{"vulnerability": "cve-2022-2765", "sightings": [{"uuid": "a4f132bb-529d-469e-916e-2e9ad85f1402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27654", "type": "seen", "source": "https://t.me/cibsecurity/40642", "content": "\u203c CVE-2022-27654 \u203c\n\nWhen a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T20:23:02.000000Z"}, {"uuid": "564e7210-cd68-476e-9235-9acb3f85a941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27651", "type": "seen", "source": "https://gist.github.com/alon710/f3b66c3a3c0635bea5b52386631914f8", "content": "", "creation_timestamp": "2026-01-24T22:43:49.000000Z"}, {"uuid": "16106687-46ad-4f45-9779-c2f6ee688bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27651", "type": "seen", "source": "https://gist.github.com/alon710/931df119c0c7aff054207b175ce833b5", "content": "", "creation_timestamp": "2026-01-24T22:43:47.000000Z"}, {"uuid": "d7da233b-2cc9-4a42-93a7-98c4994718cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27652", "type": "seen", "source": "https://t.me/cibsecurity/70595", "content": "\u203c CVE-2022-3466 \u203c\n\nThe version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP 4.9.41 and 4.10.12 via RHBA-2022:5433 and RHSA-2022:1600. This issue could allow an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. For more details, see https://access.redhat.com/security/cve/CVE-2022-27652.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-15T18:25:30.000000Z"}, {"uuid": "c9065b94-f698-4a7c-9f6c-113e9ca85382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27656", "type": "seen", "source": "https://t.me/cibsecurity/42355", "content": "\u203c CVE-2022-27656 \u203c\n\nThe Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T18:35:30.000000Z"}, {"uuid": "9739564e-f848-426d-94a8-bcb908482a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27652", "type": "seen", "source": "https://t.me/cibsecurity/41043", "content": "\u203c CVE-2022-27652 \u203c\n\nA flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-18T20:29:44.000000Z"}, {"uuid": "2b870d0e-e7ba-43af-a86a-2498cd7f6cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27651", "type": "seen", "source": "https://t.me/cibsecurity/40132", "content": "\u203c CVE-2022-27651 \u203c\n\nA flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T00:28:13.000000Z"}, {"uuid": "7170c88c-bc90-47b2-b368-7f37c737bd41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27650", "type": "seen", "source": "https://t.me/cibsecurity/40128", "content": "\u203c CVE-2022-27650 \u203c\n\nA flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T00:28:08.000000Z"}, {"uuid": "00629ee1-d912-4bbd-9f3f-79ec14c4a1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27658", "type": "seen", "source": "https://t.me/cibsecurity/39665", "content": "\u203c CVE-2022-27658 \u203c\n\nUnder certain conditions, SAP Innovation management - version 2.0, allows an attacker to access information which could lead to information gathering for further exploits and attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-28T22:41:54.000000Z"}]}