Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26119 State: PUBLISHED Published: 2022-11-02T00:00:00 Last Updated: 2024-10-25T13:27:19.971Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiSIEM Problem Types: Improper access control Description: A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-064
CVE ID: CVE-2022-26120 State: PUBLISHED Published: 2022-07-18T16:41:00 Last Updated: 2024-10-22T20:55:39.681Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiADC Problem Types: Execute unauthorized code or commands Description: Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
ia specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-051
CVE ID: CVE-2022-26121 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-10-22T20:53:41.416Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/ps
ath. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-026
CVE ID: CVE-2022-26122 State: PUBLISHED Published: 2022-11-02T00:00:00 Last Updated: 2024-10-22T20:53:22.490Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:P/RL:U/RC:R) Vendors: Fortinet Products: Fortinet AV Engine, FortiMail, FortiOS, FortiClient Problem Types: Denial of service Description: An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
with junk and pad characters in base64. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-074
CVE ID: CVE-2022-26123 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:26:05.926Z Description: No description available.
CVE ID: CVE-2022-26124 State: PUBLISHED Published: 2022-11-11T15:48:53.869Z Last Updated: 2025-02-05T15:38:15.857Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits Problem Types: escalation of privilege Description: Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CI
to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2022-26125 State: PUBLISHED Published: 2022-03-03T00:00:00.000Z Last Updated: 2025-11-04T16:09:39.582Z Vendors: n/a Products: FRRouting Problem Types: CWE-119 Description: Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/10507 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2022-26126 State: PUBLISHED Published: 2022-03-03T00:00:00.000Z Last Updated: 2025-11-04T16:09:40.516Z Vendors: n/a Products: FRRouting Problem Types: CWE-119 Description: Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/10505 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XUCZR6RYQVZ35BFUV7OLIUEHZW2433I2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MIEQNIWUSBQTFR
433I2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MIEQNIWUSBQTFR65HM2LLIB7PH27CZUZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTYSAL4QCE4XWMMBKUB7LSLPAFLWUML4/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2022-26127 State: PUBLISHED Published: 2022-03-03T17:21:19.000Z Last Updated: 2025-11-04T16:09:41.466Z Vendors: n/a Products: FRRouting Problem Types: CWE-119 Description: A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/10487 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2022-26128 State: PUBLISHED Published: 2022-03-03T17:22:29.000Z Last Updated: 2025-11-04T16:09:42.401Z Vendors: n/a Products: FRRouting Problem Types: CWE-119 Description: A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/10502 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2022-26129 State: PUBLISHED Published: 2022-03-03T17:24:08.000Z Last Updated: 2025-11-04T16:09:43.343Z Vendors: n/a Products: FRRouting Problem Types: CWE-119 Description: Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/10503 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2022-26130 State: PUBLISHED Published: 2022-05-05T16:24:09.410402Z Last Updated: 2024-09-16T19:20:24.533Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: F5 Products: BIG-IP Problem Types: CWE-754 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an Active mode-enabled FTP profile is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing active FTP data channel connections. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analy
nnections. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K82034427
CVE ID: CVE-2022-26131 State: PUBLISHED Published: 2022-03-07T15:28:28.000Z Last Updated: 2025-04-16T16:43:51.973Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Power Line Communications Products: PLC4TRUCKS Problem Types: CWE-1319 Description: Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01
CVE ID: CVE-2022-26133 State: PUBLISHED Published: 2022-04-20T18:30:19.225869Z Last Updated: 2024-10-03T14:55:36.962Z Vendors: Atlassian Products: Bitbucket Data Center Problem Types: Deserialization of untrusted data Description: SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/BSERV-13173 - https://confluenc
gram Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/BSERV-13173 - https://confluence.atlassian.com/security/multiple-products-security-advisory-hazelcast-vulnerable-to-remote-code-execution-cve-2016-10750-1116292387.html
CVE ID: CVE-2022-26134 State: PUBLISHED Published: 2022-06-03T21:51:57.134Z Last Updated: 2025-10-21T23:15:38.769Z Vendors: Atlassian Products: Confluence Data Center, Confluence Server Problem Types: Remote Code Execution Description: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1. Additional Analyst Notes: - C
15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/CONFSERVER-79016 - http://packetstormsecurity.com/files/167432/Confluence-OGNL-Injection-Proof-Of-Concept.html - http://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution.html - http://packetstormsecurity.com/files/167431/Through-The-Wire-CVE-2022-26134-Confluence-Proof-Of-Concept.html - http://packetstormsecurity.com/files/167449/Atlassian-Confluence-Namespace-OGNL-Injection.html - https://confluence.atlassian.com/doc/confluence-security-advisory
9/Atlassian-Confluence-Namespace-OGNL-Injection.html - https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html
CVE ID: CVE-2022-26135 State: PUBLISHED Published: 2022-06-30T05:20:15.269358Z Last Updated: 2024-10-29T15:20:52.789Z Vendors: Atlassian Products: Jira Core Server, Jira Software Server, Jira Software Data Center, Jira Service Management Server, Jira Service Management Data Center Problem Types: Server-side Request Forgery Description: A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from
tlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from version 8.21.0 before 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 before 4.13.22, from version 4.14.0 before 4.20.10 and from version 4.21.0 before 4.22.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/JRASERVER-73863 - https://jira.atlassian.com/browse/JSDSERVER-11840 - https://confluence.atlassian.com/display/JIRA/Jira+Server+Security+Advisory+29nd+June+2022
CVE ID: CVE-2022-26136 State: PUBLISHED Published: 2022-07-20T17:25:18.803466Z Last Updated: 2024-10-03T16:43:16.268Z Vendors: Atlassian Products: Bamboo Server, Bamboo Data Center, Bitbucket Server, Bitbucket Data Center, Confluence Server, Confluence Data Center, Crowd Server, Crowd Data Center, Crucible, Fisheye, Jira Core Server, Jira Software Server, Jira Software Data Center, Jira Service Management Server, Jira Service Management Data Center Problem Types: CWE-180 Description: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, an
bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlass
8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10
8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/BAM-21795 - https://jira.atlassian.com/browse/BSERV-13370 - https://jira.atlassian.com/browse/CONFSERVER-79476 - https://jira.atlassian.com/browse/CWD-5815 - https://jira.atlassian.com/browse/FE-7410 - https://jira.atlassian.com/browse/CRUC-8541 - https://jira.atlassian.com/browse/JRASERVER-73897 - https://jira.atlassian.com/browse/JSDSERVER-11863
CVE ID: CVE-2022-26137 State: PUBLISHED Published: 2022-07-20T17:25:23.603830Z Last Updated: 2024-10-03T17:10:16.886Z Vendors: Atlassian Products: Bamboo Server, Bamboo Data Center, Bitbucket Server, Bitbucket Data Center, Confluence Server, Confluence Data Center, Crowd Server, Crowd Data Center, Crucible, Fisheye, Jira Core Server, Jira Software Server, Jira Software Data Center, Jira Service Management Server, Jira Service Management Data Center Problem Types: CWE-180 Description: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has conf
cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue associated with this vulnerability: Cross-origin resource sharing (CORS) bypass. Sending a specially crafted HTTP request can invoke the Servlet Filter used to respond to CORS requests, resulting in a CORS bypass. An attacker that can trick a user into requesting a malicious URL can access the vulnerable application with the victim’s permissions. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.1
efore 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and fro
ons before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/BAM-21795 - https://jira.atlassian.com/browse/BSERV-13370 - https://jira.atlassian.com/browse/CONFSERVER-79476 - https://jira.atlassian.com/browse/CWD-5815 - https://jira.atlassian.com/browse/FE-7410 - https://jira.atlassian.com/browse/CRUC-8541 - https://jira.atlassian.com/browse/JRASERVER-73897 - h
com/browse/FE-7410 - https://jira.atlassian.com/browse/CRUC-8541 - https://jira.atlassian.com/browse/JRASERVER-73897 - https://jira.atlassian.com/browse/JSDSERVER-11863
CVE ID: CVE-2022-26138 State: PUBLISHED Published: 2022-07-20T17:25:26.913Z Last Updated: 2025-10-21T23:15:37.853Z Vendors: Atlassian Products: Questions For Confluence Problem Types: CWE-798 Description: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit this to log into Confluence and access all content accessible to users in the confluence-users group. This user account is created when installing versions 2.7.34, 2.7.35, and 3.0.2 of the app. Add
confluence-users group. This user account is created when installing versions 2.7.34, 2.7.35, and 3.0.2 of the app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/CONFSERVER-79483 - https://confluence.atlassian.com/doc/confluence-security-advisory-2022-07-20-1142446709.html
CVE ID: CVE-2022-26143 State: PUBLISHED Published: 2022-03-09T15:32:54.000Z Last Updated: 2025-10-21T23:15:44.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advis
ISA ADP Vulnrichment: References: - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-22-0001 - https://www.akamai.com/blog/security/phone-home-ddos-attack-vector - https://www.shadowserver.org/news/cve-2022-26143-tp240phonehome-reflection-amplification-ddos-attack-vector/ - https://news.ycombinator.com/item?id=30614073 - https://blog.cloudflare.com/cve-2022-26143/ - https://team-cymru.com/blog/2022/03/08/record-breaking-ddos-potential-discovered-cve-2022-26143/ - https://arstechnica.com/information-technology/2022/03/ddosers-use-new-method-capable-of-amplifying-traffic-by-a-factor-of-4-billion/
CVE ID: CVE-2022-26144 State: PUBLISHED Published: 2022-04-13T13:54:05 Last Updated: 2024-08-03T04:56:37.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary code (if CSP allows it) in manage_plugin_page.php and manage_plugin_uninstall.php when a crafted plugin is installed. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=29688
CVE ID: CVE-2022-26146 State: PUBLISHED Published: 2022-02-26T19:03:30 Last Updated: 2024-08-03T04:56:37.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - https://support-hub.tricentis.com/open?id=manual&lang=en&path=%2Fqtest%2F10400%2Fen%2Fcontent%2Fqtest_manager%2Frelease_notes%2Fonpremise_release_notes%2Fmanager_10.4.0_onpremise_release_notes.htm&product=qtest&sessionRotationTrigger=true&type=product_manual&version=10.4.2%20On%20Premise
CVE ID: CVE-2022-26147 State: PUBLISHED Published: 2022-06-21T14:26:40 Last Updated: 2024-08-03T04:56:37.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://nns.ee/blog/2022/06/21/modem-rce2.html
CVE ID: CVE-2022-26148 State: PUBLISHED Published: 2022-03-21T19:51:27 Last Updated: 2024-08-03T04:56:37.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address. Additional Analyst Notes: - CVE Program Container: References: - https://2k8.org/post-319.html - https://security.netapp.com/advisory/ntap-20220425-0005/
CVE ID: CVE-2022-26149 State: PUBLISHED Published: 2022-02-26T00:00:00 Last Updated: 2024-08-03T04:56:37.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sartlabs/0days/blob/main/Modx/Exploit.txt - http://packetstormsecurity.com/files/171488/MODX-Revolution-2.8.3-pl-Remote-Code-Execution.html
CVE ID: CVE-2022-26151 State: PUBLISHED Published: 2022-04-12T23:21:40 Last Updated: 2024-08-03T04:56:37.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/search - https://support.citrix.com/article/CTX370551 - https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe