Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26034 State: PUBLISHED Published: 2022-04-15T01:45:21 Last Updated: 2024-08-03T04:56:37.370Z Vendors: Yokogawa Electric Corporation Products: CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP Problem Types: Improper Authentication Description: Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00, and B/M9000 VP R8.01.01 to R8.03.01 allows an attacker to use the functions provided by AD server. This may lead to leakage or tampering of data managed by AD server. Addition
to use the functions provided by AD server. This may lead to leakage or tampering of data managed by AD server. Additional Analyst Notes: - CVE Program Container: References: - https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/ - https://jvn.jp/vu/JVNVU99204686/index.html
CVE ID: CVE-2022-26037 State: REJECTED Published: N/A Last Updated: 2025-05-28T16:41:15.177Z Description: No description available.
CVE ID: CVE-2022-26038 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:17:16.171Z Description: No description available.
CVE ID: CVE-2022-26039 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:23:29.428Z Description: No description available.
CVE ID: CVE-2022-26041 State: PUBLISHED Published: 2022-06-13T04:50:25 Last Updated: 2024-08-03T04:56:37.670Z Vendors: GENEREX SYSTEMS Computervertriebsgesellschaft mbH Products: RCCMD Problem Types: Directory traversal Description: Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.generex.de/support/downloads/software/rccmd/update - https://jvn.jp/en/jp/JVN60801132/index.html
CVE ID: CVE-2022-26042 State: PUBLISHED Published: 2022-05-12T17:01:42.301Z Last Updated: 2025-04-15T19:02:44.432Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-77 Description: An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHan
ogram Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1478
CVE ID: CVE-2022-26043 State: PUBLISHED Published: 2022-05-25T20:15:20.808Z Last Updated: 2025-04-15T19:01:22.077Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-306 Description: An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of a custom Security Group. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
igger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1489
CVE ID: CVE-2022-26045 State: PUBLISHED Published: 2022-11-11T15:48:48.801Z Last Updated: 2025-02-05T20:46:38.739Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) XMM(TM) 7560 Modem software Problem Types: escalation of privilege Description: Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE ID: CVE-2022-26047 State: PUBLISHED Published: 2022-11-11T15:49:13.792Z Last Updated: 2025-01-29T20:50:12.842Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products Problem Types: denial of service Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advis
Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00699.html
CVE ID: CVE-2022-26049 State: PUBLISHED Published: 2022-09-11T13:45:15.592998Z Last Updated: 2024-09-16T18:28:46.934Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: n/a Products: com.diffplug.gradle:goomph Problem Types: Arbitrary File Write via Archive Extraction (Zip Slip) Description: This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locations on the file system. Overwriting certain files/directories could allow an attacker to achieve remote code execution on a target system by exploiting this vulnerability. **No
ories could allow an attacker to achieve remote code execution on a target system by exploiting this vulnerability. **Note:** This could have allowed a malicious zip file to extract itself into an arbitrary directory. The only file that Goomph extracts is the p2 bootstrapper and eclipse metadata files hosted at eclipse.org, which are not malicious, so the only way this vulnerability could have affected you is if you had set a custom bootstrap zip, and that zip was malicious. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JAVA-COMDIFFPLUGGRADLE-2981040 - https://github.com/diffplug/goomph/pull/198 - https://github.com/diffplug/goomph/commit
JAVA-COMDIFFPLUGGRADLE-2981040 - https://github.com/diffplug/goomph/pull/198 - https://github.com/diffplug/goomph/commit/25f04f67ba62d9a14104bee13a0a0f2517afb8c8
CVE ID: CVE-2022-26051 State: PUBLISHED Published: 2022-07-04T06:55:34 Last Updated: 2024-08-03T04:56:37.792Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authorization Description: Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-26052 State: PUBLISHED Published: 2023-02-16T19:59:50.826Z Last Updated: 2025-01-27T18:23:48.274Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-26053 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:23:44.508Z Description: No description available.
CVE ID: CVE-2022-26054 State: PUBLISHED Published: 2022-07-04T06:55:39 Last Updated: 2024-08-03T04:56:37.501Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authorization Description: Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-26055 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:24:39.274Z Description: No description available.
CVE ID: CVE-2022-26056 State: REJECTED Published: N/A Last Updated: 2025-05-28T16:45:36.720Z Description: No description available.
CVE ID: CVE-2022-26057 State: PUBLISHED Published: 2022-06-15T18:47:01.086934Z Last Updated: 2024-09-16T19:14:04.588Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Mint WorkBench Problem Types: CWE-269 Description: Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation on the product Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AK
tional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A0305&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.38192870.478847987.1655218701-372504397.1647012599
CVE ID: CVE-2022-26058 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:25:06.130Z Description: No description available.
CVE ID: CVE-2022-26059 State: PUBLISHED Published: 2022-03-29T16:37:01.122Z Last Updated: 2025-04-16T16:37:44.852Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26061 State: PUBLISHED Published: 2022-08-22T18:21:43.633041Z Last Updated: 2024-09-16T23:35:47.966Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HDF5 Group Products: libhdf5 Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1487
CVE ID: CVE-2022-26062 State: PUBLISHED Published: 2023-02-16T19:59:46.697Z Last Updated: 2025-01-27T18:24:51.377Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector for Intel(R) oneAPI HPC Toolkit Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-c
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-26065 State: PUBLISHED Published: 2022-03-29T16:37:08.222Z Last Updated: 2025-04-16T16:36:24.327Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26067 State: PUBLISHED Published: 2022-05-25T20:15:22.254Z Last Updated: 2025-04-15T19:01:14.827Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-306 Description: An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to arbitrary file read. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintellig
ability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1492
CVE ID: CVE-2022-26068 State: PUBLISHED Published: 2022-05-01T15:25:44.271783Z Last Updated: 2024-09-16T18:23:36.521Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C) Vendors: n/a Products: pistacheio/pistache Problem Types: Path Traversal Description: This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-UNMANAGED-PISTACHEIOPISTACHE-2806332 - https://github.com/pistacheio/pistache/pull/1065
CVE ID: CVE-2022-26069 State: PUBLISHED Published: 2022-03-29T16:37:05.023Z Last Updated: 2025-04-16T16:37:06.445Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26070 State: PUBLISHED Published: 2022-05-06T16:37:16 Last Updated: 2024-08-03T04:56:37.596Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-200 Description: When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-0507.html
CVE ID: CVE-2022-26071 State: PUBLISHED Published: 2022-05-05T16:23:09.931638Z Last Updated: 2024-09-17T00:26:30.945Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-330 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel (TMM) allows an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Note: Software
ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K41440465
CVE ID: CVE-2022-26072 State: REJECTED Published: N/A Last Updated: 2025-05-28T16:46:36.101Z Description: No description available.
CVE ID: CVE-2022-26073 State: PUBLISHED Published: 2022-05-05T17:35:25.778Z Last Updated: 2025-04-15T19:04:20.230Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Anker Products: Eufy Homebase 2 Problem Types: CWE-190 Description: A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to a device reboot. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1480
CVE ID: CVE-2022-26074 State: PUBLISHED Published: 2022-08-18T19:56:02.000Z Last Updated: 2025-05-05T16:22:38.832Z Vendors: n/a Products: Intel(R) SPS Problem Types: denial of service Description: Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00669.html - https://security.netapp.com/advisory/ntap-20220930-0003/
CVE ID: CVE-2022-26075 State: PUBLISHED Published: 2022-05-12T17:01:43.811Z Last Updated: 2025-04-15T19:02:37.604Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1500
CVE ID: CVE-2022-26076 State: PUBLISHED Published: 2023-02-16T19:59:48.830Z Last Updated: 2025-01-27T18:24:19.122Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Deep Neural Network (oneDNN) Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-26077 State: PUBLISHED Published: 2022-05-25T20:15:23.746Z Last Updated: 2025-04-15T19:01:07.716Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-319 Description: A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
traffic to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1490
CVE ID: CVE-2022-26078 State: PUBLISHED Published: 2022-07-06T16:29:29 Last Updated: 2024-08-03T04:56:37.504Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Gallagher Products: Gallagher Controller 6000 Problem Types: CWE-754 Description: Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions prior to 220303a; vCR8.50 versions prior to 220303a; vCR8.40 versions prior to 220303a; vCR8.30 versions prior to 220303a. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-
or to 220303a. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2022-26078
CVE ID: CVE-2022-26079 State: PUBLISHED Published: 2022-11-11T15:48:47.785Z Last Updated: 2025-02-05T20:46:57.179Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) XMM(TM) 7560 Modem software Problem Types: escalation of privilege Description: Improper conditions check in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE ID: CVE-2022-26080 State: PUBLISHED Published: 2023-03-16T12:53:29.530Z Last Updated: 2025-02-26T15:04:35.413Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N) Vendors: ABB Products: Pulsar Plus System Controller NE843_S , Infinity DC Power Plant Problem Types: CWE-330 Description: Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
461(2) – comcode 150047415. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256117643.1223066510.1678942947-1879524908.1677751217
CVE ID: CVE-2022-26081 State: PUBLISHED Published: 2022-03-17T17:15:54 Last Updated: 2024-08-03T04:56:37.604Z Vendors: KINGSOFT JAPAN, INC. Products: The installer of WPS Office Problem Types: CWE-427 Description: The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. Additional Analyst Notes: - CVE Program Container: References: - https://support.kingsoft.jp/support-info/weakness.html - https://jvn.jp/en/jp/JVN21234459/