Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0468 State: PUBLISHED Published: 2022-04-05T00:51:36 Last Updated: 2024-08-02T23:32:44.765Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1252716
CVE ID: CVE-2022-0469 State: PUBLISHED Published: 2022-04-05T00:51:38 Last Updated: 2024-08-02T23:32:45.346Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1279531
CVE ID: CVE-2022-0470 State: PUBLISHED Published: 2022-04-05T00:51:39 Last Updated: 2024-08-02T23:32:45.985Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1269225
CVE ID: CVE-2022-0471 State: PUBLISHED Published: 2022-04-11T14:40:46 Last Updated: 2024-08-02T23:32:44.755Z Vendors: Unknown Products: Favicon by RealFaviconGenerator Problem Types: CWE-79 Description: The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/499bfee4-b481-4276-b6ad-0eead6680f66 - https://plugins.trac.wordpress.org/changeset/2695862
CVE ID: CVE-2022-0472 State: PUBLISHED Published: 2022-02-04T22:32:06 Last Updated: 2024-08-02T23:32:45.990Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: jsdecena Products: jsdecena/laracom Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/cb5b8563-15cf-408c-9f79-4871ea0a8713 - https://github.com/jsdecena/laracom/commit/256026193ce994dc4c1365e02f414d8a0cd77ae8
CVE ID: CVE-2022-0473 State: PUBLISHED Published: 2022-02-07T10:25:11.723196Z Last Updated: 2024-09-16T23:01:44.721Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-79 Description: OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check. When used in the agent interface, malicious code might be exectued in the browser. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.31 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-01/
CVE ID: CVE-2022-0474 State: PUBLISHED Published: 2022-02-07T10:25:13.232949Z Last Updated: 2024-09-16T22:14:40.657Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: OTRSCustomContactFields Problem Types: CWE-200 Description: Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-02/
CVE ID: CVE-2022-0475 State: PUBLISHED Published: 2022-03-21T09:15:38.679984Z Last Updated: 2024-09-17T02:01:40.604Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-79 Description: Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed). The code could be executed in the Package manager. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.32 and prior versions, 8.0.x version: 8.0.19 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-05/
CVE ID: CVE-2022-0476 State: PUBLISHED Published: 2022-02-23T16:40:10 Last Updated: 2024-08-02T23:32:46.122Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-400 Description: Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/81ddfbda-6c9f-4b69-83ff-85b15141e35d - https://github.com/radareorg/radare2/commit/27fe8031782d3a06c3998eaa94354867864f9f1b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists
t.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
CVE ID: CVE-2022-0477 State: PUBLISHED Published: 2022-04-25T16:35:06 Last Updated: 2024-08-02T23:32:45.789Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14.6.4, all versions starting from 14.7.0 before 14.7.1. GitLab was not correctly handling bulk requests to delete existing packages from the package registries which could result in a Denial of Service under specific conditions. Additional Analyst Notes: - CVE Program Contai
ries which could result in a Denial of Service under specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/348166 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0477.json
CVE ID: CVE-2022-0478 State: PUBLISHED Published: 2022-03-14T14:41:34 Last Updated: 2024-08-02T23:32:45.510Z Vendors: Unknown Products: Event Manager and Tickets Selling Plugin for WooCommerce Problem Types: CWE-89 Description: The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d881d725-d06b-464f-a25e-88f41b1f431f - https://plugins.trac.wordpress
er: References: - https://wpscan.com/vulnerability/d881d725-d06b-464f-a25e-88f41b1f431f - https://plugins.trac.wordpress.org/changeset/2671860
CVE ID: CVE-2022-0479 State: PUBLISHED Published: 2022-03-28T17:22:51 Last Updated: 2024-08-02T23:32:45.723Z Vendors: Unknown Products: Popup Builder – Create highly converting, mobile friendly marketing popups. Problem Types: CWE-89 Description: The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard, leading to a SQL injection, which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0d2bbbaf-
licious link Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0d2bbbaf-fbfd-4921-ba4e-684e2e77e816 - https://plugins.trac.wordpress.org/changeset/2686454
CVE ID: CVE-2022-0480 State: PUBLISHED Published: 2022-08-29T14:03:04 Last Updated: 2024-08-02T23:32:46.033Z Vendors: n/a Products: kernel Problem Types: CWE-770 Description: A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kata-containers/kata-containers/issues/3373 - https://lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm%40linux-foundation.org/ - https://bugzilla.redhat.com/show_bug.cgi?id=2049700 - https://git.kernel.org/pub
uVc3li%25akpm%40linux-foundation.org/ - https://bugzilla.redhat.com/show_bug.cgi?id=2049700 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f12156dff2862ac54235fc72703f18770769042 - https://access.redhat.com/security/cve/CVE-2022-0480 - https://ubuntu.com/security/CVE-2022-0480
CVE ID: CVE-2022-0481 State: PUBLISHED Published: 2022-02-04T22:33:00 Last Updated: 2024-08-02T23:32:44.777Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: mruby Products: mruby/mruby Problem Types: CWE-476 Description: NULL Pointer Dereference in Homebrew mruby prior to 3.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/54725c8c-87f4-41b6-878c-01d8e0ee7027 - https://github.com/mruby/mruby/commit/ae3c99767a27f5c6c584162e2adc6a5d0eb2c54e
CVE ID: CVE-2022-0482 State: PUBLISHED Published: 2022-03-09T10:20:10 Last Updated: 2024-08-02T23:32:45.468Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: alextselegidis Products: alextselegidis/easyappointments Problem Types: CWE-359 Description: Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26 - https://github.com/alextselegidis/easyappointments/commit/44af526a6fc5e898bc1e0132b2af9eb3a9b2c466 - http://packetstormsecurity.com/files/166701/Eas
gidis/easyappointments/commit/44af526a6fc5e898bc1e0132b2af9eb3a9b2c466 - http://packetstormsecurity.com/files/166701/Easy-Appointments-Information-Disclosure.html - https://opencirt.com/hacking/securing-easy-appointments-cve-2022-0482/
CVE ID: CVE-2022-0483 State: PUBLISHED Published: 2022-02-11T17:40:41.425879Z Last Updated: 2024-09-17T00:02:11.496Z Vendors: Acronis Products: Acronis VSS Doctor Problem Types: CWE-427 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3354
CVE ID: CVE-2022-0484 State: PUBLISHED Published: 2022-02-04T22:29:20.398959Z Last Updated: 2024-09-16T16:49:13.139Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Mirantis Products: Mirantis Container Cloud Lens Extension Problem Types: CWE-20 Description: Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extensio
induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extension v3 versions prior to v3.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Mirantis/security/blob/main/advisories/0005.md
CVE ID: CVE-2022-0485 State: PUBLISHED Published: 2022-08-29T14:03:04 Last Updated: 2024-08-02T23:32:45.848Z Vendors: n/a Products: libnbd Problem Types: CWE-252 Description: A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2046194 - https://bugzilla.redhat.com/show_bug.cgi?id=2050324 - https://listman.redhat
gzilla.redhat.com/show_bug.cgi?id=2046194 - https://bugzilla.redhat.com/show_bug.cgi?id=2050324 - https://listman.redhat.com/archives/libguestfs/2022-February/msg00104.html - https://gitlab.com/nbdkit/libnbd/-/commit/8d444b41d09a700c7ee6f9182a649f3f2d325abb - https://access.redhat.com/security/cve/CVE-2022-0485
CVE ID: CVE-2022-0486 State: PUBLISHED Published: 2022-05-17T19:32:58.251916Z Last Updated: 2024-09-16T16:28:21.139Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Fidelis Cybersecurity Products: Fidelis Network, Fidelis Deception Problem Types: CWE-276 Description: Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available t
e vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://fidelissecurity.zendesk.com/hc/en-us/articles/6211730139411
CVE ID: CVE-2022-0487 State: PUBLISHED Published: 2022-02-04T22:29:21 Last Updated: 2024-08-02T23:32:45.515Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2044561 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42933c8aa14be1caa9eda41f65cde8a3a95d3e39 - https
//git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42933c8aa14be1caa9eda41f65cde8a3a95d3e39 - https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5095 - https://www.debian.org/security/2022/dsa-5096
CVE ID: CVE-2022-0488 State: PUBLISHED Published: 2022-03-28T18:53:08 Last Updated: 2024-08-02T23:32:45.231Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/23520 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0488.json
CVE ID: CVE-2022-0489 State: PUBLISHED Published: 2022-04-01T22:17:35 Last Updated: 2024-08-02T23:32:45.611Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/341832 - https://hackerone.com/reports/1350793 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-04
ssues/341832 - https://hackerone.com/reports/1350793 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0489.json
CVE ID: CVE-2022-0492 State: PUBLISHED Published: 2022-03-03T00:00:00 Last Updated: 2024-08-02T23:32:45.292Z Vendors: n/a Products: kernel Problem Types: CWE-287 Description: A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2051505 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af -
ttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af - https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5095 - https://www.debian.org/security/2022/dsa-5096 - http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html - https://security.netapp.com/advisory/ntap-20220419-0002/ - http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html - http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
CVE ID: CVE-2022-0493 State: PUBLISHED Published: 2022-03-28T17:22:54 Last Updated: 2024-08-02T23:32:45.989Z Vendors: Unknown Products: String locator Problem Types: CWE-22 Description: The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnera
f the file can be disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/21e2e5fc-03d2-4791-beef-07af6bf985ed - https://plugins.trac.wordpress.org/changeset/2685592
CVE ID: CVE-2022-0494 State: PUBLISHED Published: 2022-03-25T18:03:05 Last Updated: 2024-08-02T23:32:46.327Z Vendors: n/a Products: kernel Problem Types: CWE-200 Description: A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2039448 - https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel%40gmail.com/ - https://www.debian.org/security/2022/dsa-5161 - https://lists.debian.o
/20220216084038.15635-1-tcs.kernel%40gmail.com/ - https://www.debian.org/security/2022/dsa-5161 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-0495 State: PUBLISHED Published: 2022-09-21T08:45:20.355Z Last Updated: 2025-05-27T18:21:57.449Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Parantez Teknoloji Products: Parantez Teknoloji Problem Types: CWE-89 Description: The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-22-0635
CVE ID: CVE-2022-0496 State: PUBLISHED Published: 2022-08-29T14:03:04 Last Updated: 2024-08-02T23:32:46.180Z Vendors: n/a Products: openscad Problem Types: CWE-119 Description: A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openscad/openscad/issues/4037 - https://bugzilla.redhat.com/show_bug.cgi?id=2050695 - https://github.com/openscad/openscad/commit/770e3234cbfe66edbc0333f796b46d36a74aa652 - https://github.com/openscad/openscad/commit/00a4692989c4e2f191525f73f24ad
mit/770e3234cbfe66edbc0333f796b46d36a74aa652 - https://github.com/openscad/openscad/commit/00a4692989c4e2f191525f73f24ad8727bacdf41
CVE ID: CVE-2022-0497 State: PUBLISHED Published: 2022-08-29T14:03:04 Last Updated: 2024-08-02T23:32:46.137Z Vendors: n/a Products: openscad Problem Types: CWE-125 Description: A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openscad/openscad/issues/4043 - https://bugzilla.redhat.com/show_bug.cgi?id=2050699 - https://github.com/openscad/openscad/pull/4044
CVE ID: CVE-2022-0498 State: REJECTED Published: 2022-02-04T22:29:40 Last Updated: 2022-02-04T22:29:40 Description: No description available.
CVE ID: CVE-2022-0499 State: PUBLISHED Published: 2022-03-28T17:22:55 Last Updated: 2024-08-02T23:32:45.973Z Vendors: Unknown Products: Sermon Browser Problem Types: CWE-434, CWE-352 Description: The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e9ccf1fc-1dbf-4a41-bf4a-90af20b286d6
CVE ID: CVE-2022-0500 State: PUBLISHED Published: 2022-03-25T18:03:03 Last Updated: 2024-08-02T23:32:46.009Z Vendors: n/a Products: kernel Problem Types: CWE-119 Description: A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2044578 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=20b2aff4bc15bda809f994761d5719827d66c0b4 - https://git.kernel.
rg/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=20b2aff4bc15bda809f994761d5719827d66c0b4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=216e3cd2f28dbbf1fe86848e0e29e6693b9f0a20 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34d3a78c681e8e7844b43d1a2f4671a04249c821 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4807322660d4290ac9062c034aed6b87243861 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=48946bd6a5d695c50b34546864b79c1f910a33c1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c25b2ae136039ffa820c26138ed4a5e5f3ab3