Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34867 State: PUBLISHED Published: 2022-09-06T17:18:51.714Z Last Updated: 2025-02-20T20:09:28.734Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Libreform Products: WP Libre Form 2 (WordPress plugin) Problem Types: CWE-200 Description: Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/libreform/wordpress-wp-libre-form-2-plugin-2-0-8-unauthenticated-sensitive-
ttps://patchstack.com/database/vulnerability/libreform/wordpress-wp-libre-form-2-plugin-2-0-8-unauthenticated-sensitive-information-disclosure-vulnerability - https://github.com/libreform/libreform/pull/54/files
CVE ID: CVE-2022-34868 State: PUBLISHED Published: 2022-08-23T15:46:07.568Z Last Updated: 2025-02-20T20:12:03.267Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: YooMoney Products: ЮKassa для WooCommerce (WordPress plugin) Problem Types: CWE-264 Description: Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yookassa/wordpress-yukassa-dlya-woocommerce-plugin-2-3-0-authenticated-arbitrary-settings-update-vulnerability - https://wordpress.org/plugins/yookassa/#
oocommerce-plugin-2-3-0-authenticated-arbitrary-settings-update-vulnerability - https://wordpress.org/plugins/yookassa/#developers
CVE ID: CVE-2022-34869 State: PUBLISHED Published: 2022-09-08T07:10:42 Last Updated: 2024-08-03T09:22:10.608Z Vendors: Allied Telesis K.K. Products: CentreCOM AR260S V2 Problem Types: Hidden Functionality Description: Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command. Additional Analyst Notes: - CVE Program Container: References: - https://www.allied-telesis.co.jp/support/list/faq/vuls/20220829.html - https://jvn.jp/en/jp/JVN45473612/index.html
CVE ID: CVE-2022-34870 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T18:54:23.644Z Vendors: Apache Software Foundation Products: Apache Geode Problem Types: Cross-Site Scripting (XSS) via data injection Description: Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/zltlr7f2ymr2m6jj54k4z0c4foos5fwx - http://www.openwall.com/lists/oss-security/2022/10/24/3
CVE ID: CVE-2022-34871 State: PUBLISHED Published: 2022-08-03T15:21:13 Last Updated: 2024-08-03T09:22:10.706Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Centreon Products: Centreon Problem Types: CWE-89 Description: This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an admini
t to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-16335. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-953/ - https://docs.centreon.com/docs/21.10/releases/centreon-core/
CVE ID: CVE-2022-34872 State: PUBLISHED Published: 2022-08-03T15:21:26 Last Updated: 2024-08-03T09:22:10.611Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Centreon Products: Centreon Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of Virtual Metrics. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading
e using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16336. Additional Analyst Notes: - CVE Program Container: References: - https://docs.centreon.com/docs/21.10/releases/centreon-core/ - https://www.zerodayinitiative.com/advisories/ZDI-22-954/
CVE ID: CVE-2022-34873 State: PUBLISHED Published: 2022-07-18T18:42:22 Last Updated: 2024-08-03T09:22:10.739Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Foxit Products: PDF Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. By performing actions in JavaScript, an attacker can trigger a read past the end of an allocated object. An att
objects. By performing actions in JavaScript, an attacker can trigger a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16777. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-952/
CVE ID: CVE-2022-34874 State: PUBLISHED Published: 2022-07-18T18:42:28 Last Updated: 2024-08-03T09:22:10.784Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Foxit Products: PDF Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. By performing actions in JavaScript, an attacker can trigger a read past the end of an allocated object. An attacker c
. By performing actions in JavaScript, an attacker can trigger a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-17474. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-951/
CVE ID: CVE-2022-34875 State: PUBLISHED Published: 2022-07-18T18:42:33.000Z Last Updated: 2025-04-29T18:54:49.729Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Foxit Products: PDF Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ADBC objects. By performing actions in JavaScript, an attacker can trigger a read past the end of an allocated object. An atta
bjects. By performing actions in JavaScript, an attacker can trigger a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16981. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-950/
CVE ID: CVE-2022-34876 State: PUBLISHED Published: 2022-07-05T15:40:15.708483Z Last Updated: 2024-09-16T17:23:59.824Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: VICIdial Products: VICIdial Problem Types: CWE-89 Description: SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recordings, and agentcall_email parameters allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and become administrators of the database server. This issue affects: VICIdial 2.14b0.5 versions prior to 355
available, and become administrators of the database server. This issue affects: VICIdial 2.14b0.5 versions prior to 3555. Additional Analyst Notes: - CVE Program Container: References: - https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=4&t=41300&sid=aacb27a29fefd85265b4d55fe51122af - https://github.com/rapid7/metasploit-framework/pull/16732
CVE ID: CVE-2022-34877 State: PUBLISHED Published: 2022-07-05T15:40:19.992008Z Last Updated: 2024-09-17T04:09:36.869Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: VICIdial Products: VICIdial Problem Types: CWE-89 Description: SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and become administrators of the database server. This issue affects: VICIdial 2.14b0.5 versions prior to 3555. Additional Analyst
administrators of the database server. This issue affects: VICIdial 2.14b0.5 versions prior to 3555. Additional Analyst Notes: - CVE Program Container: References: - https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=4&t=41300&sid=aacb27a29fefd85265b4d55fe51122af - https://github.com/rapid7/metasploit-framework/pull/16732
CVE ID: CVE-2022-34878 State: PUBLISHED Published: 2022-07-05T15:40:27.310449Z Last Updated: 2024-09-16T23:26:46.020Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: VICIdial Products: VICIdial Problem Types: CWE-89 Description: SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and become administrators of the database server. Additional Analyst Notes: - CVE Program Container: References: - https://www.vicidial.org/VICI
s of the database server. Additional Analyst Notes: - CVE Program Container: References: - https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=4&t=41300&sid=aacb27a29fefd85265b4d55fe51122af - https://github.com/rapid7/metasploit-framework/pull/16732
CVE ID: CVE-2022-34879 State: PUBLISHED Published: 2022-07-05T15:40:31.098013Z Last Updated: 2024-09-16T20:47:06.832Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: VICIdial Products: VICIdial Problem Types: CWE-79 Description: Reflected Cross Site Scripting (XSS) vulnerabilities in AST Agent Time Sheet interface (/vicidial/AST_agent_time_sheet.php) of VICIdial via agent, and search_archived_data parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555. Additional Analyst Notes: - CVE Program Container: References: - https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=4&t=41300&sid=aacb27a29fefd85265b4d55fe51122af
CVE ID: CVE-2022-34881 State: PUBLISHED Published: 2022-12-06T01:30:55.844Z Last Updated: 2025-04-23T13:55:52.239Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hitachi Products: JP1/Automatic Operation Problem Types: CWE-209 Description: Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information. This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/secu
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html
CVE ID: CVE-2022-34882 State: PUBLISHED Published: 2022-09-06T06:30:14 Last Updated: 2024-08-03T09:22:10.618Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Hitachi Products: RAID Manager Storage Replication Adapter Problem Types: CWE-209 Description: Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to gain sensitive information. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior to 02.05.01 on Windows and Docker. Additional Analyst Notes: - CVE Program Container: Reference
02.05.00 versions prior to 02.05.01 on Windows and Docker. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html
CVE ID: CVE-2022-34883 State: PUBLISHED Published: 2022-09-06T06:30:15 Last Updated: 2024-08-03T09:22:10.705Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Products: RAID Manager Storage Replication Adapter Problem Types: CWE-78 Description: OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior to 02.05.01 on Windows and Docker. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.
to 02.05.01 on Windows and Docker. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html
CVE ID: CVE-2022-34884 State: PUBLISHED Published: 2023-01-30T21:32:54.220Z Last Updated: 2025-03-27T15:19:13.850Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Lenovo XClarity Controller Problem Types: CWE-121 Description: A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-87734
CVE ID: CVE-2022-34885 State: PUBLISHED Published: 2023-01-30T21:43:32.419Z Last Updated: 2025-03-27T18:49:13.924Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Motorola Products: MR2600 Router Problem Types: CWE-20 Description: An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.motorolanetwork.com/hc/en-us/articles/8161908477595
CVE ID: CVE-2022-34886 State: PUBLISHED Published: 2023-10-27T18:40:26.461Z Last Updated: 2024-09-10T14:32:27.655Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Printer GM265DN (production date June 2022 and before), Printer GM265DN (production date July 2022 and later), Printer GM266DNS, Printer G263DNS Problem Types: CWE-120 Description: A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ia a script, resulting in a stack overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/205041.html
CVE ID: CVE-2022-34887 State: PUBLISHED Published: 2023-10-27T18:48:18.668Z Last Updated: 2024-09-09T19:33:35.149Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Lenovo Products: Printer GM265DN (production date June 2022 and before), Printer GM265DN (production date July 2022 and later), Printer GM266DNS, Printer G263DNS Problem Types: CWE-287 Description: Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/205041.html
CVE ID: CVE-2022-34888 State: PUBLISHED Published: 2023-01-30T21:41:15.774Z Last Updated: 2025-03-27T18:51:27.992Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Lenovo Products: Lenovo XClarity Controller Problem Types: CWE-184 Description: The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-87734
CVE ID: CVE-2022-34889 State: PUBLISHED Published: 2022-07-15T20:10:32 Last Updated: 2024-08-03T09:22:10.733Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Parallels Products: Desktop Problem Types: CWE-125 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the ACPI virtual device. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of a
The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-16554. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/125013 - https://www.zerodayinitiative.com/advisories/ZDI-22-940/
CVE ID: CVE-2022-34890 State: PUBLISHED Published: 2022-07-15T20:11:17 Last Updated: 2024-08-03T09:22:10.619Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Parallels Products: Desktop Problem Types: CWE-822 Description: This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Parallels Tools component. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it
ools component. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-16653. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/125013 - https://www.zerodayinitiative.com/advisories/ZDI-22-941/
CVE ID: CVE-2022-34891 State: PUBLISHED Published: 2022-07-15T20:12:00 Last Updated: 2024-08-03T09:22:10.831Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Desktop Problem Types: CWE-732 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update machanism. The product sets incorrect permissions on sensitive files. An attacker can leverage this vulnerability to escalate privi
The product sets incorrect permissions on sensitive files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16395. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/125013 - https://www.zerodayinitiative.com/advisories/ZDI-22-942/
CVE ID: CVE-2022-34892 State: PUBLISHED Published: 2022-07-18T14:17:35 Last Updated: 2024-08-03T09:22:10.650Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Desktop Problem Types: CWE-362 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update machanism. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this
The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16396. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/125013 - https://www.zerodayinitiative.com/advisories/ZDI-22-943/
CVE ID: CVE-2022-34893 State: PUBLISHED Published: 2022-09-19T18:00:57 Last Updated: 2024-08-03T09:22:10.646Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Link Following LPE Description: Trend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with lower privileges could manipulate a mountpoint which could lead to escalation of privilege on an affected machine. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-11053 - https://www.zerodayinitiative.com/advisories/ZDI-22-1175/
CVE ID: CVE-2022-34894 State: PUBLISHED Published: 2022-07-01T09:00:15 Last Updated: 2024-08-03T09:22:10.639Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-284 Description: In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/