Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31616 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:26:33.240Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-20 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31617 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-28T15:33:59.530Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.c
ing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31618 State: PUBLISHED Published: 2022-08-05T20:30:47 Last Updated: 2024-08-03T07:25:59.523Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Problem Types: CWE-476 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31619 State: PUBLISHED Published: 2022-06-14T09:21:57 Last Updated: 2024-08-03T07:26:00.834Z Vendors: Siemens Products: Teamcenter V12.4, Teamcenter V13.0, Teamcenter V13.1, Teamcenter V13.2, Teamcenter V13.3, Teamcenter V14.0 Problem Types: CWE-798 Description: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the app
4.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-220589.pdf
CVE ID: CVE-2022-31620 State: PUBLISHED Published: 2022-05-25T20:06:52 Last Updated: 2024-08-03T07:26:00.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/70 - https://github.com/thorfdbg/libjpeg/commit/ef4a29a62ab48b8dc235f4af52cfd6319eda9a6a
CVE ID: CVE-2022-31621 State: PUBLISHED Published: 2022-05-25T00:00:00 Last Updated: 2024-10-30T13:35:34.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/M
effects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/MariaDB/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8 - https://jira.mariadb.org/browse/MDEV-26574?filter=-2 - https://security.netapp.com/advisory/ntap-20220707-0006/ - https://jira.mariadb.org/browse/MDEV-26574 - https://jira.mariadb.org/browse/MDEV-26561
CVE ID: CVE-2022-31622 State: PUBLISHED Published: 2022-05-25T00:00:00 Last Updated: 2024-08-03T07:26:01.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/brow
ity with adverse effects. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26561?filter=-2 - https://github.com/MariaDB/server/commit/e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2 - https://security.netapp.com/advisory/ntap-20220707-0006/ - https://jira.mariadb.org/browse/MDEV-26574 - https://jira.mariadb.org/browse/MDEV-26561
CVE ID: CVE-2022-31623 State: PUBLISHED Published: 2022-05-25T00:00:00 Last Updated: 2024-10-29T15:21:10.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
erability with adverse effects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MariaDB/server/pull/1938 - https://github.com/MariaDB/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94 - https://security.netapp.com/advisory/ntap-20220707-0006/ - https://jira.mariadb.org/browse/MDEV-26574 - https://jira.mariadb.org/browse/MDEV-26561
CVE ID: CVE-2022-31624 State: PUBLISHED Published: 2022-05-25T20:36:58 Last Updated: 2024-08-03T07:26:01.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26556?filter=-2 - https://github.com/MariaDB/server/commit/d627d00b13ab2f2c0954ea7b77202470cb102944 - https://security.netapp.com/advisory/ntap-20220707-
com/MariaDB/server/commit/d627d00b13ab2f2c0954ea7b77202470cb102944 - https://security.netapp.com/advisory/ntap-20220707-0006/
CVE ID: CVE-2022-31625 State: PUBLISHED Published: 2022-06-16T05:45:15.228019Z Last Updated: 2024-09-16T18:35:01.122Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-590, CWE-824 Description: In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81720 - https://lists.f
Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81720 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTZQKRGEYJT5UB4FGG3MOE72SQUHSL4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T4MMEEZYYAEHPQMZDFN44PHORJWJFZQ/ - https://www.debian.org/security/2022/dsa-5179 - https://security.netapp.com/advisory/ntap-20220722-0005/ - https://security.gentoo.org/glsa/202209-20 - https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html
CVE ID: CVE-2022-31626 State: PUBLISHED Published: 2022-06-16T05:45:16.880236Z Last Updated: 2024-09-17T03:38:54.950Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-120 Description: In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=
ecution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81719 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTZQKRGEYJT5UB4FGG3MOE72SQUHSL4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T4MMEEZYYAEHPQMZDFN44PHORJWJFZQ/ - https://www.debian.org/security/2022/dsa-5179 - https://security.netapp.com/advisory/ntap-20220722-0005/ - https://security.gentoo.org/glsa/202209-20 - https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html
CVE ID: CVE-2022-31627 State: PUBLISHED Published: 2022-07-28T05:50:09.522067Z Last Updated: 2024-09-16T21:02:46.605Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-590 Description: In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81723 - https://security.netapp.com/advisory/ntap-20220826-0008/ - https://security.gentoo.org/glsa/2
php.net/bug.php?id=81723 - https://security.netapp.com/advisory/ntap-20220826-0008/ - https://security.gentoo.org/glsa/202209-20
CVE ID: CVE-2022-31628 State: PUBLISHED Published: 2022-09-28T22:25:09.309Z Last Updated: 2025-05-20T20:24:57.733Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-674 Description: In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.php.net/bug.php?id=81726 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/ - https://lists.fedoraproje
es/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/ - https://www.debian.org/security/2022/dsa-5277 - https://security.gentoo.org/glsa/202211-03 - https://security.netapp.com/advisory/ntap-20221209-0001/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html
CVE ID: CVE-2022-31629 State: PUBLISHED Published: 2022-09-28T22:25:10.116Z Last Updated: 2025-11-04T17:12:24.069Z Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81727 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/ - https://lists
t.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/ - https://www.debian.org/security/2022/dsa-5277 - https://security.gentoo.org/glsa/202211-03 - https://security.netapp.com/advisory/ntap-20221209-0001/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGWIK3HMB
g00030.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSJVPJTX7T3J5V7XHR4MFNHZGP44R5XE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/ - http://www.openwall.com/lists/oss-security/2024/04/12/11
CVE ID: CVE-2022-31630 State: PUBLISHED Published: 2022-11-14T06:53:06.774Z Last Updated: 2024-08-03T07:26:01.044Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-131, CWE-190 Description: In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?i
onfidential information. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81739
CVE ID: CVE-2022-31631 State: PUBLISHED Published: 2025-02-12T22:10:45.418Z Last Updated: 2025-02-13T16:06:41.825Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-74 Description: In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.php.net/bug.php?id=81740
CVE ID: CVE-2022-31635 State: PUBLISHED Published: 2023-06-13T16:10:26.319Z Last Updated: 2025-01-03T14:43:36.545Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
CVE ID: CVE-2022-31636 State: PUBLISHED Published: 2023-06-13T16:11:06.061Z Last Updated: 2025-01-03T14:37:42.758Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
CVE ID: CVE-2022-31637 State: PUBLISHED Published: 2023-06-13T16:12:59.914Z Last Updated: 2025-01-03T19:21:15.773Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
CVE ID: CVE-2022-31638 State: PUBLISHED Published: 2023-06-13T16:13:39.000Z Last Updated: 2025-01-03T19:17:57.621Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
CVE ID: CVE-2022-31639 State: PUBLISHED Published: 2023-06-13T16:14:12.282Z Last Updated: 2025-01-03T18:08:37.396Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
CVE ID: CVE-2022-31640 State: PUBLISHED Published: 2023-06-14T16:30:14.571Z Last Updated: 2024-12-30T15:31:00.364Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805
CVE ID: CVE-2022-31641 State: PUBLISHED Published: 2023-06-14T16:31:38.198Z Last Updated: 2024-12-30T15:29:26.847Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805
CVE ID: CVE-2022-31642 State: PUBLISHED Published: 2023-06-14T16:32:26.526Z Last Updated: 2024-12-30T15:23:14.757Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805
CVE ID: CVE-2022-31643 State: PUBLISHED Published: 2023-04-28T15:41:22.641Z Last Updated: 2025-01-30T17:05:19.529Z Vendors: HP Inc. Products: HP PC BIOS Description: A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7013183-7013209-16/hpsbhf03812
CVE ID: CVE-2022-31644 State: PUBLISHED Published: 2023-06-14T17:06:30.332Z Last Updated: 2024-12-30T15:13:57.891Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
CVE ID: CVE-2022-31645 State: PUBLISHED Published: 2023-06-14T17:07:00.373Z Last Updated: 2024-12-30T15:09:21.775Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
CVE ID: CVE-2022-31646 State: PUBLISHED Published: 2023-06-14T17:07:52.139Z Last Updated: 2024-12-30T15:01:46.211Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
CVE ID: CVE-2022-31647 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T19:15:25.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#docker-desktop-460 - https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-2
CVE ID: CVE-2022-31648 State: PUBLISHED Published: 2022-05-26T19:07:39 Last Updated: 2024-08-03T07:26:00.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version. Additional Analyst Notes: - CVE Program Container: References: - https://talend.com - https://www.talend.com/security/incident-response/#CVE-2022-31648