Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2820 State: PUBLISHED Published: 2022-08-15T10:30:53 Last Updated: 2024-08-03T00:52:58.982Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: namelessmc Products: namelessmc/nameless Problem Types: CWE-384 Description: Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.dev/bounties/df06b7d7-6077-43a5-bd81-3cc66f0d4d19 - https://github.com/namelessmc/nameless/commit/469bebc17855720e43f0c8209c88a57d2b55f6de
CVE ID: CVE-2022-2821 State: PUBLISHED Published: 2022-08-15T10:30:35 Last Updated: 2024-08-03T00:52:58.623Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: namelessmc Products: namelessmc/nameless Problem Types: CWE-304 Description: Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c216db15-fe2f-42a7-852a-6c47498cf069 - https://github.com/namelessmc/nameless/commit/98fe4b7fce5509e49e71f1357118db887b8b88e0
CVE ID: CVE-2022-2822 State: PUBLISHED Published: 2022-08-15T10:30:17 Last Updated: 2024-08-03T00:52:58.435Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: octoprint Products: octoprint/octoprint Problem Types: CWE-307 Description: An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6369f355-e6ef-4469-af75-0f6ff00cde3d - https://github.com/octoprint/octoprint/commit/82c892ba40b3741d1b7711d949e56af64f5bc2de
CVE ID: CVE-2022-2823 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T00:52:59.620Z Vendors: Unknown Products: Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin Problem Types: CWE-79 Description: The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c88c85b3-2830-4354-99fd
dditional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c88c85b3-2830-4354-99fd-af6bce6bb4ef
CVE ID: CVE-2022-2824 State: PUBLISHED Published: 2022-08-15T15:50:09 Last Updated: 2024-08-03T00:52:58.910Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: openemr Products: openemr/openemr Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1ccb2d1c-6881-4813-a5bc-1603d29b7141 - https://github.com/openemr/openemr/commit/c5d99452c173ef21a8e2241e2bbf4b66e2d7fe11
CVE ID: CVE-2022-2825 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:16:11.214Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kepware Products: KEPServerEX Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulne
ion of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-1455/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-10
CVE ID: CVE-2022-2826 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T15:26:45.559Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/370790 - https://hackerone.com/reports/1646633 - https://gitlab.com/gitlab-org/cves/-/blo
com/gitlab-org/gitlab/-/issues/370790 - https://hackerone.com/reports/1646633 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2826.json
CVE ID: CVE-2022-2827 State: PUBLISHED Published: 2022-12-05T21:35:37.441Z Last Updated: 2025-04-23T14:53:32.320Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: AMI Products: MegaRAC SPx12, MegaRAC SPx13 Problem Types: CWE-200 Description: AMI MegaRAC User Enumeration Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf
CVE ID: CVE-2022-2828 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T13:57:47.007Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Information Exposure Description: In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2022/sa2022-19/
CVE ID: CVE-2022-2829 State: PUBLISHED Published: 2022-08-23T04:00:21 Last Updated: 2024-08-03T00:52:58.898Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: yetiforcecompany Products: yetiforcecompany/yetiforcecrm Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c23528450618 - https://huntr.dev/bounties/d6eaa453-9758-41b7-8c38-fd878d6aeab4
CVE ID: CVE-2022-2830 State: PUBLISHED Published: 2022-09-05T11:55:16.262762Z Last Updated: 2024-09-16T19:00:51.550Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: GravityZone Console On-Premise, GravityZone Cloud Console Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the environment. This issue affects: Bitdefender GravityZone Console On-Premise versions prior to 6.29.2-1. Bitdefender GravityZone Cloud Console versions prior to 6.27.2-2. Additional Analyst Notes: - CVE Program Containe
.2-1. Bitdefender GravityZone Cloud Console versions prior to 6.27.2-2. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/deserialization-of-untrusted-data-in-gravityzone-console-va-10573
CVE ID: CVE-2022-2831 State: PUBLISHED Published: 2022-08-16T19:21:14 Last Updated: 2024-08-03T00:52:58.915Z Vendors: n/a Products: Blender Problem Types: CWE-190 Description: A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://developer.blender.org/T99705 - https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535 - https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2
CVE ID: CVE-2022-2832 State: PUBLISHED Published: 2022-08-16T19:26:05 Last Updated: 2024-08-03T00:52:59.535Z Vendors: n/a Products: Blender Problem Types: CWE-395 Description: A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://developer.blender.org/T99706 - https://developer.blender.org/D15463 - https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6c
CVE ID: CVE-2022-2833 State: PUBLISHED Published: 2022-08-16T19:24:35 Last Updated: 2024-08-03T00:52:59.306Z Vendors: n/a Products: Blender Problem Types: Infinite loop Description: Endless Infinite loop in Blender-thumnailing due to logical bugs. Additional Analyst Notes: - CVE Program Container: References: - https://developer.blender.org/rB24a2b5cb1292f769dd86e314471443976d5e9512 - https://developer.blender.org/T99711
CVE ID: CVE-2022-2834 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T19:11:57.316Z Vendors: Unknown Products: Helpful Problem Types: CWE-552 Files or Directories Accessible to External Parties Description: The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/468d5fc7-04c6-4354-b134-85ebb25b37ae
CVE ID: CVE-2022-2835 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T20:34:05.966Z Vendors: n/a Products: coreDNS Problem Types: CWE-923 Description: A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2118542
CVE ID: CVE-2022-2837 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T18:43:09.482Z Vendors: n/a Products: coreDNS Problem Types: CWE-923 Description: A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2118543
CVE ID: CVE-2022-2838 State: PUBLISHED Published: 2022-08-16T10:10:08 Last Updated: 2024-08-03T00:52:59.807Z Vendors: The Eclipse Foundation Products: Eclipse Sphinx Problem Types: CWE-611 Description: In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/580542
CVE ID: CVE-2022-2839 State: PUBLISHED Published: 2022-10-03T13:45:24 Last Updated: 2024-08-03T00:52:59.468Z Vendors: Unknown Products: Zephyr Project Manager Problem Types: CWE-79, CWE-352 Description: The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/82e01f95-81c2-46d8-898e-07b3b8
al Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/82e01f95-81c2-46d8-898e-07b3b8a3f8c9
CVE ID: CVE-2022-2840 State: PUBLISHED Published: 2022-09-19T00:00:00 Last Updated: 2024-08-03T00:52:59.448Z Vendors: Unknown Products: Zephyr Project Manager Problem Types: CWE-89 Description: The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/13d8be88-c3b7-4d6e-9792-c98b801ba53c - http://packetstormsecurity.com/files/168652/WordPress-Zephyr-Project-Manager-3.2.42-SQL-Injection.html
CVE ID: CVE-2022-2841 State: PUBLISHED Published: 2022-08-22T08:05:12.000Z Last Updated: 2025-04-15T13:48:38.060Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: CrowdStrike Products: Falcon Problem Types: CWE-862 Description: A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 6.40.15409, 6.42.15611 and 6.44.15807 is able to address this issue.
to the public and may be used. Upgrading to version 6.40.15409, 6.42.15611 and 6.44.15807 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-206880. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206880 - https://vuldb.com/?ctiid.206880 - https://www.modzero.com/modlog/archives/2022/08/22/ridiculous_vulnerability_disclosure_process_with_crowdstrike_falcon_sensor/index.html - https://www.modzero.com/advisories/MZ-22-02-CrowdStrike-FalconSensor.txt - https://youtu.be/3If-Fqwx-4s
CVE ID: CVE-2022-2842 State: PUBLISHED Published: 2022-08-22T18:18:03.000Z Last Updated: 2025-04-14T15:59:18.161Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument user_email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-206451. Additional Analyst Notes: - CVE Prog
lic and may be used. The associated identifier of this vulnerability is VDB-206451. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WhiteA1so/CVE/blob/main/Gym%20Management%20System-loginpage-Sqlinjection.pdf - https://vuldb.com/?id.206451
CVE ID: CVE-2022-2843 State: PUBLISHED Published: 2022-08-16T18:50:16.000Z Last Updated: 2025-04-15T13:49:50.563Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: MotoPress Products: Timetable and Event Schedule Problem Types: CWE-79 Description: A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick Edit. The manipulation of the argument post_title with the input <img src=x onerror=alert`2`> leads to cross site scripting. The attack may be launched remotely. VDB-206486 is the identifier assigned to this
rt`2`> leads to cross site scripting. The attack may be launched remotely. VDB-206486 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206486
CVE ID: CVE-2022-2844 State: PUBLISHED Published: 2022-08-16T18:50:29.000Z Last Updated: 2025-04-15T13:49:43.053Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: MotoPress Products: Timetable and Event Schedule Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file /wp/?cpmvc_id=1&cpmvc_do_action=mvparse&f=datafeed&calid=1&month_index=1&method=adddetails&id=2 of the component Calendar Handler. The manipulation of the argument Subject/Location/Description leads to cross site scripting. It is possible to initiate the attack remotel
f the argument Subject/Location/Description leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206487. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206487
CVE ID: CVE-2022-2845 State: PUBLISHED Published: 2022-08-17T00:00:00 Last Updated: 2024-08-03T00:52:58.914Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3e1d31ac-1cfd-4a9f-bc5c-213376b69445 - https://github.com/vim/vim/commit/e98c88c44c308edaea5994b8ad4363e65030968c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/ - https://list
ct.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2846 State: PUBLISHED Published: 2022-08-16T00:00:00.000Z Last Updated: 2025-04-15T13:07:52.842Z Vendors: Unknown Products: Calendar Event Multi View Problem Types: CWE-862, CWE-79 Description: The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fields. This could allow unauthenticated attackers to create arbitrary events and put Cross-Site Scripting payloads in it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/95f92062-08ce-478a-a2bc-6d0
E Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/95f92062-08ce-478a-a2bc-6d026adf657c - http://packetstormsecurity.com/files/171697/Calendar-Event-Multi-View-1.4.07-Cross-Site-Scripting.html
CVE ID: CVE-2022-2847 State: PUBLISHED Published: 2022-08-16T18:51:00.000Z Last Updated: 2025-04-15T13:49:34.959Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Guest Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206489 was assigned to this vulnerability. Addit
it has been disclosed to the public and may be used. The identifier VDB-206489 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1.ax1x.com/2022/08/13/vtDZfe.png - https://vuldb.com/?id.206489
CVE ID: CVE-2022-2848 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:42:21.939Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: Kepware Products: KEPServerEX Problem Types: CWE-122 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulner
ion of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-16486. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-10 - https://www.zerodayinitiative.com/advisories/ZDI-22-1454/
CVE ID: CVE-2022-2849 State: PUBLISHED Published: 2022-08-17T00:00:00 Last Updated: 2024-08-03T00:52:58.772Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/389aeccd-deb9-49ae-9b6a-24c12d79b02e - https://github.com/vim/vim/commit/f6d39c31d2177549a986d170e192d8351bd571e2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/ - https://security.gentoo.org/glsa/2023
age-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/ - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-2850 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-11-03T20:34:50.179Z Vendors: n/a Products: 389-ds-base Problem Types: denial of service Description: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2118691 - https://access.redhat.com/security/cve/CVE-202
ment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2118691 - https://access.redhat.com/security/cve/CVE-2022-2850 - https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
CVE ID: CVE-2022-2852 State: PUBLISHED Published: 2022-09-26T00:00:00.000Z Last Updated: 2025-05-22T14:30:43.105Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1349322 - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/ - http://packets
.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/ - http://packetstormsecurity.com/files/169457/Chrome-AccountSelectionBubbleView-OnAccountImageFetched-Heap-Use-After-Free.html