Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212563. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/806 - https://github.com/axiomatic-systems/Bento4/files/9849116/mp42hls_ReadBits_Ap4Mp4AudioInfo66.zip - https://vuldb.com/?id.212563
CVE ID: CVE-2022-3785 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-04-15T13:22:51.619Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_DataBuffer::SetDataSize of the component Avcinfo. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212564. Additional Analyst Notes: - CVE Program Container: - CIS
ay be used. The identifier of this vulnerability is VDB-212564. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/780 - https://github.com/axiomatic-systems/Bento4/files/9658653/POC_avcinfo_15644345.zip - https://vuldb.com/?id.212564
CVE ID: CVE-2022-3786 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-11-04T19:13:08.687Z Vendors: OpenSSL Products: OpenSSL Problem Types: Buffer overflow Description: A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46)
icious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20221101.txt - https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a
CVE ID: CVE-2022-3787 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T19:34:36.964Z Vendors: n/a Products: device-mapper-multipath Problem Types: CWE-285 Description: A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead of bitwise OR. This could lead to local privilege escalation to root. Additional An
when arithmetic ADD is used instead of bitwise OR. This could lead to local privilege escalation to root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2138959
CVE ID: CVE-2022-3788 State: REJECTED Published: N/A Last Updated: 2022-11-03T00:00:00 Description: No description available.
CVE ID: CVE-2022-3789 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:22:40.385Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tim Campus Products: Confession Wall Problem Types: CWE-707 Description: A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument post_id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
d identifier of this vulnerability is VDB-212611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/whiex/-Tim-Campus-Confession-Wall - https://vuldb.com/?id.212611
CVE ID: CVE-2022-3790 State: REJECTED Published: N/A Last Updated: 2022-11-07T00:00:00 Description: No description available.
CVE ID: CVE-2022-3791 State: REJECTED Published: N/A Last Updated: 2022-11-07T00:00:00 Description: No description available.
CVE ID: CVE-2022-3792 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-09T14:07:56.308Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GullsEye Products: GullsEye terminal operating system Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.This issue affects GullsEye terminal operating system: from unspecified before 5.0.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-22-0747-2 - https://omrylmz.com/c
Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-22-0747-2 - https://omrylmz.com/cve-2022-3792-terminal-operation-system/ - https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/
CVE ID: CVE-2022-3793 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T19:22:11.846Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a GitLab CI/CD configuration file they don't have access to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/372120 - https://gitlab.
Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/372120 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3793.json
CVE ID: CVE-2022-3794 State: PUBLISHED Published: 2022-12-22T20:27:09.193Z Last Updated: 2025-01-15T15:29:26.913Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not use capability checks for this purpose. Additional Analyst Notes: - CVE Program Conta
o the site, as the plugin does not use capability checks for this purpose. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be - https://wordpress.org/plugins/jeg-elementor-kit/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2022-3796 State: REJECTED Published: N/A Last Updated: 2022-11-03T00:00:00 Description: No description available.
CVE ID: CVE-2022-3797 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:22:31.348Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: eolinker Products: apinto-dashboard Problem Types: CWE-601 Description: A vulnerability was found in eolinker apinto-dashboard. It has been rated as problematic. This issue affects some unknown processing of the file /login. The manipulation of the argument callback leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212633 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container:
used. The identifier VDB-212633 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://c2.im5i.com/2022/11/01/Xrny6.png - https://vuldb.com/?id.212633
CVE ID: CVE-2022-3798 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:21:15.747Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBAX Products: go-ibax Problem Types: CWE-707 Description: A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212634 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
d to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IBAX-io/go-ibax/issues/2060 - https://vuldb.com/?id.212634
CVE ID: CVE-2022-3799 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:20:24.701Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBAX Products: go-ibax Problem Types: CWE-707 Description: A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functionality of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212635. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
er of this vulnerability is VDB-212635. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IBAX-io/go-ibax/issues/2060 - https://vuldb.com/?id.212635
CVE ID: CVE-2022-3800 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:20:16.826Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBAX Products: go-ibax Problem Types: CWE-707 Description: A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument table_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212636. Additional Analyst Notes: - CVE Program Container: - CI
may be used. The identifier of this vulnerability is VDB-212636. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IBAX-io/go-ibax/issues/2061 - https://vuldb.com/?id.212636
CVE ID: CVE-2022-3801 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:20:57.627Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBAX Products: go-ibax Problem Types: CWE-707 Description: A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
VDB-212637 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IBAX-io/go-ibax/issues/2062 - https://vuldb.com/?id.212637
CVE ID: CVE-2022-3802 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:19:43.686Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBAX Products: go-ibax Problem Types: CWE-707 Description: A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/rowsInfo. The manipulation of the argument where leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212638 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
s the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IBAX-io/go-ibax/issues/2063 - https://vuldb.com/?id.212638
CVE ID: CVE-2022-3803 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:19:35.656Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: eolinker Products: apinto-dashboard Problem Types: CWE-707 Description: A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown processing of the file /api/discoveries/. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212639. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
ociated identifier of this vulnerability is VDB-212639. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://c2.im5i.com/2022/11/01/Xr9Zz.png - https://c2.im5i.com/2022/11/01/XroR8.png - https://vuldb.com/?id.212639
CVE ID: CVE-2022-3804 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:19:28.426Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: eolinker Products: apinto-dashboard Problem Types: CWE-707 Description: A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown function of the file /login. The manipulation of the argument callback leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212640. Additional Analyst Notes: - CVE Program Container: -
nd may be used. The identifier of this vulnerability is VDB-212640. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://c2.im5i.com/2022/11/01/Xrjjd.png - https://c2.im5i.com/2022/11/01/XrTL4.png - https://vuldb.com/?id.212640
CVE ID: CVE-2022-3805 State: PUBLISHED Published: 2022-12-22T20:26:49.998Z Last Updated: 2025-01-23T20:23:58.962Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the MailChimp API key, global styles, 404 page settings, and enabled elements. Additional Analyst
the plugin, to update the MailChimp API key, global styles, 404 page settings, and enabled elements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c9955d65-afb3-4d28-abd2-9f2fec92d013 - https://wordpress.org/plugins/jeg-elementor-kit/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2022-3806 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T19:54:53.538Z Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-415 Description: Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w525-fm68-ppq3
CVE ID: CVE-2022-3807 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:59.281Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660. Additional Analyst Notes: - CVE Program Container: - CISA AD
e used. The identifier of this vulnerability is VDB-212660. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/803 - https://github.com/axiomatic-systems/Bento4/files/9820612/mp42aac_exhaustive_AP4_RtpAtom50.zip - https://vuldb.com/?id.212660
CVE ID: CVE-2022-3808 State: REJECTED Published: N/A Last Updated: 2022-11-07T00:00:00 Description: No description available.
CVE ID: CVE-2022-3809 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:50.341Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Containe
y be used. VDB-212666 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/779 - https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip - https://vuldb.com/?id.212666
CVE ID: CVE-2022-3810 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:42.580Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667. Additional Analyst Notes: - CVE Program
and may be used. The associated identifier of this vulnerability is VDB-212667. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/779 - https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip - https://vuldb.com/?id.212667
CVE ID: CVE-2022-3811 State: PUBLISHED Published: 2023-01-23T14:31:38.895Z Last Updated: 2025-04-02T15:37:09.554Z Vendors: Unknown Products: EU Cookie Law for GDPR/CCPA Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EU Cookie Law for GDPR/CCPA WordPress plugin through 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/262924da-e269-4008-a24f-9f26a033b23e
CVE ID: CVE-2022-3812 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:20:58.336Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212678 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References
B-212678 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/792 - https://github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zip - https://vuldb.com/?id.212678
CVE ID: CVE-2022-3813 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:35.766Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
rability is VDB-212679. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/792 - https://github.com/axiomatic-systems/Bento4/files/9726974/POC_mp4edit_728838793.zip - https://vuldb.com/?id.212679
CVE ID: CVE-2022-3814 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-15T13:18:28.849Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com
VDB-212680. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/792 - https://github.com/axiomatic-systems/Bento4/files/9727002/POC_mp4decrypt_477546304.zip - https://vuldb.com/?id.212680