z Vendors: Unknown Products: Plugin Logic Problem Types: CWE-89 SQL Injection Description: The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bde93d90-1178-4d55-aea9-e02c4f8bcaa2 - https://bulletin.iese.de/post/plugin-logic_1-0-7/
CVE ID: CVE-2022-4269 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-14T18:10:34.785Z Vendors: n/a Products: Linux kernel (TC subsystem) Problem Types: CWE-833 Description: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/netdev/33dc43f587ec
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/netdev/33dc43f587ec1388ba456b4915c75f02a8aae226.1663945716.git.dcaratti%40redhat.com/ - https://www.debian.org/security/2023/dsa-5480 - https://security.netapp.com/advisory/ntap-20230929-0001/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
CVE ID: CVE-2022-4270 State: PUBLISHED Published: 2022-12-02T12:20:58.815Z Last Updated: 2024-08-28T20:01:20.356Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: M-Files Products: M-Files Web Problem Types: CWE-269 Description: Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.m-files.com/about/trust-center/security-advisories/cve-2022-4270/ - https://product.m-files.com/security-advisories/cve-2022-4270/
CVE ID: CVE-2022-4271 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-14T17:52:11.935Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a11c922f-255a-412a-aa87-7f3bd7121599 - https://github.com/osticket/osticket/commit/5213ff138c6be6144a6692376ac0803a42eca168
CVE ID: CVE-2022-4272 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-15T13:09:31.698Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: FeMiner Products: wms Problem Types: CWE-266 Description: A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214760. Additional Analyst Notes: - CVE Program Co
e public and may be used. The identifier of this vulnerability is VDB-214760. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FeMiner/wms/issues/14 - https://vuldb.com/?id.214760 - http://www.openwall.com/lists/oss-security/2023/04/26/1
CVE ID: CVE-2022-4273 State: PUBLISHED Published: 2022-12-03T00:00:00 Last Updated: 2024-08-03T01:34:49.938Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-266 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hrm/controller/employee.php of the component Content-Type Handler. The manipulation of the argument pfimg leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The
stricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214769 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/leecybersec/bug-report/tree/main/sourcecodester/oretnom23/hrm/bypass-fileupload-rce - https://vuldb.com/?id.214769
CVE ID: CVE-2022-4274 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-15T13:09:24.914Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: House Rental System Problem Types: CWE-707 Description: A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument property_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214770 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program
ic and may be used. VDB-214770 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nikeshtiwari1/House-Rental-System/issues/6 - https://vuldb.com/?id.214770
CVE ID: CVE-2022-4275 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-15T13:09:17.068Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: House Rental System Problem Types: CWE-707 Description: A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerab
nched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nikeshtiwari1/House-Rental-System/issues/7 - https://vuldb.com/?id.214771
CVE ID: CVE-2022-4276 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-15T13:09:10.518Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: House Rental System Problem Types: CWE-266 Description: A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772. Addi
. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nikeshtiwari1/House-Rental-System/issues/8 - https://vuldb.com/?id.214772
CVE ID: CVE-2022-4277 State: PUBLISHED Published: 2022-12-03T00:00:00 Last Updated: 2024-08-03T01:34:50.017Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Shaoxing Products: Background Management System Problem Types: CWE-707 Description: A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214774 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
blic and may be used. VDB-214774 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Peanut886/Vulnerability/blob/main/SQL%20injection%20exists%20in%20the%20background%20management%20system%20Default%20of%20Shaoxing%20Punctuation%20Electronic%20Technology%20Co.%2C%20LTD.md - https://vuldb.com/?id.214774
CVE ID: CVE-2022-4278 State: PUBLISHED Published: 2022-12-03T00:00:00 Last Updated: 2024-08-03T01:34:49.936Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-707 Description: A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employeeadd.php. The manipulation of the argument empid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214775.
exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214775. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leecybersec/bug-report/tree/main/sourcecodester/oretnom23/hrm/employeeadd-sqli - https://vuldb.com/?id.214775
CVE ID: CVE-2022-4279 State: PUBLISHED Published: 2022-12-03T00:00:00 Last Updated: 2024-08-03T01:34:49.920Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Human Resource Management System Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214776. Additio
he exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214776. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leecybersec/bug-report/tree/main/sourcecodester/oretnom23/hrm/employee-view-xss - https://vuldb.com/?id.214776
CVE ID: CVE-2022-4280 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-15T13:09:01.864Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dot Tech Products: Smart Campus System Problem Types: CWE-266 Description: A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this issue is some unknown functionality of the file /services/Card/findUser. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214778 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-214778 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Peanut886/Vulnerability/blob/main/Information%20leakage%20vulnerability%20exists%20in%20findUser%2C%20a%20smart%20campus%20system%20developed%20by%20Dot%20Tech.md - https://vuldb.com/?id.214778
CVE ID: CVE-2022-4281 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-15T13:08:53.594Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Facepay Problem Types: CWE-266 Description: A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization bypass. The attack can be launched remotely. The identifier VDB-214789 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
DB-214789 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.214789
CVE ID: CVE-2022-4282 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-15T13:08:45.249Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: SpringBootCMS Problem Types: CWE-707 Description: A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214790 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ha0Liu/cveAdd/blob/developer/JreCMS%20template%20injection%20vulnerability/JreCMS%20template%20injection%20vulnerability.md - https://vuldb.com/?id.214790
CVE ID: CVE-2022-4283 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-14T18:13:03.382Z Vendors: n/a Products: xorg-x11-server Problem Types: use-after-free Description: A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2151761 - https://access.redhat.com/security/cve/CVE-2022-4283 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30
CVE ID: CVE-2022-4284 State: REJECTED Published: N/A Last Updated: 2023-06-14T00:00:00 Description: No description available.
CVE ID: CVE-2022-4285 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T15:41:27.970Z Vendors: n/a Products: binutils Problem Types: CWE-476 Description: An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29699 - https://bugzilla.redhat.com/show_bug.cgi?id=2150768 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba12003
hat.com/show_bug.cgi?id=2150768 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70 - https://security.gentoo.org/glsa/202309-15
CVE ID: CVE-2022-4286 State: PUBLISHED Published: 2023-02-14T14:25:37.538Z Last Updated: 2025-03-20T14:07:56.101Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: B&R Industrial Automation Products: B&R Automation Runtime Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/downloads_br_productcatalogue/assets/1
m Container: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/downloads_br_productcatalogue/assets/1675607299099-en-original-1.0.pdf
CVE ID: CVE-2022-4287 State: PUBLISHED Published: 2022-12-20T14:16:09.540Z Last Updated: 2025-04-14T18:15:14.991Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: n/a Description: Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2022-0011