Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38196 State: PUBLISHED Published: 2022-10-25T16:32:04.168Z Last Updated: 2025-04-10T14:55:48.363Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-22 Description: Esri ArcGIS Server versions 10.9.1 and prior have a path traversal vulnerability that may result in a denial of service by allowing a remote, authenticated attacker to overwrite internal ArcGIS Server directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE ID: CVE-2022-38197 State: PUBLISHED Published: 2022-10-25T16:31:58.136Z Last Updated: 2025-04-10T14:55:58.805Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-601 Description: Esri ArcGIS Server versions 10.9.1 and below have an unvalidated redirect issue that may allow a remote, unauthenticated attacker to phish a user into accessing an attacker controlled website via a crafted query parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE ID: CVE-2022-38198 State: PUBLISHED Published: 2022-10-25T16:31:53.820Z Last Updated: 2025-04-10T14:56:12.281Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: There is a reflected cross site scripting issue in the Esri ArcGIS Server services directory versions 10.9.1 and below that may allow a remote, unauthenticated attacker to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/administr
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE ID: CVE-2022-38199 State: PUBLISHED Published: 2022-10-25T16:31:49.102Z Last Updated: 2025-04-10T14:56:20.074Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-494 Description: A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings against running unsigned executables downloaded from the internet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ed executables downloaded from the internet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE ID: CVE-2022-38200 State: PUBLISHED Published: 2022-10-25T16:31:44.000Z Last Updated: 2025-04-10T14:56:29.402Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-map-service-security-2022-upd
- https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-map-service-security-2022-update-1-is-now-available
CVE ID: CVE-2022-38201 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-10T14:55:25.138Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Quickcapture Problem Types: CWE-601 Description: An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/product/uncategorized/portal-for-arcgi
- CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/product/uncategorized/portal-for-arcgis-quick-capture-security-patch-is-now-available
CVE ID: CVE-2022-38202 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-10T14:55:14.901Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-23 Description: There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
rmation (not user datasets). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/arcgis-server-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38203 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:55:03.632Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Esri Products: Portal for ArcGIS Problem Types: CWE-918 Description: Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially leading to network enumeration or reading from hosts inside the network perimeter, a different issue than CVE-2022-38211 and CVE-2022-38212. Additional Analyst Notes:
hosts inside the network perimeter, a different issue than CVE-2022-38211 and CVE-2022-38212. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38204 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:54:47.617Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-79 Description: There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-
- CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38205 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:54:30.843Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-23 Description: In some non-default installations of Esri Portal for ArcGIS versions 10.9.1 and below, a directory traversal issue may allow a remote, unauthenticated attacker to traverse the file system and lead to the disclosure of sensitive data (not customer-published content). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for
CVE ID: CVE-2022-38206 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:54:18.228Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-79 Description: There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote remote, unauthenticated attacker to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis
ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38207 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:54:02.665Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-79 Description: There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote remote, unauthenticated attacker to create a crafted link which when clicked which could execute arbitrary JavaScript code in the victim’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for
CVE ID: CVE-2022-38208 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:53:49.710Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-601 Description: There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-
erences: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38209 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:53:41.363Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Quickcapture Problem Types: CWE-79 Description: There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-secu
Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38210 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:53:29.678Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-80 Description: There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security
richment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38211 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:53:17.778Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-918 Description: Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.9.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially leading to network enumeration or reading from hosts inside the network perimeter, a different issue than CVE-2022-38211 and CVE-2022-38212. Additional Analyst Notes:
CVE ID: CVE-2022-38212 State: PUBLISHED Published: 2022-12-30T05:13:00.217Z Last Updated: 2025-04-10T14:53:07.630Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Esri Products: ArcGIS Enterprise Problem Types: CWE-918 Description: Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially leading to network enumeration or reading from hosts inside the network perimeter, a different issue than CVE-2022-38211 and CVE-2022-38203. Additional Analyst Notes:
hosts inside the network perimeter, a different issue than CVE-2022-38211 and CVE-2022-38203. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2022-update-2-patch-is-now-available
CVE ID: CVE-2022-38216 State: PUBLISHED Published: 2022-08-16T00:34:54 Last Updated: 2024-08-03T10:45:53.054Z Vendors: Mapbox Products: Mapbox Problem Types: CWE-190 Description: An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds writes, potentially crashing the Mapbox process. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mapbox/mapbox-maps-android/releases/tag/android-v10.6.1
CVE ID: CVE-2022-38220 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:09:57.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.quest.com/kb/339613 - https://support.quest.com/kb/4368602/quest-response-to-kace-sma-vulnerability-cve-2022-38220
CVE ID: CVE-2022-38221 State: PUBLISHED Published: 2022-08-15T04:46:55 Last Updated: 2024-08-03T10:45:53.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://takethebait.net/discovering-a-buffer-overflow-in-the-isle-evrima-dedicated-server/
CVE ID: CVE-2022-38222 State: PUBLISHED Published: 2022-08-15T04:57:54 Last Updated: 2024-08-03T10:45:52.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42320
CVE ID: CVE-2022-38223 State: PUBLISHED Published: 2022-08-15T00:00:00.000Z Last Updated: 2025-11-04T18:14:23.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tats/w3m/issues/242 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NRRZMTLG3YT6U3PSGJOAMLDNLRF2EUOP/ - https://lists.fedoraproject.org/archives/list/pac
%40lists.fedoraproject.org/message/NRRZMTLG3YT6U3PSGJOAMLDNLRF2EUOP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKESIFZMWIFMI6DRGMUYOTVKBOSEKDXZ/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00030.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/
CVE ID: CVE-2022-38227 State: PUBLISHED Published: 2022-08-16T20:13:52 Last Updated: 2024-08-03T10:45:52.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/4
CVE ID: CVE-2022-38228 State: PUBLISHED Published: 2022-08-16T20:13:54 Last Updated: 2024-08-03T10:45:52.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/7
CVE ID: CVE-2022-38229 State: PUBLISHED Published: 2022-08-16T20:13:54 Last Updated: 2024-08-03T10:45:52.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/3
CVE ID: CVE-2022-38230 State: PUBLISHED Published: 2022-08-16T20:13:55 Last Updated: 2024-08-03T10:45:52.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/6
CVE ID: CVE-2022-38231 State: PUBLISHED Published: 2022-08-16T20:13:56 Last Updated: 2024-08-03T10:45:52.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/11
CVE ID: CVE-2022-38233 State: PUBLISHED Published: 2022-08-16T20:13:57 Last Updated: 2024-08-03T10:45:53.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/9
CVE ID: CVE-2022-38234 State: PUBLISHED Published: 2022-08-16T20:13:58 Last Updated: 2024-08-03T10:45:52.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/12
CVE ID: CVE-2022-38235 State: PUBLISHED Published: 2022-08-16T20:13:59 Last Updated: 2024-08-03T10:45:52.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/5
CVE ID: CVE-2022-38236 State: PUBLISHED Published: 2022-08-16T20:14:00 Last Updated: 2024-08-03T10:45:53.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/8
CVE ID: CVE-2022-38237 State: PUBLISHED Published: 2022-08-16T20:14:01 Last Updated: 2024-08-03T10:45:52.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/14
CVE ID: CVE-2022-38238 State: PUBLISHED Published: 2022-08-16T20:14:02 Last Updated: 2024-08-03T10:45:53.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhcloos/xpdf/issues/15
CVE ID: CVE-2022-38247 State: PUBLISHED Published: 2022-09-07T21:14:41 Last Updated: 2024-08-03T10:45:52.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Settings page under the Admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7
CVE ID: CVE-2022-38248 State: PUBLISHED Published: 2022-09-07T21:14:40 Last Updated: 2024-08-03T10:45:53.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at auditlog.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7
CVE ID: CVE-2022-38249 State: PUBLISHED Published: 2022-09-07T21:14:39 Last Updated: 2024-08-03T10:45:52.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7
CVE ID: CVE-2022-38250 State: PUBLISHED Published: 2022-09-07T21:14:39 Last Updated: 2024-08-03T10:45:52.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7