Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-21180 State: PUBLISHED Published: 2022-06-15T20:04:21.000Z Last Updated: 2025-05-05T16:36:36.678Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00645.html - http://www.openwall.com/lists/oss-security/2022/06/16/1 - https://security.netapp.com/advisory/ntap-20220624-0006/
CVE ID: CVE-2022-21181 State: PUBLISHED Published: 2022-08-18T00:00:00.000Z Last Updated: 2025-05-05T16:36:25.897Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products Problem Types: escalation of privilege Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE ID: CVE-2022-21182 State: PUBLISHED Published: 2022-05-12T17:01:28.102Z Last Updated: 2025-04-15T19:03:52.813Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-284 Description: A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1472 - http
ainer: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1472 - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf
CVE ID: CVE-2022-21183 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:05.318Z Description: No description available.
CVE ID: CVE-2022-21184 State: PUBLISHED Published: 2022-06-17T17:40:12.075Z Last Updated: 2025-04-15T19:00:38.753Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Bachmann Visutec GmbH Products: Atvise Problem Types: CWE-319 Description: An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1461
CVE ID: CVE-2022-21185 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:06.480Z Description: No description available.
CVE ID: CVE-2022-21186 State: PUBLISHED Published: 2022-08-05T05:00:18.167363Z Last Updated: 2024-09-16T22:41:10.564Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: @acrontum/filesystem-template Problem Types: Arbitrary Command Injection Description: The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-ACRONTUMFILESYSTEMTEMPLATE-2419071 - https://github.com/acrontum/filesystem-template/pull/14/commits/baeb72
vuln/SNYK-JS-ACRONTUMFILESYSTEMTEMPLATE-2419071 - https://github.com/acrontum/filesystem-template/pull/14/commits/baeb727b60991ad82d9e63ac660883793abc0acc
CVE ID: CVE-2022-21187 State: PUBLISHED Published: 2022-03-14T17:15:17.020985Z Last Updated: 2024-09-16T18:13:45.548Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: libvcs Problem Types: Command Injection Description: The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-LIBVCS-2421204 - https://github.com/vcs-python/libvcs/b
rogram Container: References: - https://snyk.io/vuln/SNYK-PYTHON-LIBVCS-2421204 - https://github.com/vcs-python/libvcs/blob/v0.11.1/CHANGES%23libvcs-0111-2022-03-12 - https://github.com/vcs-python/libvcs/pull/306
CVE ID: CVE-2022-21188 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:07.627Z Description: No description available.
CVE ID: CVE-2022-21189 State: PUBLISHED Published: 2022-05-01T15:25:21.478902Z Last Updated: 2024-09-16T20:07:35.060Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: dexie Problem Types: Prototype Pollution Description: The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPath(obj, keyPath, value) function which does not properly check the keys being set (like __proto__ or constructor). This can allow an attacker to add/modify properties of the Object.prototype leading to prototype pollution vulnerability. **Note:** This vulnerability can occur in multiple ways,
Object.prototype leading to prototype pollution vulnerability. **Note:** This vulnerability can occur in multiple ways, for example when modifying a collection with untrusted user input. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-DEXIE-2607042 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805308 - https://github.com/dexie/Dexie.js/blob/fe682ef24568278c3b31d9d6c93de095d4b77ae8/src/functions/utils.ts%23L134-L164 - https://github.com/dexie/Dexie.js/commit/1d655a69b9f28c3af6fae10cf5c61df387dc689b
CVE ID: CVE-2022-21190 State: PUBLISHED Published: 2022-05-13T20:00:38.749156Z Last Updated: 2024-09-17T03:32:50.471Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: convict Problem Types: Prototype Pollution Description: This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). The [fix](https://github.com/mozilla/node-convict/commit/3b86be087d8f14681a9c889d45da7fe3ad9cd880) introduced, relies on the startsWith method and does not prevent the vulnerability: before splitting the path, it checks if it starts with __proto__ or this.constructor.prototype. To bypass thi
erability: before splitting the path, it checks if it starts with __proto__ or this.constructor.prototype. To bypass this check it's possible to prepend the dangerous paths with any string value followed by a dot, like for example foo.__proto__ or foo.this.constructor.prototype. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-CONVICT-2774757 - https://github.com/mozilla/node-convict/blob/3b86be087d8f14681a9c889d45da7fe3ad9cd880/packages/convict/src/main.js%23L571 - https://gist.github.com/dellalibera/cebce20e51410acebff1f46afdc89808 - https://github.com/mozilla/node-convict/blob/master/CHANGELOG.md%23623---2022-05-07 - https://github.com/mozilla/
9808 - https://github.com/mozilla/node-convict/blob/master/CHANGELOG.md%23623---2022-05-07 - https://github.com/mozilla/node-convict/commit/1ea0ab19c5208f66509e1c43b0d0f21c1fd29b75
CVE ID: CVE-2022-21191 State: PUBLISHED Published: 2023-01-13T05:00:01.119Z Last Updated: 2025-04-04T14:55:31.631Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: global-modules-path Problem Types: CWE-78 Description: Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the getPath function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-GLOBALMODULESPATH-3167973 - https://github.com/lorenzomigliorero/npm-node-utils/blob/b55dd81c597db657c97513
vuln/SNYK-JS-GLOBALMODULESPATH-3167973 - https://github.com/lorenzomigliorero/npm-node-utils/blob/b55dd81c597db657c9751332bb2242403fd3e26b/index.js%23L186 - https://github.com/rosen-vladimirov/global-modules-path/releases/tag/v3.0.0 - https://github.com/rosen-vladimirov/global-modules-path/commit/edbdaff077ea0cf295b1469923c06bbccad3c180
CVE ID: CVE-2022-21192 State: PUBLISHED Published: 2023-01-25T05:00:02.240Z Last Updated: 2025-04-01T14:54:41.432Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: serve-lite Problem Types: CWE-22 Description: All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-SERVELITE-3149916 - https://gist.github.com/lirantal/9ccdfda0edcb95e36d07a04b0b6c2db0
CVE ID: CVE-2022-21193 State: PUBLISHED Published: 2022-02-08T10:30:34 Last Updated: 2024-08-03T02:31:59.137Z Vendors: TAGAWA Takao Products: TransmitMail Problem Types: Directory traversal Description: Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/ - https://jvn.jp/en/jp/JVN70100915/index.html
CVE ID: CVE-2022-21194 State: PUBLISHED Published: 2022-03-11T09:10:41 Last Updated: 2024-08-03T02:31:59.724Z Vendors: Yokogawa Electric Corporation Products: CENTUM VP, Exaopc Problem Types: CWE-798 Description: The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Exaopc versions from R3.72.00 to R3.79.00. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf
CVE ID: CVE-2022-21195 State: PUBLISHED Published: 2022-05-20T20:00:14.033827Z Last Updated: 2024-09-16T20:47:32.328Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: url-regex Problem Types: Regular Expression Denial of Service (ReDoS) Description: All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-URLREGEX-2347643 - https://github.com/AlexFlipnote/url_regex/blob/master/url_regex/url_regex.py
CVE ID: CVE-2022-21196 State: PUBLISHED Published: 2022-02-18T17:50:16.878Z Last Updated: 2025-04-16T16:45:52.748Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Airspan Networks Products: MMP, PTP C-series, PTMP C-series and A5x Problem Types: CWE-285 Description: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information. Additional
es and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02
CVE ID: CVE-2022-21197 State: PUBLISHED Published: 2022-08-18T19:41:25.000Z Last Updated: 2025-05-05T16:36:16.927Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi products Problem Types: denial of service Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2022-21198 State: PUBLISHED Published: 2022-11-11T15:49:10.831Z Last Updated: 2025-02-04T17:58:34.848Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html
CVE ID: CVE-2022-21199 State: PUBLISHED Published: 2022-01-28T19:10:05.000Z Last Updated: 2025-04-15T19:21:48.168Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: CWE-321 Description: An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-144
ram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1448
CVE ID: CVE-2022-21200 State: REJECTED Published: N/A Last Updated: 2025-05-27T23:04:33.449Z Description: No description available.
CVE ID: CVE-2022-21201 State: PUBLISHED Published: 2022-08-05T21:11:15.427Z Last Updated: 2025-04-15T18:58:48.601Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALO
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1456
CVE ID: CVE-2022-21202 State: PUBLISHED Published: 2022-04-12T16:11:54.258Z Last Updated: 2025-04-16T16:30:47.541Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Fuji Electric Products: Alpha5 Problem Types: CWE-125 Description: The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE ID: CVE-2022-21203 State: PUBLISHED Published: 2022-02-09T22:04:53.000Z Last Updated: 2025-05-05T16:36:07.785Z Vendors: n/a Products: Intel(R) Quartus(R) Prime Standard Edition Problem Types: escalation of privilege Description: Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE ID: CVE-2022-21204 State: PUBLISHED Published: 2022-02-09T22:04:52.000Z Last Updated: 2025-05-05T16:35:56.221Z Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro Edition Problem Types: escalation of privilege Description: Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE ID: CVE-2022-21205 State: PUBLISHED Published: 2022-02-09T22:04:55.000Z Last Updated: 2025-05-05T16:35:47.052Z Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro Edition Problem Types: information disclosure Description: Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE ID: CVE-2022-21206 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:08.769Z Description: No description available.
CVE ID: CVE-2022-21207 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:09.921Z Description: No description available.
CVE ID: CVE-2022-21208 State: PUBLISHED Published: 2022-08-23T05:06:18.829009Z Last Updated: 2024-09-16T23:05:25.933Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: node-opcua Problem Types: Denial of Service (DoS) Description: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk. Additional Analyst Notes: - CVE Program Container: References: - https://
each) without sending the Final closing chunk. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988723 - https://github.com/node-opcua/node-opcua/commit/33ca3bab4ab781392a2f8d8f5a14de9a0aa0e410 - https://github.com/node-opcua/node-opcua/commit/dbcb5d5191118c22ee9c89332a94b94e6553d76b - https://github.com/node-opcua/node-opcua/pull/1149
CVE ID: CVE-2022-21209 State: PUBLISHED Published: 2022-02-25T18:10:54.357Z Last Updated: 2025-04-16T18:00:56.185Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FATEK Automation Products: FvDesigner Problem Types: CWE-125 Description: The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-01 - https://www.zerodayinitiative.com/advisories/ZDI-22-439/ - https://www.zerodayinitiative.com/advi
ories/icsa-22-055-01 - https://www.zerodayinitiative.com/advisories/ZDI-22-439/ - https://www.zerodayinitiative.com/advisories/ZDI-22-436/ - https://www.zerodayinitiative.com/advisories/ZDI-22-435/
CVE ID: CVE-2022-21210 State: PUBLISHED Published: 2022-04-14T19:56:37.148Z Last Updated: 2025-04-15T19:05:50.193Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Lansweeper Products: lansweeper Problem Types: CWE-89 Description: An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.lansweeper.com/changelog/ - https://talosintelligence.com/vulnerability_reports/TA
lnrichment: References: - https://www.lansweeper.com/changelog/ - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1444
CVE ID: CVE-2022-21211 State: PUBLISHED Published: 2022-06-10T20:05:45.881370Z Last Updated: 2024-09-17T03:58:45.295Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: posix Problem Types: Denial of Service (DoS) Description: This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-POSIX-2400719
CVE ID: CVE-2022-21212 State: PUBLISHED Published: 2022-08-18T19:43:28.000Z Last Updated: 2025-05-05T16:35:37.813Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi products Problem Types: denial of service Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2022-21213 State: PUBLISHED Published: 2022-06-17T20:05:12.401688Z Last Updated: 2024-09-16T19:26:02.243Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: mout Problem Types: Prototype Pollution Description: This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-77
d, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mout/mout/blob/master/src/object/deepFillIn.js - https://github.com/mout/mout/blob/master/src/object/deepMixIn.js - https://snyk.io/vuln/SNYK-JS-MOUT-2342654 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2870622 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2870623
CVE ID: CVE-2022-21214 State: PUBLISHED Published: 2022-04-12T16:11:51.679Z Last Updated: 2025-04-16T17:56:06.297Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Fuji Electric Products: Alpha5 Problem Types: CWE-122 Description: The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03