Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ity of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.13.4 as soon as possible (available in SICK Support Portal). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt
CVE ID: CVE-2022-47378 State: PUBLISHED Published: 2023-05-15T09:30:22.173Z Last Updated: 2025-03-05T19:01:14.095Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Contr
or Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-20 Description: Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47379 State: PUBLISHED Published: 2023-05-15T09:33:41.697Z Last Updated: 2025-03-05T19:01:07.355Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-787 Description: An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47380 State: PUBLISHED Published: 2023-05-15T09:40:44.538Z Last Updated: 2025-03-05T19:00:59.205Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-787 Description: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47381 State: PUBLISHED Published: 2023-05-15T09:41:51.613Z Last Updated: 2025-03-05T19:00:50.181Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47382 State: PUBLISHED Published: 2023-05-15T09:42:48.212Z Last Updated: 2025-03-05T19:00:42.862Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-787 Description: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a1
nrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47383 State: PUBLISHED Published: 2023-05-15T09:44:53.440Z Last Updated: 2025-03-05T19:00:34.790Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-787 Description: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a
lnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47384 State: PUBLISHED Published: 2023-05-15T09:46:29.134Z Last Updated: 2025-03-05T19:00:27.725Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47385 State: PUBLISHED Published: 2023-05-15T09:47:18.175Z Last Updated: 2025-03-05T19:00:21.424Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-787 Description: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a
CVE ID: CVE-2022-47386 State: PUBLISHED Published: 2023-05-15T09:49:04.949Z Last Updated: 2025-03-05T19:00:14.509Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47387 State: PUBLISHED Published: 2023-05-15T09:54:41.625Z Last Updated: 2025-03-05T19:00:07.443Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47388 State: PUBLISHED Published: 2023-05-15T09:56:43.518Z Last Updated: 2025-03-05T18:59:57.472Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47389 State: PUBLISHED Published: 2023-05-15T09:57:37.177Z Last Updated: 2025-03-05T18:59:49.436Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47390 State: PUBLISHED Published: 2023-05-15T09:58:21.588Z Last Updated: 2025-03-05T18:59:40.115Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control
CVE ID: CVE-2022-47391 State: PUBLISHED Published: 2023-05-15T09:59:52.803Z Last Updated: 2025-01-23T19:19:22.826Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS Edge Gateway for Windows, CODESYS Gateway, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200
CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Edge Gateway for Linux Problem Types: CWE-20 Description: In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17555&token=212fc7e39bdd260cab6d6ca84333d42f50bcb3
erences: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17555&token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da&download=
CVE ID: CVE-2022-47392 State: PUBLISHED Published: 2023-05-15T10:01:09.224Z Last Updated: 2025-03-05T18:59:32.783Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Contr
or Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-20 Description: An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47393 State: PUBLISHED Published: 2023-05-15T10:03:58.680Z Last Updated: 2025-03-05T18:59:25.695Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control Runtime System Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Contr
or Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-119 Description: An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
CVE ID: CVE-2022-47395 State: PUBLISHED Published: 2023-01-18T00:45:32.175Z Last Updated: 2025-01-16T21:59:46.547Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Sewio Products: RTLS Studio Problem Types: CWE-352 Description: Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its monitor services. An attacker could take advantage of this vulnerability to execute arbitrary maintenance operations and cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/ics
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01
CVE ID: CVE-2022-47396 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:10.428Z Description: No description available.
CVE ID: CVE-2022-47397 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:09.987Z Description: No description available.
CVE ID: CVE-2022-47398 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:09.554Z Description: No description available.
CVE ID: CVE-2022-47399 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:09.112Z Description: No description available.
CVE ID: CVE-2022-47400 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:08.671Z Description: No description available.
CVE ID: CVE-2022-47401 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:08.223Z Description: No description available.
CVE ID: CVE-2022-47402 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:07.756Z Description: No description available.
CVE ID: CVE-2022-47403 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:07.287Z Description: No description available.
CVE ID: CVE-2022-47404 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:06.843Z Description: No description available.
CVE ID: CVE-2022-47405 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:06.388Z Description: No description available.
CVE ID: CVE-2022-47406 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T19:04:25.987Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2022-016
CVE ID: CVE-2022-47407 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T18:59:40.712Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2022-018
CVE ID: CVE-2022-47408 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T18:57:29.737Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE ID: CVE-2022-47409 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T18:52:05.710Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE ID: CVE-2022-47410 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T18:50:17.594Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE ID: CVE-2022-47411 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-21T18:48:59.134Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2022-017