rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-24287 
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.
Problem types: cwe_id: CWE-1188
description: CWE-1188: Insecure Default Initialization of Resource
Affected products: vendor: Siemens
product: SIMATIC PCS 7 V8.2
default_status: unknown
vendor: Siemens
product: SIMATIC PCS 7 V9.0
default_status: unknown
vendor: Siemens
product: SIMATIC PCS 7 V9.1
default_status: unknown
vendor: Siemens
product: SIMATIC WinCC Runtime Professional V16 and earlier
default_status: unknown
vendor: Siemens
product: SIMATIC WinCC Runtime Professional V17
default_status: unknown
vendor: Siemens
product: SIMATIC WinCC V7.3
default_status: unknown
vendor: Siemens
product: SIMATIC WinCC V7.4
default_status: unknown
vendor: Siemens
product: SIMATIC WinCC V7.5
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.8
baseSeverity: HIGH
Published: 2022-05-10T09:46:57.000Z
CVE-2022-24288 Apache Airflow: RCE in example DAGs
In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: The Apache Airflow PMC would like to thank Kai Zhao of the TToU Security Team for reporting this issue.
Published: 2022-02-25T08:30:16.000Z
CVE-2022-24289 Deserialization of untrusted data in the Hessian Component of Apache Cayenne 4.1 with older Java versions
Hessian serialization is a network protocol that supports object-based transmission. Apache Cayenne's optional Remote Object Persistence (ROP) feature is a web services-based technology that provides object persistence and query functionality to 'remote' applications. In Apache Cayenne 4.1 and earlier, running on non-current patch versions of Java, an attacker with client access to Cayenne ROP can transmit a malicious payload to any vulnerable third-party dependency on the server. This can result in arbitrary code execution.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Cayenne
Credits: lang: en
value: Panda
Published: 2022-02-11T12:20:15.000Z
CVE-2022-24290 
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions < V13.2.0.8), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: Teamcenter V12.4
vendor: Siemens
product: Teamcenter V13.0
vendor: Siemens
product: Teamcenter V13.1
vendor: Siemens
product: Teamcenter V13.2
vendor: Siemens
product: Teamcenter V13.3
vendor: Siemens
product: Teamcenter V14.0
Published: 2022-05-10T09:46:58.000Z
CVE-2022-24291 
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
Problem types: description: Information disclosure, Denial of service, Buffer overflow
Affected products: vendor: n/a
product: HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers
Published: 2022-03-23T19:46:18.000Z
CVE-2022-24292 
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
Problem types: description: Information disclosure, Denial of service, Buffer overflow
Affected products: vendor: n/a
product: HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers
Published: 2022-03-23T19:46:17.000Z
CVE-2022-24293 
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
Problem types: description: Information disclosure, Denial of service, Buffer overflow
Affected products: vendor: n/a
product: HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers
Published: 2022-03-23T19:46:19.000Z
CVE-2022-24294 ReDoS in Apache MXNet RTC Module
A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: Apache Software Foundation
product: Apache MXNet
Credits: lang: en
value: Apache MXNet would like to thank Dwi Siswanto for reporting this issue.
Published: 2022-07-24T17:45:12.000Z
CVE-2022-24295 
Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.
Problem types: description: Code Execution
Affected products: vendor: Okta
product: Okta Advanced Server Access Client
Published: 2022-02-21T17:49:32.000Z
CVE-2022-24296 
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.
Problem types: description: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: n/a
product: Air Conditioning System G-150AD; Air Conditioning System AG-150A-A; Air Conditioning System AG-150A-J; Air Conditioning System GB-50AD; Air Conditioning System GB-50ADA-A; Air Conditioning System GB-50ADA-J; Air Conditioning System EB-50GU-A; Air Conditioning System EB-50GU-J; Air Conditioning System AE-200J; Air Conditioning System AE-200A; Air Conditioning System AE-200E; Air Conditioning System AE-50J; Air Conditioning System AE-50A; Air Conditioning System AE-50E; Air Conditioning System EW-50J; Air Conditioning System EW-50A; Air Conditioning System EW-50E; Air Conditioning System TE-200A; Air Conditioning System TE-50A; Air Conditioning System TW-50A
Published: 2022-06-08T14:11:50.000Z
CVE-2022-24297 
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) NUCs
Published: 2022-05-12T16:35:52.000Z
CVE-2022-24298 Denial of Service (DoS)
All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.
Problem types: description: Denial of Service (DoS)
Affected products: vendor: n/a
product: FreeOpcUa/freeopcua
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
exploitCodeMaturity: PROOF_OF_CONCEPT
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: UNCHANGED
temporalScore: 7.1
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
version: 3.1
Credits: lang: en
value: Vera Mens
lang: en
value: Uri Katz
lang: en
value: Sharon Brizinov of Team82 (Claroty Research)
Published: 2022-08-23T05:06:46.768Z
CVE-2022-24299 
Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command.
Problem types: description: Improper Input Validation
Affected products: vendor: pfSense
product: pfSense CE and pfSense Plus
Published: 2022-03-31T07:21:07.000Z
CVE-2022-24300 
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-02T06:01:04.000Z
CVE-2022-24301 
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-02T06:00:50.000Z
CVE-2022-24302 
In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-17T21:02:10.000Z
CVE-2022-24303 
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T00:00:00.000Z
CVE-2022-24305 
Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T14:36:51.000Z
CVE-2022-24306 
Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T14:34:49.000Z
CVE-2022-24307 
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T19:06:54.000Z
CVE-2022-24308 
Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-13T12:14:37.000Z
CVE-2022-24309 
A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All versions < V9.13 only with Runtime Custom Setting *DataStorage.UseNewQueryHandler* set to False). If an entity has an association readable by the user, then in some cases, Mendix Runtime may not apply checks for XPath constraints that parse said associations, within apps running on affected versions. A malicious user could use this to dump and manipulate sensitive data.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Siemens
product: Mendix Runtime V7
default_status: unknown
vendor: Siemens
product: Mendix Runtime V8
default_status: unknown
vendor: Siemens
product: Mendix Runtime V9
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
baseScore: 6.8
baseSeverity: MEDIUM
Published: 2022-03-08T11:31:29.000Z
CVE-2022-24310 
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:04:57.000Z
CVE-2022-24311 
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:04:58.000Z
CVE-2022-24312 
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:04:58.000Z
CVE-2022-24313 
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:04:59.000Z
CVE-2022-24314 
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:05:00.000Z
CVE-2022-24315 
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:05:01.000Z
CVE-2022-24316 
A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-665
description: CWE-665: Improper Initialization
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:05:02.000Z
CVE-2022-24317 
A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Problem types: cwe_id: CWE-862
description: CWE-862: Missing Authorization
Affected products: vendor: n/a
product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Published: 2022-02-09T22:05:03.000Z
CVE-2022-24318 
A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Problem types: cwe_id: CWE-326
description: CWE-326: Inadequate Encryption Strength
Affected products: vendor: n/a
product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Published: 2022-02-09T22:05:09.000Z
CVE-2022-24319 
A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Problem types: cwe_id: CWE-295
description: CWE-295: Improper Certificate Validation
Affected products: vendor: n/a
product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Published: 2022-02-09T22:05:10.000Z
CVE-2022-24320 
A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA database server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Problem types: cwe_id: CWE-295
description: CWE-295: Improper Certificate Validation
Affected products: vendor: n/a
product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Published: 2022-02-09T22:05:11.000Z
CVE-2022-24321 
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Problem types: cwe_id: CWE-754
description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: n/a
product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Published: 2022-02-09T22:05:12.000Z
CVE-2022-24322 
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior)
Problem types: cwe_id: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Schneider Electric
product: EcoStruxure Control Expert
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-03-09T23:05:13.000Z
CVE-2022-24323 
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Process Expert (V2021 and prior), EcoStruxure Control Expert (V15.0 SP1 and prior)
Problem types: cwe_id: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: Schneider Electric
product: EcoStruxure Process Expert
vendor: Schneider Electric
product: EcoStruxure Control Expert
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-03-09T23:05:14.000Z
CVE-2022-24324 
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: Schneider Electric
product: IGSS Data Server (IGSSdataServer.exe)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
Published: 2023-02-01T00:00:00.000Z
CVE-2022-24327 
In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:34:56.000Z
CVE-2022-24328 
In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:35:00.000Z
CVE-2022-24329 
In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:35:03.000Z
CVE-2022-24330 
In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:35:06.000Z
CVE-2022-24331 
In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:35:09.000Z
CVE-2022-24332 
In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:35:12.000Z
CVE-2022-24333 
In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:35:15.000Z