Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
am Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442 - https://www.lansweeper.com/changelog/
CVE ID: CVE-2022-21146 State: PUBLISHED Published: 2022-03-09T15:33:11.554Z Last Updated: 2025-04-16T16:43:40.322Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: IPCOMM Products: IPCOMM ipDIO Problem Types: CWE-79 Description: Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01
CVE ID: CVE-2022-21147 State: PUBLISHED Published: 2022-05-12T17:01:26.586Z Last Updated: 2025-04-15T19:04:01.862Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: ESTsoft Products: Alyac Problem Types: CWE-823 Description: An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-202
Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1452 - https://www.estsecurity.com/public/product/alyac
CVE ID: CVE-2022-21148 State: PUBLISHED Published: 2022-08-18T19:47:20.000Z Last Updated: 2025-05-05T16:38:21.656Z Vendors: n/a Products: Intel(R) Edge Insights for Industrial software Problem Types: escalation of privilege Description: Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE ID: CVE-2022-21149 State: PUBLISHED Published: 2022-05-01T15:30:50.231470Z Last Updated: 2024-09-16T18:08:49.242Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: n/a Products: s-cart/s-cart, s-cart/core Problem Types: Cross-site Scripting (XSS) Description: The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's account through the stolen cookie. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PHP-SCARTSCART-2389035
okie. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PHP-SCARTSCART-2389035 - https://snyk.io/vuln/SNYK-PHP-SCARTCORE-2389036
CVE ID: CVE-2022-21150 State: REJECTED Published: N/A Last Updated: 2025-05-27T22:43:46.067Z Description: No description available.
CVE ID: CVE-2022-21151 State: PUBLISHED Published: 2022-05-12T16:36:06.000Z Last Updated: 2025-05-05T16:38:09.527Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html - https://www.debian.org/security/2022/dsa-5178 - https://security.netapp.com/advisory/ntap-20220826-0003/
CVE ID: CVE-2022-21152 State: PUBLISHED Published: 2022-08-18T19:47:35.000Z Last Updated: 2025-05-05T16:38:00.171Z Vendors: n/a Products: Intel(R) Edge Insights for Industrial software Problem Types: information disclosure Description: Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE ID: CVE-2022-21153 State: PUBLISHED Published: 2022-02-09T22:04:49.000Z Last Updated: 2025-05-05T16:37:50.820Z Vendors: n/a Products: Intel(R) Capital Global Summit Android application Problem Types: information disclosure Description: Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00608.html
CVE ID: CVE-2022-21154 State: PUBLISHED Published: 2022-04-14T19:56:35.551Z Last Updated: 2025-04-15T19:05:56.406Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Leadtools Products: Leadtools Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file can lead to an integer overflow, that in turn causes a buffer overflow. An attacker can provide a malicious BMP file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1464 - https://file
CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1464 - https://files.leadtools.com/index.php/s/joFz7BcCZYMot5Q
CVE ID: CVE-2022-21155 State: PUBLISHED Published: 2022-04-12T16:11:56.000Z Last Updated: 2025-04-16T16:30:39.308Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Fernhill Products: SCADA Server Problem Types: CWE-400 Description: A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to exit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-006-02
CVE ID: CVE-2022-21156 State: PUBLISHED Published: 2022-02-09T22:04:51.000Z Last Updated: 2025-05-05T16:37:41.091Z Vendors: n/a Products: Intel(R) Trace Analyzer and Collector Problem Types: denial of service Description: Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html
CVE ID: CVE-2022-21157 State: PUBLISHED Published: 2022-02-09T22:04:53.000Z Last Updated: 2025-05-05T16:37:28.158Z Vendors: n/a Products: Intel(R) Smart Campus Android application Problem Types: information disclosure Description: Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00607.html
CVE ID: CVE-2022-21158 State: PUBLISHED Published: 2022-03-07T09:00:35 Last Updated: 2024-08-03T02:31:59.012Z Vendors: MarkText Products: MarkText Problem Types: Cross-site scripting Description: A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the document may allow an attacker to execute an arbitrary script on the PC of the user using marktext. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marktext/marktext/releases/tag/v0.17.0 - https://jvn.jp/en/jp/JVN89524240/index.html
CVE ID: CVE-2022-21159 State: PUBLISHED Published: 2022-04-15T16:00:21.545Z Last Updated: 2025-04-15T19:05:23.770Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: MZ Automation GmbH Products: libiec61850 Problem Types: CWE-835 Description: A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnera
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1467 - https://github.com/mz-automation/libiec61850/commit/cfa94cbf10302bedc779703f874ee2e8387a0721 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1467
CVE ID: CVE-2022-21160 State: PUBLISHED Published: 2022-08-18T19:41:51.000Z Last Updated: 2025-05-05T16:37:18.070Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi products Problem Types: denial of service Description: Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2022-21161 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:01.859Z Description: No description available.
CVE ID: CVE-2022-21162 State: PUBLISHED Published: 2023-05-10T13:16:56.843Z Last Updated: 2025-01-27T18:05:51.512Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) HDMI Firmware Update tool for NUC Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00833.html
CVE ID: CVE-2022-21163 State: PUBLISHED Published: 2023-02-16T20:00:23.821Z Last Updated: 2025-01-27T18:14:37.734Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Crypto API Toolkit for Intel(R) SGX Problem Types: escalation of privilege Description: Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html
CVE ID: CVE-2022-21164 State: PUBLISHED Published: 2022-03-16T15:25:13.291556Z Last Updated: 2024-09-16T17:43:47.319Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P) Vendors: n/a Products: node-lmdb Problem Types: Denial of Service (DoS) Description: The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-NODELMDB-2400723 - https://github.com/Venemo/node-lmdb/commit/97760104c0fd311206b88aecd91fa1f59fe2b85a
CVE ID: CVE-2022-21165 State: PUBLISHED Published: 2022-08-29T05:00:17.008154Z Last Updated: 2024-09-17T04:15:11.135Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: font-converter Problem Types: Arbitrary Command Injection Description: All versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_process.exec() function. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-FONTCONVERTER-2976194 - https://github.com/zgec/node-js-font-converter/blob/master/index.js%23L12
CVE ID: CVE-2022-21166 State: PUBLISHED Published: 2022-06-15T20:03:42.000Z Last Updated: 2025-05-05T16:37:08.735Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html - http://www.openwall.com/lists/oss-security/2022/06/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40li
//www.openwall.com/lists/oss-security/2022/06/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ - https://security.netapp.com/advisory/ntap-20220624-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173 - https://www.debian.org/security/2022/dsa-5178 - https://www.debian.org/s
https://www.debian.org/security/2022/dsa-5173 - https://www.debian.org/security/2022/dsa-5178 - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-21167 State: PUBLISHED Published: 2022-05-01T15:30:17.128472Z Last Updated: 2024-09-16T16:38:59.687Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Masuit.Tools.Core Problem Types: Arbitrary Code Execution Description: All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData<T> function in the SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter. Additional Analyst
ent transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-DOTNET-MASUITTOOLSCORE-2316875 - https://github.com/ldqk/Masuit.Tools/blob/327f42b9f20f25bb66188672199c8265fc968d91/Masuit.Tools.Abstractions/Net/SocketClient.cs%23L197
CVE ID: CVE-2022-21168 State: PUBLISHED Published: 2022-04-12T16:11:50.947Z Last Updated: 2025-04-16T16:30:55.958Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Fuji Electric Products: Alpha5 Problem Types: CWE-824 Description: The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE ID: CVE-2022-21169 State: PUBLISHED Published: 2022-09-26T05:05:11.200Z Last Updated: 2025-05-21T20:29:25.084Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: express-xss-sanitizer Problem Types: Prototype Pollution Description: The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-EXPRESSXSSSANITIZER-3027443 - https://github.com/AhmedAdelFahim/express-xss-sanitizer/issues/4 - https://runkit.com/embed/w
RESSXSSSANITIZER-3027443 - https://github.com/AhmedAdelFahim/express-xss-sanitizer/issues/4 - https://runkit.com/embed/w306l6zfm7tu - https://github.com/AhmedAdelFahim/express-xss-sanitizer/commit/3bf8aaaf4dbb1c209dcb8d87a82711a54c1ab39a
CVE ID: CVE-2022-21170 State: PUBLISHED Published: 2022-03-07T09:00:37 Last Updated: 2024-08-03T02:31:59.738Z Vendors: Digital Arts Inc. Products: i-FILTER, i-FILTER Browser & Cloud MultiAgent for Windows, and D-SPA using i-FILTER Problem Types: Improper check for certificate revocation Description: Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud MultiAgent for Windows Ver.4.93R04 and earlier, and D-SPA (Ver.3 / Ver.4) using i-FILTER allows a remote unauthenticated attacker to conduct a man-in-the-middle attack and eavesdrop on an encrypted communication. Additional Analyst Notes: - CVE Program Contain
a man-in-the-middle attack and eavesdrop on an encrypted communication. Additional Analyst Notes: - CVE Program Container: References: - https://download.daj.co.jp/user/ifilter/V10/ - https://download.daj.co.jp/user/ifilter/V9/ - https://download.daj.co.jp/user/ifb/ - https://download.daj.co.jp/user/dspa/V4/ - https://download.daj.co.jp/user/dspa/V3/ - https://jvn.jp/en/jp/JVN33214411/index.html
CVE ID: CVE-2022-21171 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:03.013Z Description: No description available.
CVE ID: CVE-2022-21172 State: PUBLISHED Published: 2022-08-18T19:40:14.000Z Last Updated: 2025-05-05T16:36:57.261Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi products Problem Types: escalation of privilege Description: Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2022-21173 State: PUBLISHED Published: 2022-02-08T10:30:32 Last Updated: 2024-08-03T02:31:58.999Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: Hidden Functionality Description: Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v1.05 and earlier, WRH-300DR3-S firmware v1.05 and earlier, WRH-300LB3-S firmware v1.05 and earlier, WRH-300PN3-S firmware v1.05 and earlier, WRH-300WH3-S firmware v1.05 and earlier, and WRH-300YG3-S firmware v1.05 and earlier) allows an attacker on the adjacent network to execute an arbitrary OS command via unspecified vectors
v1.05 and earlier) allows an attacker on the adjacent network to execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20220208-02/ - https://jvn.jp/en/jp/JVN17482543/index.html
CVE ID: CVE-2022-21174 State: PUBLISHED Published: 2022-02-09T22:04:49.000Z Last Updated: 2025-05-05T16:36:46.850Z Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro Edition Problem Types: escalation of privilege Description: Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE ID: CVE-2022-21175 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:04.174Z Description: No description available.
CVE ID: CVE-2022-21176 State: PUBLISHED Published: 2022-02-18T17:50:20.075Z Last Updated: 2025-04-16T16:45:12.090Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Airspan Networks Products: MMP, PTP C-series, PTMP C-series and A5x Problem Types: CWE-89 Description: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisor
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02
CVE ID: CVE-2022-21177 State: PUBLISHED Published: 2022-03-11T09:10:39 Last Updated: 2024-08-03T02:31:59.257Z Vendors: Yokogawa Electric Corporation Products: CENTUM CS 3000, CENTUM VP, Exaopc Problem Types: CWE-23 Description: There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf
CVE ID: CVE-2022-21178 State: PUBLISHED Published: 2022-08-05T21:11:00.651Z Last Updated: 2025-04-15T18:58:56.206Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-78 Description: An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-20
E Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1457
CVE ID: CVE-2022-21179 State: PUBLISHED Published: 2022-02-24T09:50:27 Last Updated: 2024-08-03T02:31:58.816Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE plugin 'Mail Magazine Management Plugin' Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly. Additional Analyst Notes: - CVE Program Containe
tes and/or transmitted history information may be deleted unintendedly. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20220221/mail_magazine_plugin.php - https://jvn.jp/en/jp/JVN67108459/index.html