deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-38688
Published: 2022-10-14
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38689
Published: 2022-10-14
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38690
Published: 2022-10-14
Description: In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-667
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38697
Published: 2022-10-14
Description: In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38698
Published: 2022-10-14
Description: In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39080
Published: 2022-10-14
Description: In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39103
Published: 2022-10-14
Description: In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39105
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39107
Published: 2022-10-14
Description: In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39108
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39109
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39110
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39111
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39112
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39113
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39114
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39115
Published: 2022-10-14
Description: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39117
Published: 2022-10-14
Description: In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39120
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39121
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39122
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39123
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39124
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39125
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39126
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39127
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39128
Published: 2022-10-14
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-39308
Published: 2022-10-14
Description: GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 (inclusive) are subject to a timing attack in validation of access tokens due to use of regular string comparison for validation of the token rather than a constant time algorithm. This could allow a brute force attack on GoCD server API calls to observe timing differences in validations in order to guess an access token generated by a user for API access. This issue is fixed in GoCD version 19.11.0. As a workaround, users can apply rate limiting or insert random delays to API calls made to GoCD Server via a reverse proxy or other fronting web server. Another workaround, users may disallow use of access tokens by users by having an administrator revoke all access tokens through the "Access Token Management" admin function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-208, CWE-1254, CWE-697
References: https://github.com/gocd/gocd/commit/236d4baf92e6607f2841c151c855adcc477238b8; https://github.com/gocd/gocd/releases/tag/19.11.0; https://github.com/gocd/gocd/security/advisories/GHSA-999p-fp84-jcpq
CVE: CVE-2022-41477
Published: 2022-10-14
Description: A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/zer0yu/CVE_Request/blob/master/Webid/WeBid_Path_Traversal.md; https://github.com/zer0yu/CVE_Request/blob/master/Webid/WeBid_Path_Traversal.md
CVE: CVE-2022-35689
Published: 2022-10-14
Description: Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb22-48.html; https://helpx.adobe.com/security/products/magento/apsb22-48.html
CVE: CVE-2022-35690
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-35691
Published: 2022-10-14
Description: Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/acrobat/apsb22-46.html; https://helpx.adobe.com/security/products/acrobat/apsb22-46.html
CVE: CVE-2022-35698
Published: 2022-10-14
Description: Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb22-48.html; https://helpx.adobe.com/security/products/magento/apsb22-48.html
CVE: CVE-2022-35710
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-35711
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-35712
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38418
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38419
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38420
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38421
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but does require administrator privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38422
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38423
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction, but does require administrator privileges.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38424
Published: 2022-10-14
Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. Exploitation of this issue does not require user interaction, but does require administrator privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE: CVE-2022-38437
Published: 2022-10-14
Description: Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb22-46.html; https://helpx.adobe.com/security/products/acrobat/apsb22-46.html
CVE: CVE-2022-38440
Published: 2022-10-14
Description: Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb22-57.html; https://helpx.adobe.com/security/products/dimension/apsb22-57.html
CVE: CVE-2022-38441
Published: 2022-10-14
Description: Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb22-57.html; https://helpx.adobe.com/security/products/dimension/apsb22-57.html
CVE: CVE-2022-38442
Published: 2022-10-14
Description: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/dimension/apsb22-57.html; https://helpx.adobe.com/security/products/dimension/apsb22-57.html
CVE: CVE-2022-38443
Published: 2022-10-14
Description: Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb22-57.html; https://helpx.adobe.com/security/products/dimension/apsb22-57.html