Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4779 State: PUBLISHED Published: 2022-12-28T14:20:49.370Z Last Updated: 2025-04-10T20:33:55.806Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: elvexys Products: StreamX Problem Types: n/a Description: StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme. StreamX applications using StreamView HTML component with the public web server feature activated are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/streamx-release-notes/
CVE ID: CVE-2022-4780 State: PUBLISHED Published: 2022-12-28T14:21:36.185Z Last Updated: 2025-04-10T20:31:03.789Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: elvexys Products: ISOS Problem Types: n/a Description: ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/isos-release-notes/
CVE ID: CVE-2022-4781 State: PUBLISHED Published: 2023-01-30T20:31:52.742Z Last Updated: 2025-03-27T15:43:10.003Z Vendors: Unknown Products: Accordion Shortcodes Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a2803027-b822-4bf9-8d1d-6f538681af9d
CVE ID: CVE-2022-4782 State: PUBLISHED Published: 2023-08-16T11:03:19.513Z Last Updated: 2024-10-08T19:57:54.591Z Vendors: Unknown Products: ClickFunnels Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d3a0468a-8405-4b6c-800f-abd5ce5387b5
CVE ID: CVE-2022-4783 State: PUBLISHED Published: 2023-02-13T14:32:00.140Z Last Updated: 2025-03-21T14:37:51.079Z Vendors: Unknown Products: Youtube Channel Gallery Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Youtube Channel Gallery WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/38e4c7fe-94d5-48b9-8659-e114cbbb4252
CVE ID: CVE-2022-4784 State: PUBLISHED Published: 2023-02-21T08:50:50.067Z Last Updated: 2025-03-14T13:56:39.577Z Vendors: Unknown Products: Hueman Addons Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a30c6f1e-62fd-493d-ad5e-1b55ceec62a9
CVE ID: CVE-2022-4785 State: PUBLISHED Published: 2023-02-21T08:50:46.088Z Last Updated: 2025-03-14T18:13:35.494Z Vendors: Unknown Products: Video Sidebar Widgets Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/61873267-9f4f-4be5-bad6-95229ad54b99
CVE ID: CVE-2022-4786 State: PUBLISHED Published: 2023-02-21T08:50:58.955Z Last Updated: 2025-03-13T19:45:40.801Z Vendors: Unknown Products: Video.js Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fdad356f-cae4-4390-9a62-605201cee0c0
CVE ID: CVE-2022-4787 State: PUBLISHED Published: 2023-01-30T20:31:44.864Z Last Updated: 2025-03-27T19:37:17.171Z Vendors: Unknown Products: Themify Shortcodes Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: Themify Shortcodes WordPress plugin before 2.0.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2ab59972-ccfd-48f6-b879-58fb38823ca5
CVE ID: CVE-2022-4788 State: PUBLISHED Published: 2023-02-27T15:24:34.916Z Last Updated: 2025-03-11T02:54:58.108Z Vendors: Unknown Products: Embed PDF Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2a162365-5a86-423d-b7c4-55c9b4d8b024
CVE ID: CVE-2022-4789 State: PUBLISHED Published: 2023-01-23T14:31:35.579Z Last Updated: 2025-04-02T15:45:53.211Z Vendors: Unknown Products: WPZOOM Portfolio Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5e816e9a-84e5-42d2-a7ff-e46be9072278
CVE ID: CVE-2022-4790 State: PUBLISHED Published: 2023-01-23T14:31:50.455Z Last Updated: 2025-04-02T14:48:25.219Z Vendors: Unknown Products: WP Google My Business Auto Publish Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c01f9d36-955d-432c-8a09-ea9ee750f1a1
CVE ID: CVE-2022-4791 State: PUBLISHED Published: 2023-02-21T08:50:51.637Z Last Updated: 2025-03-14T13:46:20.200Z Vendors: Unknown Products: Product Slider and Carousel with Category for WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0a6e4c45-3f6d-4150-9546-141c2e3a1782
CVE ID: CVE-2022-4792 State: PUBLISHED Published: 2023-01-30T20:31:41.127Z Last Updated: 2025-03-27T19:57:05.700Z Vendors: Unknown Products: News & Blog Designer Pack Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/13304aca-0722-4bd9-b443-a5fed1ce22da
CVE ID: CVE-2022-4793 State: PUBLISHED Published: 2023-01-30T20:31:38.510Z Last Updated: 2025-03-27T20:48:09.160Z Vendors: Unknown Products: Blog Designer Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Blog Designer WordPress plugin before 2.4.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/00c34ba8-b82e-4bb9-90b1-1afefae75948
CVE ID: CVE-2022-4794 State: PUBLISHED Published: 2023-01-30T20:31:32.385Z Last Updated: 2025-03-28T14:20:43.549Z Vendors: Unknown Products: AAWP Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/feb4580d-df15-45c8-b59e-ad406e4b064c
CVE ID: CVE-2022-4795 State: PUBLISHED Published: 2023-02-27T15:24:27.526Z Last Updated: 2025-03-10T18:08:40.000Z Vendors: Unknown Products: Galleries by Angie Makes Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5052e60f-59ea-4758-8af3-112285a18639
CVE ID: CVE-2022-4796 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:02:52.041Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: usememos Products: usememos/memos Problem Types: CWE-648 Description: Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/efe8001b-1d6a-41af-a64c-736705cc66a6
CVE ID: CVE-2022-4797 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:02:23.550Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/5233f76f-016b-4c65-b019-2c5d27802a1b - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53
CVE ID: CVE-2022-4798 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:01:21.680Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/e12eed25-1a8e-4ee1-b846-2d4df1db2fae
CVE ID: CVE-2022-4799 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:00:19.635Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/c5d70f9d-b7a7-4418-9368-4566a8143e79
CVE ID: CVE-2022-4800 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T17:59:35.769Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-940 Description: Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/aa45a6eb-cc38-45e5-a301-221ef43c0ef8
CVE ID: CVE-2022-4801 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T17:58:44.752Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-1220 Description: Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/b0795261-0f97-4f0b-be44-9dc079e01593
CVE ID: CVE-2022-4802 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T17:57:48.389Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/d47d4a94-92e3-4400-b012-a8577cbd7956
CVE ID: CVE-2022-4803 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T17:56:09.466Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/0fba72b9-db10-4d9f-a707-2acf2004a286
CVE ID: CVE-2022-4804 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:45:38.972Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: usememos Products: usememos/memos Problem Types: CWE-285 Description: Improper Authorization in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/4ee48a1e-6332-4d95-a360-9c392643c533
CVE ID: CVE-2022-4805 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:44:53.097Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-648 Description: Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/b03f6a9b-e49b-42d6-a318-1d7afd985873
CVE ID: CVE-2022-4806 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:16:21.845Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/2c7101bc-e6d8-4cd0-9003-bc8d86f4e4be
CVE ID: CVE-2022-4807 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:15:53.221Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-284 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/704c9ed7-2120-47ea-aaf0-5fdcbd492954
CVE ID: CVE-2022-4808 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:14:41.845Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-269 Description: Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/11877cbf-fcaf-42ef-813e-502c7293f2b5
CVE ID: CVE-2022-4809 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T18:14:08.773Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-284 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/e46c5380-a590-40de-a8e5-79872ee0bb29
CVE ID: CVE-2022-4810 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:43:57.084Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-284 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/f0c8d778-db86-4ed3-85bb-5315ab56915e
CVE ID: CVE-2022-4811 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:43:23.786Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/e907b754-4f33-46b6-9dd2-0d2223cb060c
CVE ID: CVE-2022-4812 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:42:45.508Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/33924891-5c36-4b46-b417-98eaab688c4c
CVE ID: CVE-2022-4813 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:41:06.432Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-1220 Description: Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/a24b45d8-554b-4131-8ce1-f33bf8cdbacc
CVE ID: CVE-2022-4814 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T16:40:29.814Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-284 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53 - https://huntr.dev/bounties/e65b3458-c2e2-4c0b-9029-e3c9ee015ae4
CVE ID: CVE-2022-4815 State: PUBLISHED Published: 2023-05-24T21:30:37.243Z Last Updated: 2025-01-16T15:29:21.796Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-502 Description: Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14455879270285-IMPORTANT-Resolved-Pentaho-BA-Server-Deserialization-of-Untru
tps://support.pentaho.com/hc/en-us/articles/14455879270285-IMPORTANT-Resolved-Pentaho-BA-Server-Deserialization-of-Untrusted-Data-Versions-before-9-4-0-1-and-9-3-0-3-including-8-3-x-Impacted-CVE-2022-4815-
CVE ID: CVE-2022-4816 State: PUBLISHED Published: 2023-01-23T16:35:48.549Z Last Updated: 2025-04-02T15:28:28.728Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Safecenter Problem Types: CWE-400 Description: A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/dc_205899.html
CVE ID: CVE-2022-4817 State: PUBLISHED Published: 2022-12-28T18:22:43.535Z Last Updated: 2025-04-10T16:39:50.756Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: centic9 Products: jgit-cookbook Problem Types: CWE-377 Description: A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc704708d598c60ac1881db7cf8e9c3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216988. Additional Analyst Notes: - CVE Program Contain