Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41603 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T13:41:02.943Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41604 State: PUBLISHED Published: 2022-09-27T02:17:14.000Z Last Updated: 2025-05-22T13:52:43.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This can be leveraged to perform an arbitrary file move as NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.infigo.hr/en/insights/39/elevation-of-privilege-in-
rogram Container: - CISA ADP Vulnrichment: References: - https://www.infigo.hr/en/insights/39/elevation-of-privilege-in-zonealarm-extreme-security/ - https://github.com/Wh04m1001/ZoneAlarmEoP - https://www.zonealarm.com/software/extreme-security/release-history
CVE ID: CVE-2022-41606 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T15:57:01.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com - https://discuss.hashicorp.com/t/hcsec-2022-22-nomad-panics-on-job-submission-with-bad-artifact-stanza-source-url/45420
CVE ID: CVE-2022-41607 State: PUBLISHED Published: 2022-11-10T21:31:26.863838Z Last Updated: 2024-10-15T17:13:11.103Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: ETIC Telecom Products: Remote Access Server (RAS) Problem Types: CWE-22 Description: All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vulnerable to directory traversal through several different methods. This could allow an attacker to read sensitive files from the server, including SSH private keys, passwords, scripts, python objects, database files, and more. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
scripts, python objects, database files, and more. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-01
CVE ID: CVE-2022-41608 State: PUBLISHED Published: 2023-05-22T09:55:57.103Z Last Updated: 2025-01-08T22:06:59.173Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Thomas Belser Products: Asgaros Forum Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum plugin <= 2.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/asgaros-forum/wordpress-asgaros-forum-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41609 State: PUBLISHED Published: 2022-11-18T23:18:50.883Z Last Updated: 2025-02-20T19:49:32.424Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: WordPlus Products: Better Messages (WordPress plugin) Problem Types: CWE-918 Description: Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/bp-better-messages/#developers - https://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-68-server-side-request-forgery-ssrf-
m/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-68-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41610 State: PUBLISHED Published: 2023-05-10T13:17:23.402Z Last Updated: 2025-01-27T17:58:41.506Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) EMA Configuration Tool Problem Types: denial of service, CWE-285 Description: Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00808.html
CVE ID: CVE-2022-41611 State: PUBLISHED Published: 2022-11-15T14:24:49.902Z Last Updated: 2025-04-29T20:09:18.561Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Hallo Welt! GmbH Products: BlueSpice Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-03
CVE ID: CVE-2022-41612 State: PUBLISHED Published: 2023-04-24T16:56:54.970Z Last Updated: 2025-01-09T15:35:24.920Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Shareaholic Products: Similar Posts Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shareaholic Similar Posts plugin <= 3.1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/similar-posts/wordpress-similar-posts-plugin-3-1-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-41613 State: PUBLISHED Published: 2023-01-06T21:11:43.209Z Last Updated: 2025-02-13T16:33:05.319Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Systems Products: MicroStation Connect Problem Types: CWE-125 Description: Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-293-01 - https://www.bentley.com/advisories/be-2023-0003/
CVE ID: CVE-2022-41614 State: PUBLISHED Published: 2023-02-16T20:00:30.844Z Last Updated: 2025-01-27T18:12:16.689Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) ON Event Series Android application Problem Types: information disclosure Description: Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html
CVE ID: CVE-2022-41615 State: PUBLISHED Published: 2022-11-18T22:28:21.970506Z Last Updated: 2024-09-16T23:05:38.582Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: AGILELOGIX Products: Store Locator WordPress (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-plugin-1-4-5-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wor
-locator-plugin-1-4-5-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/agile-store-locator/
CVE ID: CVE-2022-41616 State: PUBLISHED Published: 2023-11-07T17:17:01.619Z Last Updated: 2024-09-04T18:33:22.077Z Vendors: Kaushik Kalathiya Products: Export Users Data CSV Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: from n/a through 2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/export-users-data-csv/wordpress-export-users-data-csv-plugin-2-1-auth-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-41617 State: PUBLISHED Published: 2022-10-19T21:19:03.589Z Last Updated: 2025-05-08T18:15:10.941Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Advanced WAF & ASM Problem Types: CWE-77 Description: In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K11830089
CVE ID: CVE-2022-41618 State: PUBLISHED Published: 2022-11-18T22:29:39.254Z Last Updated: 2025-02-20T19:50:05.733Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: David Lingren Products: Media Library Assistant (WordPress plugin) Problem Types: CWE-200 Description: Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/media-library-assistant/wordpress-media-library-assistant-plugin-3-00-unauthenticated-error-log-disclosure-vulnerability?_s_id=cve - https://wordpress.org/plugi
library-assistant-plugin-3-00-unauthenticated-error-log-disclosure-vulnerability?_s_id=cve - https://wordpress.org/plugins/media-library-assistant/#developers
CVE ID: CVE-2022-41619 State: PUBLISHED Published: 2024-01-17T17:02:41.406Z Last Updated: 2024-10-21T11:52:47.213Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SedLex Products: Image Zoom Problem Types: CWE-862 Description: Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/image-zoom/wordpress-image-zoom-plugin-1-8-8-multiple-broken-access-control-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-41620 State: PUBLISHED Published: 2023-02-08T13:09:44.157Z Last Updated: 2025-01-13T15:57:38.332Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: SeoSamba Products: SeoSamba for WordPress Webmasters Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SeoSamba for WordPress Webmasters plugin <= 1.0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seosamba-webmasters/wordpress-seosamba-for-wordpress-webmasters-plugin-1-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41621 State: PUBLISHED Published: 2023-05-10T13:17:18.244Z Last Updated: 2025-01-24T17:40:27.681Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) QAT drivers for Windows Problem Types: information disclosure, CWE-284 Description: Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00778.html
CVE ID: CVE-2022-41622 State: PUBLISHED Published: 2022-12-07T03:08:06.811Z Last Updated: 2025-04-23T13:36:49.162Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP, BIG-IQ Centralized Management Problem Types: CWE-352 Description: In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K94221585
CVE ID: CVE-2022-41623 State: PUBLISHED Published: 2022-10-14T19:37:09.584Z Last Updated: 2025-02-20T19:58:43.074Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Villatheme Products: ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin) Problem Types: CWE-202 Description: Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce
com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve - https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog
CVE ID: CVE-2022-41624 State: PUBLISHED Published: 2022-10-19T21:19:24.694Z Last Updated: 2025-05-08T18:14:01.162Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-401 Description: In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.1.x before 13.1.5.1, when a sideband iRule is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K43024307
CVE ID: CVE-2022-41625 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:52.193Z Description: No description available.
CVE ID: CVE-2022-41626 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:53.548Z Description: No description available.
CVE ID: CVE-2022-41627 State: PUBLISHED Published: 2022-10-27T20:04:06.498Z Last Updated: 2025-04-16T16:08:30.914Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AliveCor Products: KardiaMobile Problem Types: CWE-311 Description: The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram (EKG) has no encryption for its data-over-sound protocols. Exploiting this vulnerability could allow an attacker to read patient EKG results or create a denial-of-service condition by emitting sounds at similar frequencies as the device, disrupting the smartphone microphone’s ability to accurately read the data. To carry out this a
equencies as the device, disrupting the smartphone microphone’s ability to accurately read the data. To carry out this attack, the attacker must be close (less than 5 feet) to pick up and emit sound waves. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-22-298-01
CVE ID: CVE-2022-41628 State: PUBLISHED Published: 2023-05-10T13:16:39.615Z Last Updated: 2025-01-27T18:11:27.152Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC P14E Laptop Element software for Windows 10 Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/s
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00802.html
CVE ID: CVE-2022-41629 State: PUBLISHED Published: 2022-10-31T19:51:27.025Z Last Updated: 2025-04-16T16:06:21.139Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-306 Description: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any file from the “RunningConfigs” directory. The attacker could then view and modify configuration files such as UserListInfo.xml, which would allow them to see existing administrative passwords. Additional Analyst Notes: - CVE Program Con
stInfo.xml, which would allow them to see existing administrative passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-41633 State: PUBLISHED Published: 2023-04-04T11:12:15.721Z Last Updated: 2025-01-10T19:12:13.706Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: PeepSo Products: Community by PeepSo – Social Network, Membership, Registration, User Profiles Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin <= 6.0.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-plugin-6-0-2-0-cross-site-requ
- https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-plugin-6-0-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41634 State: PUBLISHED Published: 2022-11-18T22:27:02.042Z Last Updated: 2025-02-20T19:50:13.610Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Max Foundry Products: Media Library Folders (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Media Library Folders plugin <= 7.1.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/media-library-plus/wordpress-media-library-folders-plugin-7-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/media-library
lders-plugin-7-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/media-library-plus/#developers
CVE ID: CVE-2022-41635 State: PUBLISHED Published: 2023-05-25T08:59:09.416Z Last Updated: 2025-01-08T22:00:59.954Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Zorem Products: Advanced Shipment Tracking for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-advanced-shipment-tracking/wordpress-advanced-shipment-tracking-for-woocommerce-plugin-3-5-2-cross-site-request-forgery-csrf-vulnerability?_s_
king/wordpress-advanced-shipment-tracking-for-woocommerce-plugin-3-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-41636 State: PUBLISHED Published: 2022-10-28T17:12:20.666Z Last Updated: 2025-04-16T16:07:21.818Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Haas Products: Haas CNC Controller Problem Types: CWE-319 Description: Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-01
CVE ID: CVE-2022-41637 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:54.914Z Description: No description available.
CVE ID: CVE-2022-41638 State: PUBLISHED Published: 2022-10-21T15:31:10.025Z Last Updated: 2025-02-20T19:58:28.160Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Chop-Chop Products: Pop-Up Chop Chop (WordPress plugin) Problem Types: CWE-79 Description: Auth. Stored Cross-Site Scripting (XSS) in Pop-Up Chop Chop plugin <= 2.1.7 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pop-up/wordpress-pop-up-chop-chop-plugin-2-1-7-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/pop-up/
CVE ID: CVE-2022-41639 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-15T14:30:08.973Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-122 Description: A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
us file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1633 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33
CVE ID: CVE-2022-41640 State: PUBLISHED Published: 2023-05-09T09:35:36.523Z Last Updated: 2025-01-09T15:23:41.651Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rymera Web Co Products: Wholesale Suite Problem Types: CWE-79 Description: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <= 2.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-wholesale-prices/wordpress-wholesale-suite-plugin-2-1-5-authenticated-cross-site-scripting-xss-vulnerability?_s_id=cve