# CVEs published 2022-12-23

106 CVEs were published on December 23, 2022: 28 critical, 42 high. Days are UTC.

- [CVE-2020-26302](https://cve.now/CVE-2020-26302.md): is.js is a general-purpose check library. (CVSS 7.5, arasatasaygin is.js · is\_js)
- [CVE-2022-22184](https://cve.now/CVE-2022-22184.md): Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1 (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2022-25948](https://cve.now/CVE-2022-25948.md): Information Exposure (CVSS 5.3, liquidjs)
- [CVE-2022-36354](https://cve.now/CVE-2022-36354.md): A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. (CVSS 5.3, OpenImageIO Project OpenImageIO)
- [CVE-2022-38143](https://cve.now/CVE-2022-38143.md): A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. (CVSS 9.8, OpenImageIO Project OpenImageIO)
- [CVE-2022-41639](https://cve.now/CVE-2022-41639.md): A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3. (CVSS 9.8, OpenImageIO Project OpenImageIO)
- [CVE-2022-41649](https://cve.now/CVE-2022-41649.md): A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. (CVSS 7.5, OpenImageIO Project OpenImageIO)
- [CVE-2022-41654](https://cve.now/CVE-2022-41654.md): An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. (CVSS 9.6, Ghost Foundation Ghost · ghost)
- [CVE-2022-41684](https://cve.now/CVE-2022-41684.md): A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD (CVSS 7.5, OpenImageIO Project OpenImageIO)
- [CVE-2022-41697](https://cve.now/CVE-2022-41697.md): A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. (CVSS 5.3, Ghost Foundation Ghost)
- [CVE-2022-41794](https://cve.now/CVE-2022-41794.md): A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. (CVSS 9.8, OpenImageIO Project OpenImageIO)
- [CVE-2022-41837](https://cve.now/CVE-2022-41837.md): An out-of-bounds write vulnerability exists in the OpenImageIO::add\_exif\_item\_to\_spec functionality of OpenImageIO Project OpenImageIO v2.4. (CVSS 9.8, OpenImageIO Project OpenImageIO)
- [CVE-2022-41838](https://cve.now/CVE-2022-41838.md): A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 9.8, OpenImageIO Project OpenImageIO)
- [CVE-2022-41977](https://cve.now/CVE-2022-41977.md): An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. (CVSS 5.3, OpenImageIO Project OpenImageIO)
- [CVE-2022-41981](https://cve.now/CVE-2022-41981.md): A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-41988](https://cve.now/CVE-2022-41988.md): An information disclosure vulnerability exists in the OpenImageIO::decode\_iptc\_iim() functionality of OpenImageIO Project OpenImageIO v2.3.1 (CVSS 5.3, OpenImageIO Project OpenImageIO)
- [CVE-2022-41999](https://cve.now/CVE-2022-41999.md): A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4. (CVSS 7.5, OpenImageIO Project OpenImageIO)
- [CVE-2022-43592](https://cve.now/CVE-2022-43592.md): An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9, OpenImageIO Project OpenImageIO)
- [CVE-2022-43593](https://cve.now/CVE-2022-43593.md): A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9, OpenImageIO Project OpenImageIO)
- [CVE-2022-43594](https://cve.now/CVE-2022-43594.md): Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9, OpenImageIO Project OpenImageIO)
- [CVE-2022-43595](https://cve.now/CVE-2022-43595.md): Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9, OpenImageIO Project OpenImageIO)
- [CVE-2022-43596](https://cve.now/CVE-2022-43596.md): An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4 (CVSS 5.9, OpenImageIO Project OpenImageIO)
- [CVE-2022-43597](https://cve.now/CVE-2022-43597.md): Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-43598](https://cve.now/CVE-2022-43598.md): Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-43599](https://cve.now/CVE-2022-43599.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-43600](https://cve.now/CVE-2022-43600.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-43601](https://cve.now/CVE-2022-43601.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-43602](https://cve.now/CVE-2022-43602.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1, OpenImageIO Project OpenImageIO)
- [CVE-2022-43603](https://cve.now/CVE-2022-43603.md): A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9, OpenImageIO Project OpenImageIO)
- [CVE-2022-44510](https://cve.now/CVE-2022-44510.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-23854](https://cve.now/CVE-2022-23854.md): AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user (CVSS 7.5, AVEVA InTouch Access Anywhere)
- [CVE-2022-41290](https://cve.now/CVE-2022-41290.md): IBM AIX privilege escalation (CVSS 8.4, IBM AIX)
- [CVE-2022-39164](https://cve.now/CVE-2022-39164.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-43849](https://cve.now/CVE-2022-43849.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-43848](https://cve.now/CVE-2022-43848.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-39165](https://cve.now/CVE-2022-39165.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-40233](https://cve.now/CVE-2022-40233.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-43380](https://cve.now/CVE-2022-43380.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-43381](https://cve.now/CVE-2022-43381.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2022-4697](https://cve.now/CVE-2022-4697.md): ProfilePress \<= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 5.5, properfraction Paid Membership Plugin, Ecommerce, User Regi…)
- [CVE-2022-4698](https://cve.now/CVE-2022-4698.md): ProfilePress \<= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings (CVSS 5.5, properfraction Paid Membership Plugin, Ecommerce, User Regi…)
- [CVE-2022-23547](https://cve.now/CVE-2022-23547.md): Heap buffer overflow in pjproject when decoding STUN message (CVSS 6.5, pjsip pjproject)
- [CVE-2022-46171](https://cve.now/CVE-2022-46171.md): Tauri vulnerable to path traversal (CVSS 6.8, tauri-apps tauri · tauri)
- [CVE-2022-33324](https://cve.now/CVE-2022-33324.md): Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series (CVSS 7.5, Mitsubishi Electric MELSEC iQ-R Series R00CPU · Mitsubi… +25)
- [CVE-2021-32692](https://cve.now/CVE-2021-32692.md): Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt (CVSS 9.6, ActivityWatch Activity Watch)
- [CVE-2022-28228](https://cve.now/CVE-2022-28228.md): Out-of-bounds read was discovered in YDB server. (CVSS 9.1, YDB)
- [CVE-2022-28229](https://cve.now/CVE-2022-28229.md): The hash functionality in userver before 42059b6319661583b3080cab9b595d4f8ac48128 allows attackers to cause a denial of service via crafted (CVSS 7.5, userver)
- [CVE-2022-38757](https://cve.now/CVE-2022-38757.md): CVE-2022-38757 ZENworks (CVSS 7.2, Micro Focus ZENworks Configuration Management · Micro Fo… +2)
- [CVE-2022-40011](https://cve.now/CVE-2022-40011.md): Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then us (CVSS 6.1)
- [CVE-2022-43551](https://cve.now/CVE-2022-43551.md): A vulnerability exists in curl \<7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. (CVSS 7.5, https://github.com/curl/curl)
- [CVE-2022-44565](https://cve.now/CVE-2022-44565.md): An improper access validation vulnerability exists in airMAX AC \<8.7.11, airFiber 60/LR \<2.6.2, airFiber 60 XG/HD \<v1.0.0 and airFiber GBE \< (CVSS 5.3, UISP Wireless)
- [CVE-2022-44567](https://cve.now/CVE-2022-44567.md): A command injection vulnerability exists in Rocket.Chat-Desktop \<3.8.14 that could allow an attacker to pass a malicious url of openInternal (CVSS 9.8, Rocket.chat - Electron Desktop)
- [CVE-2022-45706](https://cve.now/CVE-2022-45706.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function. (CVSS 9.8)
- [CVE-2022-45707](https://cve.now/CVE-2022-45707.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function. (CVSS 9.8)
- [CVE-2022-45708](https://cve.now/CVE-2022-45708.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function (CVSS 9.8)
- [CVE-2022-45709](https://cve.now/CVE-2022-45709.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule para (CVSS 9.8)
- [CVE-2022-45710](https://cve.now/CVE-2022-45710.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the for (CVSS 9.8)
- [CVE-2022-45711](https://cve.now/CVE-2022-45711.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckT (CVSS 9.8)
- [CVE-2022-45712](https://cve.now/CVE-2022-45712.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function. (CVSS 9.8)
- [CVE-2022-45714](https://cve.now/CVE-2022-45714.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function. (CVSS 9.8)
- [CVE-2022-45715](https://cve.now/CVE-2022-45715.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the (CVSS 9.8)
- [CVE-2022-45716](https://cve.now/CVE-2022-45716.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function. (CVSS 9.8)
- [CVE-2022-45717](https://cve.now/CVE-2022-45717.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetU (CVSS 9.8)
- [CVE-2022-45718](https://cve.now/CVE-2022-45718.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function. (CVSS 9.8)
- [CVE-2022-45719](https://cve.now/CVE-2022-45719.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function. (CVSS 9.8)
- [CVE-2022-45720](https://cve.now/CVE-2022-45720.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBin (CVSS 9.8)
- [CVE-2022-45721](https://cve.now/CVE-2022-45721.md): IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function. (CVSS 9.8)
- [CVE-2022-46492](https://cve.now/CVE-2022-46492.md): nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/ (CVSS 6.5)
- [CVE-2022-46560](https://cve.now/CVE-2022-46560.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the Set (CVSS 7.2)
- [CVE-2022-46561](https://cve.now/CVE-2022-46561.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the Set (CVSS 7.2)
- [CVE-2022-46562](https://cve.now/CVE-2022-46562.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuick (CVSS 7.2)
- [CVE-2022-46563](https://cve.now/CVE-2022-46563.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the Set (CVSS 7.2)
- [CVE-2022-46566](https://cve.now/CVE-2022-46566.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the Set (CVSS 7.2)
- [CVE-2022-46568](https://cve.now/CVE-2022-46568.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in (CVSS 7.2)
- [CVE-2022-46569](https://cve.now/CVE-2022-46569.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanR (CVSS 7.2)
- [CVE-2022-46570](https://cve.now/CVE-2022-46570.md): D-Link DIR-882 DIR882A1\_FW130B06, DIR-878 DIR\_878\_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the Set (CVSS 7.2)
- [CVE-2022-46641](https://cve.now/CVE-2022-46641.md): D-Link DIR-846 A1\_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)\_dhcps\_staticlist parameter in the SetI (CVSS 9.9)
- [CVE-2022-46642](https://cve.now/CVE-2022-46642.md): D-Link DIR-846 A1\_FW100A43 was discovered to contain a command injection vulnerability via the auto\_upgrade\_hour parameter in the SetAutoUpg (CVSS 9.9)
- [CVE-2022-4665](https://cve.now/CVE-2022-4665.md): Unrestricted Upload of File with Dangerous Type in ampache/ampache (CVSS 3.1, ampache/ampache)
- [CVE-2022-4683](https://cve.now/CVE-2022-4683.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos (CVSS 4.3, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4684](https://cve.now/CVE-2022-4684.md): Improper Access Control in usememos/memos (CVSS 7.6, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4686](https://cve.now/CVE-2022-4686.md): Authorization Bypass Through User-Controlled Key in usememos/memos (CVSS 8.6, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4687](https://cve.now/CVE-2022-4687.md): Incorrect Use of Privileged APIs in usememos/memos (CVSS 8.1, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4688](https://cve.now/CVE-2022-4688.md): Improper Authorization in usememos/memos (CVSS 8.8, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4689](https://cve.now/CVE-2022-4689.md): Improper Access Control in usememos/memos (CVSS 8.3, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4690](https://cve.now/CVE-2022-4690.md): Cross-site Scripting (XSS) - Stored in usememos/memos (CVSS 7.1, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4691](https://cve.now/CVE-2022-4691.md): Cross-site Scripting (XSS) - Stored in usememos/memos (CVSS 8.3, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4692](https://cve.now/CVE-2022-4692.md): Cross-site Scripting (XSS) - Stored in usememos/memos (CVSS 7.1, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4694](https://cve.now/CVE-2022-4694.md): Cross-site Scripting (XSS) - Stored in usememos/memos (CVSS 5.7, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4695](https://cve.now/CVE-2022-4695.md): Cross-site Scripting (XSS) - Stored in usememos/memos (CVSS 7.6, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4719](https://cve.now/CVE-2022-4719.md): Business Logic Errors in ikus060/rdiffweb (CVSS 5.7, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-4720](https://cve.now/CVE-2022-4720.md): Open Redirect in ikus060/rdiffweb (CVSS 6.1, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-4721](https://cve.now/CVE-2022-4721.md): Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb (CVSS 6.6, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-4722](https://cve.now/CVE-2022-4722.md): Authentication Bypass by Primary Weakness in ikus060/rdiffweb (CVSS 7.2, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-4723](https://cve.now/CVE-2022-4723.md): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 6.3, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-4724](https://cve.now/CVE-2022-4724.md): Improper Access Control in ikus060/rdiffweb (CVSS 8.4, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-47524](https://cve.now/CVE-2022-47524.md): F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack. (CVSS 5.4)
- [CVE-2022-47633](https://cve.now/CVE-2022-47633.md): An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle atta (CVSS 8.1, github.com/kyverno/kyverno)
- [CVE-2022-47938](https://cve.now/CVE-2022-47938.md): An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. (CVSS 6.5)
- [CVE-2022-47939](https://cve.now/CVE-2022-47939.md): An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. (CVSS 9.8)
- [CVE-2022-47940](https://cve.now/CVE-2022-47940.md): An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. (CVSS 8.1)
- [CVE-2022-47941](https://cve.now/CVE-2022-47941.md): An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. (CVSS 7.5)
- [CVE-2022-47942](https://cve.now/CVE-2022-47942.md): An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. (CVSS 8.8)
- [CVE-2022-47943](https://cve.now/CVE-2022-47943.md): An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. (CVSS 8.1)
- [CVE-2022-47945](https://cve.now/CVE-2022-47945.md): ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang\_switch\_o (CVSS 9.8, topthink/framework)
- [CVE-2022-47946](https://cve.now/CVE-2022-47946.md): An issue was discovered in the Linux kernel 5.10.x before 5.10.155. (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.