Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36021 State: PUBLISHED Published: 2023-03-01T15:46:23.567Z Last Updated: 2025-03-07T21:05:01.416Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: redis Products: redis Problem Types: CWE-407 Description: Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11, 7.0.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/redis/redis/secu
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/redis/redis/security/advisories/GHSA-jr7j-rfj5-8xqv - https://github.com/redis/redis/commit/dcbfcb916ca1a269b3feef86ee86835294758f84
CVE ID: CVE-2022-36022 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-04-23T16:39:29.662Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: eclipse Products: deeplearning4j Problem Types: CWE-344 Description: Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples. This is likely affect people who use some older NLP examples that reference an old S3 bucket. The problem has been patched. Users should upgrade to snapshots as Deeplearning
xamples that reference an old S3 bucket. The problem has been patched. Users should upgrade to snapshots as Deeplearning4J plan to publish a release with the fix at a later date. As a workaround, download a word2vec google news vector from a new source using git lfs from here. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eclipse/deeplearning4j/security/advisories/GHSA-rc39-g977-687w - https://github.com/mmihaltz/word2vec-GoogleNews-vectors
CVE ID: CVE-2022-36023 State: PUBLISHED Published: 2022-08-18T00:00:00.000Z Last Updated: 2025-04-23T17:49:14.987Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: hyperledger Products: fabric Problem Types: CWE-20 Description: Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns an error to the gateway client. There are no known workarounds, users must upgrade to version 2.4.6. Additional Analyst Notes: - CVE Program Cont
lient. There are no known workarounds, users must upgrade to version 2.4.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hyperledger/fabric/security/advisories/GHSA-qj6r-fhrc-jj5r - https://github.com/hyperledger/fabric/releases/tag/v2.4.6 - https://github.com/hyperledger/fabric/pull/3572 - https://github.com/hyperledger/fabric/pull/3576 - https://github.com/hyperledger/fabric/pull/3577
CVE ID: CVE-2022-36024 State: PUBLISHED Published: 2022-08-18T14:45:17.000Z Last Updated: 2025-04-23T17:49:06.683Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Pycord-Development Products: pycord Problem Types: CWE-862, CWE-284 Description: py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to
ected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Pycord-Development/pycord/security/advisories/GHSA-qmhj-m29v-gvmr - https://github.com/Pycord-Development/pycord/pull/1568
CVE ID: CVE-2022-36025 State: PUBLISHED Published: 2022-09-24T02:00:13.000Z Last Updated: 2025-04-23T16:55:35.732Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: hyperledger Products: besu Problem Types: CWE-681, CWE-196 Description: Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An error in 32 bit signed and unsigned types in the calculation of available gas in the CALL operations (including DELEGATECALL) results in incorrect gas being passed into called contracts and incorrect gas being returned after call execution. Where the amount of gas makes
being passed into called contracts and incorrect gas being returned after call execution. Where the amount of gas makes a difference in the success or failure, or if the gas is a negative 64 bit value, the execution will result in a different state root than expected, resulting in a consensus failure in networks with multiple EVM implementations. In networks with a single EVM implementation this can be used to execute with significantly more gas than then transaction requested, possibly exceeding gas limitations. This issue is patched in version 22.7.1. As a workaround, reverting to version 22.1.3 or earlier will prevent incorrect execution. Additional Analyst Notes: - CVE Program Container:
erting to version 22.1.3 or earlier will prevent incorrect execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hyperledger/besu/security/advisories/GHSA-4456-w38r-m53x
CVE ID: CVE-2022-36026 State: PUBLISHED Published: 2022-09-16T22:05:20.000Z Last Updated: 2025-04-23T17:01:11.089Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-617 Description: TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits` input tensor, it results in a `CHECK` fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit f3f9cb38ecfe5a8a703f2c4a8fead434ef291713. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and Tens
ll be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9cr2-8pwr-fhfq - https://github.com/tensorflow/tensorflow/commit/f3f9cb38ecfe5a8a703f2c4a8fead434ef291713
CVE ID: CVE-2022-36027 State: PUBLISHED Published: 2022-09-16T22:50:16.000Z Last Updated: 2025-04-22T17:21:16.099Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-20 Description: TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. We have patched the issue in GitHub commit aa0b852a4588cea4d36b74feb05d93055540b450. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are
w 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-79h2-q768-fpxr - https://github.com/tensorflow/tensorflow/issues/53767 - https://github.com/tensorflow/tensorflow/commit/aa0b852a4588cea4d36b74feb05d93055540b450
CVE ID: CVE-2022-36028 State: PUBLISHED Published: 2024-04-25T20:36:37.543Z Last Updated: 2024-08-03T09:51:59.902Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: bigbluebutton Products: greenlight Problem Types: CWE-601 Description: Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps:// - https://github.com/big
ontainer: References: - https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps:// - https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623
CVE ID: CVE-2022-36029 State: PUBLISHED Published: 2024-04-25T20:42:15.171Z Last Updated: 2024-08-29T20:11:18.365Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: bigbluebutton Products: greenlight Problem Types: CWE-601 Description: Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps:// - https://github.com/big
richment: References: - https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps:// - https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623
CVE ID: CVE-2022-36030 State: PUBLISHED Published: 2022-08-19T23:35:08.000Z Last Updated: 2025-04-23T17:47:57.645Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vinsdragonis Products: Project-Nexus Problem Types: CWE-89 Description: Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vinsdragonis/Project-Nexus/security/a
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vinsdragonis/Project-Nexus/security/advisories/GHSA-3pv7-25cc-mjvv
CVE ID: CVE-2022-36031 State: PUBLISHED Published: 2022-08-19T20:40:09.000Z Last Updated: 2025-04-22T17:41:24.772Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: directus Products: directus Problem Types: CWE-755 Description: Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the `filename_disk` value to a folder and accessing that file through the `/assets` endpoint. This vulnerability has been patched and release v9.15.0 contains the fix. Users are advised to upgrade. Users unable to upgrade may prevent this problem by making sure no (untrusted) non-admi
x. Users are advised to upgrade. Users unable to upgrade may prevent this problem by making sure no (untrusted) non-admin users have permissions to update the `filename_disk` field on `directus_files`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-77qm-wvqq-fg79
CVE ID: CVE-2022-36032 State: PUBLISHED Published: 2022-09-06T18:20:13.000Z Last Updated: 2025-04-23T17:14:48.031Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: reactphp Products: http Problem Types: CWE-20, CWE-565 Description: ReactPHP HTTP is a streaming HTTP client and server implementation for ReactPHP. In ReactPHP's HTTP server component versions starting with 0.7.0 and prior to 1.7.0, when ReactPHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like `__Host-` and `__Secure-` confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie whi
`__Secure-` confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. This issue is fixed in ReactPHP HTTP version 1.7.0. As a workaround, Infrastructure or DevOps can place a reverse proxy in front of the ReactPHP HTTP server to filter out any unexpected `Cookie` request headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/reactphp/http/security/advisories/GHSA-w3w9-vrf5-8mx8 - https://github.com/reactphp/http/pull/175 - https://github.com/reactphp/http/commit/663c9a3b77b71463fa7fcb76a6676ffd16979dd6 - https://github.com/reactphp/http/releases/tag/v
thub.com/reactphp/http/commit/663c9a3b77b71463fa7fcb76a6676ffd16979dd6 - https://github.com/reactphp/http/releases/tag/v1.7.0
CVE ID: CVE-2022-36033 State: PUBLISHED Published: 2022-08-29T00:00:00.000Z Last Updated: 2025-04-22T17:41:13.666Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: jhy Products: jsoup Problem Types: CWE-87, CWE-79 Description: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default `SafeList.preserveRelativeLinks` option is enabled, HTML including `javascript:` URLs that have been crafted with control characters will not be sanitized. I
on is enabled, HTML including `javascript:` URLs that have been crafted with control characters will not be sanitized. If the site that this HTML is published on does not set a Content Security Policy, an XSS attack is then possible. This issue is patched in jsoup 1.15.3. Users should upgrade to this version. Additionally, as the unsanitized input may have been persisted, old content should be cleaned again using the updated version. To remediate this issue without immediately upgrading: - disable `SafeList.preserveRelativeLinks`, which will rewrite input URLs as absolute URLs - ensure an appropriate [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) is defined.
RLs - ensure an appropriate [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) is defined. (This should be used regardless of upgrading, as a defence-in-depth best practice.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369 - https://github.com/jhy/jsoup/releases/tag/jsoup-1.15.3 - https://jsoup.org/news/release-1.15.3 - https://security.netapp.com/advisory/ntap-20221104-0006/
CVE ID: CVE-2022-36034 State: PUBLISHED Published: 2022-08-29T16:50:09.000Z Last Updated: 2025-04-23T17:47:33.540Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: cainthebest Products: nitrado.js Problem Types: CWE-400, CWE-1333 Description: nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cainthebest/nitrado.js/security/advisories/GHSA-vqc4-v8hc-h2jg - https://github.com/cai
References: - https://github.com/cainthebest/nitrado.js/security/advisories/GHSA-vqc4-v8hc-h2jg - https://github.com/cainthebest/nitrado.js/blob/v0.2.5/CHANGELOG.md
CVE ID: CVE-2022-36035 State: PUBLISHED Published: 2022-08-31T14:55:09.000Z Last Updated: 2025-04-23T17:47:18.679Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: fluxcd Products: flux2 Problem Types: CWE-22 Description: Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allows other applications to replace the Flux deployment information with arbitrary content which is deployed into the target Kubernetes cluster instead.
ace the Flux deployment information with arbitrary content which is deployed into the target Kubernetes cluster instead. The vulnerability is due to the improper handling of user-supplied input, which results in a path traversal that can be controlled by the attacker. Users sharing the same shell between other applications and the Flux CLI commands could be affected by this vulnerability. In some scenarios no errors may be presented, which may cause end users not to realize that something is amiss. A safe workaround is to execute Flux CLI in ephemeral and isolated shell environments, which can ensure no persistent values exist from previous processes. However, upgrading to the latest version
ironments, which can ensure no persistent values exist from previous processes. However, upgrading to the latest version of the CLI is still the recommended mitigation strategy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluxcd/flux2/security/advisories/GHSA-xwf3-6rgv-939r - https://github.com/fluxcd/flux2/releases/tag/v0.32.0
CVE ID: CVE-2022-36036 State: PUBLISHED Published: 2022-08-29T17:20:10.000Z Last Updated: 2025-04-22T17:41:03.862Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: sjwall Products: mdx-mermaid Problem Types: CWE-94 Description: mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This vulnerability was patched in version(s) 1.3.0 and 2.0.0-rc2. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP
0 and 2.0.0-rc2. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sjwall/mdx-mermaid/security/advisories/GHSA-rvgm-35jw-q628 - https://github.com/sjwall/mdx-mermaid/commit/f2b99386660fd13316823529c3f1314ebbcdfd2a
CVE ID: CVE-2022-36037 State: PUBLISHED Published: 2022-08-29T17:35:09.000Z Last Updated: 2025-04-23T17:47:26.361Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: getkirby Products: kirby Problem Types: CWE-79 Description: kirby is a content management system (CMS) that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting (XSS) is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel, a harmful script can for example trigger requests to Kirby's API with the permissions of the victim. If bad actors gain access to your group
for example trigger requests to Kirby's API with the permissions of the victim. If bad actors gain access to your group of authenticated Panel users they can escalate their privileges via the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible. The multiselect field allows selection of tags from an autocompleted list. Unfortunately, the Panel in Kirby 3.5 used HTML rendering for the raw option value. This allowed **attackers with influence on the options source** to store HTML code. The browser of the victim who visited a page with manipulated multiselect options in the Panel will then have rendered this malicious HTML code when the victim op
ge with manipulated multiselect options in the Panel will then have rendered this malicious HTML code when the victim opened the autocomplete dropdown. Users are *not* affected by this vulnerability if you don't use the multiselect field or don't use it with options that can be manipulated by attackers. The problem has been patched in Kirby 3.5.8.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-3f89-869f-5w76 - https://github.com/getkirby/kirby/commit/b5b8863885e17556abc070dde1e20aec15fbfdf5 - https://github.com/getkirby/kirby/releases/tag/3.5.8.1
CVE ID: CVE-2022-36038 State: PUBLISHED Published: 2022-09-06T19:00:14.000Z Last Updated: 2025-04-23T17:14:41.875Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CircuitVerse Products: CircuitVerse Problem Types: CWE-502 Description: CircuitVerse is an open-source platform which allows users to construct digital logic circuits online. A remote code execution (RCE) vulnerability in CircuitVerse allows authenticated attackers to execute arbitrary code via specially crafted JSON payloads. This issue may lead to Remote Code Execution (RCE). A patch is available in commit number 7b3023a99499a7675f10f2c1d9effdf10c35fb6e. There are currently no known workarounds. Ad
tch is available in commit number 7b3023a99499a7675f10f2c1d9effdf10c35fb6e. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CircuitVerse/CircuitVerse/security/advisories/GHSA-8c8q-4h7g-4rp3 - https://github.com/CircuitVerse/CircuitVerse/commit/7b3023a99499a7675f10f2c1d9effdf10c35fb6e
CVE ID: CVE-2022-36039 State: PUBLISHED Published: 2022-09-06T19:05:11.000Z Last Updated: 2025-04-23T17:14:36.243Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: rizinorg Products: rizin Problem Types: CWE-787 Description: Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. A patch is available on the `dev` branch of the repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
the `dev` branch of the repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rizinorg/rizin/security/advisories/GHSA-pr85-hv85-45pg - https://github.com/rizinorg/rizin/issues/2969 - https://github.com/rizinorg/rizin/commit/1524f85211445e41506f98180f8f69f7bf115406 - https://security.gentoo.org/glsa/202209-06
CVE ID: CVE-2022-36040 State: PUBLISHED Published: 2022-09-06T00:00:00.000Z Last Updated: 2025-04-23T17:32:07.611Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: rizinorg Products: rizin Problem Types: CWE-787 Description: Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYC(python) files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commit number 68948017423a12786704e54227b8b2f918c2fd27 contains a patch. Additional Analyst Notes: - CVE Program Container