Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ept, read, or modify network communications to and from the affected service. In the case of AtlasDB, the vulnerability was mitigated by other network controls such as two-way TLS when deployed as part of a Palantir platform. Palantir still recommends upgrading to a non-vulnerable version out of an abundance of caution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-15.md
CVE ID: CVE-2022-27891 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T15:42:29.325Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Palantir Products: Gotham Problem Types: CWE-200 Description: Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham instances. It is highly recommended that customers upgrade all affected services to the latest version. This issue affects: Palantir Gotham versions prior to 103.30221005.0. Additional Analyst Notes: - CVE Program Containe
. This issue affects: Palantir Gotham versions prior to 103.30221005.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-10.md
CVE ID: CVE-2022-27892 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T15:08:50.897Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Palantir Products: Gotham Problem Types: CWE-20 Description: Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md
CVE ID: CVE-2022-27893 State: PUBLISHED Published: 2022-11-04T16:05:08.352Z Last Updated: 2025-05-02T18:28:49.692Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Palantir Products: Foundry Magritte plugin osisoft-pi-web-connector Problem Types: CWE-532 Description: The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-03.md
CVE ID: CVE-2022-27894 State: PUBLISHED Published: 2022-11-04T17:15:11.731Z Last Updated: 2025-05-02T18:29:43.563Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Palantir Products: Foundry Blobster Service Problem Types: CWE-79 Description: The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-04.md
CVE ID: CVE-2022-27895 State: PUBLISHED Published: 2022-11-15T19:45:12.275Z Last Updated: 2025-04-29T20:08:00.710Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Palantir Products: Foundry Build2 Problem Types: CWE-532 Description: Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-06.md
CVE ID: CVE-2022-27896 State: PUBLISHED Published: 2022-11-14T20:55:11.191Z Last Updated: 2025-04-30T15:00:56.865Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Palantir Products: Foundry Code-Workbooks Problem Types: CWE-532 Description: Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is
de-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-08.md
CVE ID: CVE-2022-27897 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T15:08:30.897Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Palantir Products: Gotham Problem Types: CWE-20 Description: Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources on the dispatch server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022
Container: - CISA ADP Vulnrichment: References: - https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-12.md
CVE ID: CVE-2022-27902 State: REJECTED Published: 2022-04-12T15:03:37 Last Updated: 2022-04-12T15:03:37 Description: No description available.
CVE ID: CVE-2022-27903 State: PUBLISHED Published: 2022-05-04T13:16:52 Last Updated: 2024-08-03T05:41:10.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files. Additional Analyst Notes: - CVE Program Container: References: - https://www.eve-ng.net/ - https://www.eve-ng.net/index.php/documentation/release-notes/
CVE ID: CVE-2022-27904 State: PUBLISHED Published: 2022-06-30T23:25:09 Last Updated: 2024-08-03T05:41:10.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process. Additional Analyst Notes: - CVE Program Container: References: - https://automox.com - https://www.automox.com/security/security-bulletin
CVE ID: CVE-2022-27905 State: PUBLISHED Published: 2022-04-27T13:59:10 Last Updated: 2024-08-03T05:41:10.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive (C:\) to exploit this. Additional Analyst Notes: - CVE Program Container: References: - https://www.controlup.com/security/cve-2022-27905/
CVE ID: CVE-2022-27906 State: PUBLISHED Published: 2022-03-25T19:36:10 Last Updated: 2024-08-03T05:41:10.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code path, the attacker has to know one of the configured Odette IDs of the OFTP2 server. An attacker can upload files to the server outside of the intended upload directory. Additional Analyst Notes: - CVE Program Container: References: - https://insinuator.net/2022/03/a-tale-of-an-oftp2-vulnerability/ - https://mendelson-e-c.com/node/3355
CVE ID: CVE-2022-27907 State: PUBLISHED Published: 2022-03-30T15:51:37 Last Updated: 2024-08-03T05:41:11.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://sonatype.com - https://support.sonatype.com/hc/en-us/articles/5011047953555
CVE ID: CVE-2022-27908 State: PUBLISHED Published: 2022-04-18T12:17:13 Last Updated: 2024-08-03T05:41:10.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/security-updates/cve-2022-27908.html
CVE ID: CVE-2022-27909 State: PUBLISHED Published: 2022-05-06T17:55:12.660124Z Last Updated: 2024-09-16T19:19:03.215Z Vendors: jDownloads Products: jDownloads Problem Types: Incorrect Access Control Description: In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files Additional Analyst Notes: - CVE Program Container: References: - https://www.jdownloads.com/index.php/downloads/download/57-jdownloads-3-9.html - https://hackerhood.redhotcyber.com/cve-2022-27909-jdownloads/
CVE ID: CVE-2022-27910 State: PUBLISHED Published: 2022-07-10T19:35:10.278338Z Last Updated: 2024-09-16T22:03:26.438Z Vendors: Joomlatools Products: DOCman Problem Types: Reflected Cross-Site Scripting (XSS) Description: In Joomla component 'Joomlatools - DOCman 3.5.13 (and likely most versions below)' are affected to an reflected Cross-Site Scripting (XSS) in an image upload function Additional Analyst Notes: - CVE Program Container: References: - https://www.joomlatools.com/extensions/docman/changelog/3.5.14
CVE ID: CVE-2022-27911 State: PUBLISHED Published: 2022-08-31T10:00:14.200946Z Last Updated: 2024-09-16T22:36:40.634Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: FPD Description: An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing '_JEXEC or die check' caused by the PSR12 changes. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/884-20220801-core-multiple-full-path-disclosures-because-of-missing-jexec-or-die-check.html
CVE ID: CVE-2022-27912 State: PUBLISHED Published: 2022-10-25T19:00:14.614946Z Last Updated: 2024-09-16T22:31:14.253Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Information Disclosure Description: An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/885-20221001-core-disclosure-of-critical-information-in-debug-mode.html
CVE ID: CVE-2022-27913 State: PUBLISHED Published: 2022-10-25T19:00:15.710464Z Last Updated: 2024-09-16T17:15:02.209Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Reflected Cross-Site Scripting (XSS) Description: An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/886-20221002-core-reflected-xss-in-various-components.html
CVE ID: CVE-2022-27914 State: PUBLISHED Published: 2022-11-08T18:50:10.534726Z Last Updated: 2024-11-26T04:35:20.023Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Reflected Cross-Site Scripting (XSS) Description: An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in com_media. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.joomla.org/security-centre/887-20221101-core-rxss-through-reflection-of-user-input-in-com-media.html
CVE ID: CVE-2022-27915 State: REJECTED Published: N/A Last Updated: 2023-01-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-27916 State: REJECTED Published: N/A Last Updated: 2023-01-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-27917 State: REJECTED Published: N/A Last Updated: 2023-01-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-27918 State: REJECTED Published: N/A Last Updated: 2023-01-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-27919 State: PUBLISHED Published: 2022-03-25T19:55:17 Last Updated: 2024-08-03T05:41:11.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API. Additional Analyst Notes: - CVE Program Container: References: - https://security.gradle.com/advisory/2022-05
CVE ID: CVE-2022-27920 State: PUBLISHED Published: 2022-03-25T20:00:38 Last Updated: 2024-08-03T05:41:10.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kiwix/libkiwix/pull/721 - https://github.com/kiwix/libkiwix/issues/728 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KD4KX5N2PGMIOQR2IZWEUTZCCTPWU3EJ/
CVE ID: CVE-2022-27924 State: PUBLISHED Published: 2022-04-20T23:23:17.000Z Last Updated: 2025-10-21T23:15:41.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
CVE ID: CVE-2022-27925 State: PUBLISHED Published: 2022-04-20T23:23:25.000Z Last Updated: 2025-10-21T23:15:41.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24 - http:/
isories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24 - http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html
CVE ID: CVE-2022-27926 State: PUBLISHED Published: 2022-04-20T23:23:40.000Z Last Updated: 2025-10-21T23:15:40.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
CVE ID: CVE-2022-27927 State: PUBLISHED Published: 2022-04-19T12:32:00 Last Updated: 2024-08-03T05:41:11.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14822/microfinance-management-system.html - https://github.com/erengozaydin/Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated - http://packetstorm
ub.com/erengozaydin/Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated - http://packetstormsecurity.com/files/167017/Microfinance-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2022-27928 State: PUBLISHED Published: 2022-07-17T20:32:37 Last Updated: 2024-08-03T05:41:11.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27928
CVE ID: CVE-2022-27929 State: PUBLISHED Published: 2022-07-17T20:37:54 Last Updated: 2024-08-03T05:41:11.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27929
CVE ID: CVE-2022-27930 State: PUBLISHED Published: 2022-07-17T20:41:15 Last Updated: 2024-08-03T05:41:10.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27930
CVE ID: CVE-2022-27931 State: PUBLISHED Published: 2022-07-17T20:44:05 Last Updated: 2024-08-03T05:41:10.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27931
CVE ID: CVE-2022-27932 State: PUBLISHED Published: 2022-07-17T20:47:05 Last Updated: 2024-08-03T05:41:10.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27932
CVE ID: CVE-2022-27933 State: PUBLISHED Published: 2022-07-17T20:49:09 Last Updated: 2024-08-03T05:41:11.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27933
CVE ID: CVE-2022-27934 State: PUBLISHED Published: 2022-07-17T20:51:54 Last Updated: 2024-08-03T05:41:10.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27934
CVE ID: CVE-2022-27935 State: PUBLISHED Published: 2022-07-17T20:55:11 Last Updated: 2024-08-03T05:41:10.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27935
CVE ID: CVE-2022-27936 State: PUBLISHED Published: 2022-07-17T20:58:22 Last Updated: 2024-08-03T05:41:11.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27936
CVE ID: CVE-2022-27937 State: PUBLISHED Published: 2022-07-17T21:00:30 Last Updated: 2024-08-03T05:41:11.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27937
CVE ID: CVE-2022-27938 State: PUBLISHED Published: 2022-03-26T12:49:51 Last Updated: 2024-08-03T05:41:10.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/163
CVE ID: CVE-2022-27939 State: PUBLISHED Published: 2022-03-26T00:00:00 Last Updated: 2024-08-03T05:41:10.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/717 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announ
doraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-27940 State: PUBLISHED Published: 2022-03-26T00:00:00 Last Updated: 2024-08-03T05:41:10.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/718 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-27941 State: PUBLISHED Published: 2022-03-26T00:00:00 Last Updated: 2024-08-03T05:41:11.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/716 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/p
ce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08