{"vulnerability": "CVE-2022-3176", "sightings": [{"uuid": "cbbdff19-5de5-4764-b9cc-eb28504777f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31764", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957414797440247", "content": "", "creation_timestamp": "2025-02-06T14:29:15.110829Z"}, {"uuid": "55f09ad7-79a3-499c-882a-31ef1e8a51f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjvtwbqyh2w", "content": "", "creation_timestamp": "2025-02-06T20:19:00.416038Z"}, {"uuid": "d5da71aa-0548-4c92-951d-f9e91cb55f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31764", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjevk3qka2c", "content": "", "creation_timestamp": "2025-02-06T15:15:40.810443Z"}, {"uuid": "7e142d89-8b92-4886-8985-78043afa294c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31764", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113958433206468530", "content": "", "creation_timestamp": "2025-02-06T18:48:15.301372Z"}, {"uuid": "1fd0691d-07c4-4330-b600-47c5ede19cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31765", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhd6zgtz2a", "content": "", "creation_timestamp": "2026-04-14T13:10:23.752995Z"}, {"uuid": "e907e5c2-7acc-43c2-b25f-f5071324c39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-31765", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20", "content": "", "creation_timestamp": "2026-04-14T03:04:52.000000Z"}, {"uuid": "87bb3c3e-8a30-4d53-8329-73c34724c0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31765", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-07", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "661e1e53-d720-415e-a2d7-b9f71c7cbd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31765", "type": "seen", "source": "https://t.me/cibsecurity/51113", "content": "\u203c CVE-2022-31765 \u203c\n\nAffected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:26:06.000000Z"}, {"uuid": "d39623fc-e2f2-4929-856e-d1a872c0f1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31764", "type": "seen", "source": "https://t.me/cvedetector/17396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-31764 - Apache ShardingSphere ElasticJob-UI H2 DB RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-31764 \nPublished : Feb. 6, 2025, 3:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2.  \nThe premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T17:44:18.000000Z"}, {"uuid": "b53367ca-c429-4f27-9f31-9a151e697a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31766", "type": "seen", "source": "https://t.me/cibsecurity/51099", "content": "\u203c CVE-2022-31766 \u203c\n\nA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (All versions < V7.1.2), SCALANCE M804PB (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex B) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (Annex B) (All versions < V7.1.2), SCALANCE M826-2 SHDSL-Router (All versions < V7.1.2), SCALANCE M874-2 (All versions < V7.1.2), SCALANCE M874-3 (All versions < V7.1.2), SCALANCE M876-3 (EVDO) (All versions < V7.1.2), SCALANCE M876-3 (ROK) (All versions < V7.1.2), SCALANCE M876-4 (EU) (All versions < V7.1.2), SCALANCE M876-4 (NAM) (All versions < V7.1.2), SCALANCE MUM853-1 (EU) (All versions < V7.1.2), SCALANCE MUM856-1 (EU) (All versions < V7.1.2), SCALANCE MUM856-1 (RoW) (All versions < V7.1.2), SCALANCE S615 (All versions < V7.1.2), SCALANCE WAM763-1 (All versions >= V1.1.0), SCALANCE WAM766-1 (All versions >= V1.1.0), SCALANCE WAM766-1 (All versions >= V1.1.0), SCALANCE WAM766-1 6GHz (All versions >= V1.1.0), SCALANCE WAM766-1 EEC (All versions >= V1.1.0), SCALANCE WAM766-1 EEC (All versions >= V1.1.0), SCALANCE WAM766-1 EEC 6GHz (All versions >= V1.1.0), SCALANCE WUM763-1 (All versions >= V1.1.0), SCALANCE WUM763-1 (All versions >= V1.1.0), SCALANCE WUM766-1 (All versions >= V1.1.0), SCALANCE WUM766-1 (All versions >= V1.1.0), SCALANCE WUM766-1 6GHz (All versions >= V1.1.0). Affected devices with TCP Event service enabled do not properly handle malformed packets. This could allow an unauthenticated remote attacker to cause a denial of service and reboot the device thus possibly affecting other network resources.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:45.000000Z"}, {"uuid": "9c6cec32-ca34-4398-ba96-884af42585bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31763", "type": "seen", "source": "https://t.me/cibsecurity/44310", "content": "\u203c CVE-2022-31763 \u203c\n\nThe kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T18:18:15.000000Z"}, {"uuid": "9f6b1a3e-fe9b-495b-8f79-21b22d056a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3176", "type": "seen", "source": "https://t.me/cibsecurity/49915", "content": "\u203c CVE-2022-3176 \u203c\n\nThere exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring poll doesn't handle POLLFREE. This allows a use-after-free to occur if a signalfd or binder fd is polled with io_uring poll, and the waitqueue gets freed. We recommend upgrading past commit fc78b2fc21f10c4c9c4d5d659a685710ffa63659\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T18:28:55.000000Z"}, {"uuid": "de845653-d563-48be-b3f5-a67ec9ccb15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31768", "type": "seen", "source": "https://t.me/cibsecurity/43884", "content": "\u203c CVE-2022-31768 \u203c\n\nIBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-06T22:30:25.000000Z"}, {"uuid": "73d979ca-2a5f-4b55-8b4f-811944ec9cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31769", "type": "seen", "source": "https://t.me/cibsecurity/44211", "content": "\u203c CVE-2022-31769 \u203c\n\nIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-12T03:09:24.000000Z"}, {"uuid": "6c4805e2-3a83-4aa1-8f62-ef6f7d89ef53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31761", "type": "seen", "source": "https://t.me/cibsecurity/44328", "content": "\u203c CVE-2022-31761 \u203c\n\nConfiguration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T20:17:23.000000Z"}, {"uuid": "4ae503f1-cb2b-467c-8958-858124d9f375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31760", "type": "seen", "source": "https://t.me/cibsecurity/44327", "content": "\u203c CVE-2022-31760 \u203c\n\nDialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T20:17:22.000000Z"}, {"uuid": "4be32bde-9673-4611-a07c-f988245e04b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31762", "type": "seen", "source": "https://t.me/cibsecurity/44299", "content": "\u203c CVE-2022-31762 \u203c\n\nThe AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T18:18:03.000000Z"}]}