yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-4834: The CPT Bootstrap Carousel WordPress plugin through 1.12 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Key phrases: perform Stored Cross-Site Scripting attacks which, stored cross-site scripting
CVE-2022-48340: In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.
Key phrases: use-after-free, use after free
CVE-2022-48341: ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.
Key phrases: obtain System Administrator dashboard access, achieve Vertical Privilege Escalation, vertical privilege escalation
CVE-2022-48342: In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
Key phrases: jvmti
CVE-2022-48343: In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
Key phrases: xss
CVE-2022-48344: In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.
Key phrases: xss
CVE-2022-48345: sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.
Key phrases: XSS via HTML entities, xss
CVE-2022-48346: The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: logic bypass, affect confidentiality
CVE-2022-48347: The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: permission verification, confidentiality
CVE-2022-48348: The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity.
Key phrases: unauthorized data read, confidentiality, integrity, confidentiality and integrity
CVE-2022-48349: The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability.
Key phrases: spoofing, confidentiality, availability
CVE-2022-4835: The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Key phrases: perform Stored Cross-Site Scripting attacks which, stored cross-site scripting
CVE-2022-48350: The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: unauthorized file access, affect confidentiality
CVE-2022-48351: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.
Key phrases: configuration defects, availability
CVE-2022-48352: Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.
Key phrases: data initialization issues, system panic
CVE-2022-48353: Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions.
Key phrases: configuration issues, kernel privilege escalation, system service exceptions
CVE-2022-48354: The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.
Key phrases: heap out-of-bounds write, crash, out of bounds write
CVE-2022-48355: The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.
Key phrases: heap out-of-bounds read, crash, out of bounds read
CVE-2022-48356: The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition.
Key phrases: input parameter verification, failed facial recognition
CVE-2022-48357: Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel.
Key phrases: denial of service (DoS), double fetch, denial of service (dos)
CVE-2022-48358: The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions.
Key phrases: batteryhealthactivity, redirection, service exceptions
CVE-2022-48359: The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: causes arbitrary disk modification, recovery mode for updates, confidentiality
CVE-2022-4836: The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Key phrases: perform Stored Cross-Site Scripting attacks which, stored cross-site scripting
CVE-2022-48360: The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: file permission control, confidentiality
CVE-2022-48361: The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources.
Key phrases: path traversal, failure
CVE-2022-48362: Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)
Key phrases: upload arbitrary code, AgentLogUploadServlet, directory traversal
CVE-2022-48363: In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.
Key phrases: null pointer
CVE-2022-48364: The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive.
Key phrases: moderator identity disclosure
CVE-2022-48365: An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.
CVE-2022-48366: An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.
Key phrases: determining account existence via a timing attack
CVE-2022-48367: An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.
CVE-2022-48368: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-48369: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-4837: The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Key phrases: perform Stored Cross-Site Scripting attacks which, stored cross-site scripting
CVE-2022-48370: In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Key phrases: permission check, local information disclosure, additional execution privileges
CVE-2022-48371: In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Key phrases: permission check, local information disclosure, additional execution privileges
CVE-2022-48372: In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48373: In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48374: In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48375: In contacts service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48376: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48377: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48378: In engineermode service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48379: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-4838: The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Key phrases: perform Stored Cross-Site Scripting attacks which, stored cross-site scripting
CVE-2022-48380: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48381: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48382: In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48383: .In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-48384: In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-48385: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48386: the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed.
Key phrases: use after free, logic error, local denial of service
CVE-2022-48387: the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48388: In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-48389: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-4839: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site scripting (xss)
CVE-2022-48390: In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-48391: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48392: In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Key phrases: permission check, local escalation of privilege, additional execution privileges, escalation privilege
CVE-2022-4840: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site scripting (xss)
CVE-2022-4841: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site scripting (xss)
CVE-2022-4842: A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.
Key phrases: null pointer dereference, crash, crash system
CVE-2022-48422: ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located.
Key phrases: gain privileges, gain privileges via a Trojan horse libgcc_s.so.1 in
CVE-2022-48423: In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.
Key phrases: out-of-bounds write, out of bounds write
CVE-2022-48424: In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.
CVE-2022-48425: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.
Key phrases: invalid kfree
CVE-2022-48426: In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible
Key phrases: stored xss
CVE-2022-48427: In JetBrains TeamCity before 2022.10.3 stored XSS on Pending changes and Changes tabs was possible
Key phrases: stored xss
CVE-2022-48428: In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible
Key phrases: xss
CVE-2022-48429: In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible
Key phrases: xss
CVE-2022-4843: NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
Key phrases: null pointer dereference
CVE-2022-48430: In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.
Key phrases: external stylesheet path
CVE-2022-48431: In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the Trust Project confirmation.
CVE-2022-48432: In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.
Key phrases: sandboxed
CVE-2022-48433: In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.
CVE-2022-48434: libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
Key phrases: execute arbitrary code, trigger a use-after-free and, use after free
CVE-2022-48435: In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file
CVE-2022-48437: An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.
CVE-2022-48438: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48439: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-4844: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site request forgery (csrf)
CVE-2022-48440: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48441: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48442: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48443: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48444: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48445: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48446: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48447: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-48448: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Key phrases: permission check, local denial of service
CVE-2022-4845: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site request forgery (csrf)
CVE-2022-48450: In bluetooth service, there is a possible missing params check.  This could lead to local denial of service with System execution privileges needed.
Key phrases: missing params check, local denial of service
CVE-2022-48451: In bluetooth service, there is a possible out of bounds write due to race condition.  This could lead to local denial of service with System execution privileges needed.
Key phrases: out of bounds write, race condition, local denial of service
CVE-2022-48452: In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed
Key phrases: missing permission check, local denial of service
CVE-2022-48453: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48454: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48455: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48456: In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, incorrect bounds check, local denial of service
CVE-2022-48457: In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: improper input validation, local denial of service, crash
CVE-2022-48458: In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: improper input validation, local denial of service, crash
CVE-2022-48459: In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: improper input validation, local denial of service, crash
CVE-2022-4846: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site request forgery (csrf)
CVE-2022-48460: In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed
Key phrases: undefined behavior, local denial of service
CVE-2022-48461: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48462: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48463: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48464: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2022-48468: protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.
Key phrases: unsigned integer overflow
CVE-2022-48469: There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers.
Key phrases: traffic hijacking
CVE-2022-4847: Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: incorrectly specified destination
CVE-2022-48471: There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.
Key phrases: input, abnormal, service abnormal
CVE-2022-48472: A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.
Key phrases: system command injection, remote code execution
CVE-2022-48473: There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.
Key phrases: input, abnormal, service abnormal
CVE-2022-48474: Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process.
Key phrases: denial of service, shuts down the process
CVE-2022-48475: Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request.
Key phrases: buffer overflow
CVE-2022-48476: In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
Key phrases: path traversal
CVE-2022-48477: In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing
Key phrases: ssrf protection
CVE-2022-48478: The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service.
Key phrases: exceptions
CVE-2022-48479: The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service.
Key phrases: out-of-bounds memory read, exceptions of the facial recognition service, out of bounds memory
CVE-2022-4848: Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: improper verification of source of a communication channel
CVE-2022-48480: Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: integer overflow, service confidentiality
CVE-2022-48481: In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible
Key phrases: dylib injection
CVE-2022-48482: 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs.
Key phrases: read certain files via /Electron/download directory, electron download directory traversal
CVE-2022-48483: 3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\\\\system32 files via /Electron/download directory traversal in conjunction with a path component that has a drive letter and uses backslash characters. NOTE: this issue exists because of an incomplete fix for CVE-2022-28005.
Key phrases: read %WINDIR%\\\\system32 files via /Electron/download, electron download directory traversal
CVE-2022-48486: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48487: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48488: Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desktop.
Key phrases: unauthorized modifications
CVE-2022-48489: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-4849: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site request forgery (csrf)
CVE-2022-48490: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48491: Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.
Key phrases: missing authentication, ads, windows
CVE-2022-48492: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48493: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48494: Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized.
Key phrases: lax app identity verification
CVE-2022-48495: Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained.
Key phrases: unauthorized access
CVE-2022-48496: Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized.
Key phrases: lax app identity verification
CVE-2022-48497: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48498: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48499: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-4850: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: cross-site request forgery (csrf)
CVE-2022-48500: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48501: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
Key phrases: configuration defects, availability
CVE-2022-48502: An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.
Key phrases: out-of-bounds read, out of bounds read
CVE-2022-48503: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.
Key phrases: arbitrary code execution
CVE-2022-48504: The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.
Key phrases: user-sensitive data
CVE-2022-48505: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system
CVE-2022-48506: A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "Improved pseudo random number algorithm," which may be relevant.
Key phrases: determine the order in which ballots were cast, deanonymization of voted ballots
CVE-2022-48507: Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: identity verification, service confidentiality
CVE-2022-48508:  Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.
Key phrases: inappropriate authorization, service integrity
CVE-2022-48509: Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.
Key phrases: race condition, program to exit abnormally
CVE-2022-4851: Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.
Key phrases: improper handling of values
CVE-2022-48510: Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.
Key phrases: input verification, unauthorized operations
CVE-2022-48511: Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally.
Key phrases: use after free (uaf), audio features, perform abnormally
CVE-2022-48512: Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.
Key phrases: use after free (uaf), abnormally
CVE-2022-48513: Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access.
Key phrases: identity verification, out-of-bounds access, out of bounds access
CVE-2022-48514: The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: affect confidentiality
CVE-2022-48515: Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: inappropriate permission control, service confidentiality
CVE-2022-48516: Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality.
Key phrases: confidentiality
CVE-2022-48517: Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability.
Key phrases: unauthorized service access, availability
CVE-2022-48518: Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.
Key phrases: vulnerability of signature verification, system performance, spoofing
CVE-2022-48519: Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: unauthorized access, affect confidentiality
CVE-2022-48520: Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: unauthorized access, affect confidentiality
CVE-2022-48521: An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
Key phrases: craft an e-mail message with a
CVE-2022-48522: In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.
Key phrases: stack-based crash, remote code execution, local privilege escalation
CVE-2022-48538: In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() allows a zero as the password.
Key phrases: bypass in the web login functionality, authentication bypass, a zero as the password
CVE-2022-48541: A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
Key phrases: perform a denial of service via the ", memory leak
CVE-2022-48545: An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
Key phrases: infinite recursion, denial of service
CVE-2022-48547: A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at auth_changepassword.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML in the, reflected cross-site scripting (xss)
CVE-2022-4855: A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-217020.
Key phrases: sql injection
CVE-2022-48554: File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
Key phrases: stack-based buffer over-read, buffer over read
CVE-2022-4856: A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217021 was assigned to this vulnerability.
Key phrases: buffer overflow
CVE-2022-48560: A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Key phrases: use-after-free, use after free
CVE-2022-48564: read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
Key phrases: dos
CVE-2022-48565: An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Key phrases: xml external entity (xxe)
CVE-2022-48566: An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
Key phrases: constant-time-defeating optimisations
CVE-2022-4857: A vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is some unknown functionality of the file mbpoll.exe of the component mbp File Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-217022 is the identifier assigned to this vulnerability.
Key phrases: buffer overflow
CVE-2022-48570: Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.
Key phrases: timing side channel
CVE-2022-48571: memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.
Key phrases: a Denial of Service via multi-packet, denial of service, multi-packet uploads
CVE-2022-48577: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.
Key phrases: access issue
CVE-2022-48579: UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.
Key phrases: extraction of files outside of the destination folder, unrar, symlink chains
CVE-2022-4858: Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set.
Key phrases: obtain sensitive tokens from logs, if specific configurations, sensitive information
CVE-2022-48580: A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows forthe injection of arbitrary commands to the underlying operating system.
Key phrases: the underlying operating system, command injection, arbitrary commands
CVE-2022-48581: A command injection vulnerability exists in the dash export feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
Key phrases: the underlying operating system, command injection, arbitrary commands
CVE-2022-48582: A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
Key phrases: the underlying operating system, command injection, arbitrary commands
CVE-2022-48583: A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
Key phrases: the underlying operating system, command injection, arbitrary commands
CVE-2022-48584: A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
Key phrases: the underlying operating system, command injection, arbitrary commands
CVE-2022-48585: A SQL injection vulnerability exists in the admin brand portal feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection
CVE-2022-48586: A SQL injection vulnerability exists in the json walker feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection
CVE-2022-48587: A SQL injection vulnerability exists in the schedule editor feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection
CVE-2022-48588: A SQL injection vulnerability exists in the schedule editor decoupled feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection
CVE-2022-48589: A SQL injection vulnerability exists in the reporting job editor feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection
CVE-2022-4859: A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the function submitForm of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UserProfileMenu.java of the component User Profile Menu. The manipulation of the argument firstName/lastName leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 7.0.34 is able to address this issue. The patch is named 9a77f508a2bf8cf661d588f37a4cc29ecaea4fc8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217055.
Key phrases: cross site scripting
CVE-2022-48590: A SQL injection vulnerability exists in the admin dynamic app mib errors feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection
CVE-2022-48591: A SQL injection vulnerability exists in the vendor_state parameter of the vendor print report feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Key phrases: for the injection of arbitrary SQL before being, sql injection