Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33167 State: PUBLISHED Published: 2024-07-30T17:05:35.007Z Last Updated: 2024-08-03T08:01:20.017Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Directory Integrator, Security Verify Directory Integrator Problem Types: CWE-1004 Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 228587. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
sitive information from the cookie. IBM X-Force ID: 228587. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7161469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228587
CVE ID: CVE-2022-33168 State: PUBLISHED Published: 2023-06-15T01:19:01.037Z Last Updated: 2024-12-12T21:32:00.417Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Security Directory Suite VA Problem Types: CWE-400 Description: IBM Security Directory Suite VA 8.0.1 could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 228588. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228588
CVE ID: CVE-2022-33169 State: PUBLISHED Published: 2022-07-31T17:30:58.506107Z Last Updated: 2024-09-16T19:56:35.782Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/A:N/C:N/I:H/AC:H/UI:N/AV:N/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation Problem Types: Bypass Security Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228888
CVE ID: CVE-2022-33171 State: PUBLISHED Published: 2022-07-04T15:51:49 Last Updated: 2024-08-03T08:01:20.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection. NOTE: the vendor's position is that the user's application is responsible for input validation Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/typeorm/typeorm/compare/0.2.45...0.3.0 - https://seclists.org/full
E Program Container: References: - https://github.com/typeorm/typeorm/compare/0.2.45...0.3.0 - https://seclists.org/fulldisclosure/2022/Jun/51 - http://seclists.org/fulldisclosure/2022/Aug/7 - http://packetstormsecurity.com/files/168096/TypeORM-0.3.7-Information-Disclosure.html
CVE ID: CVE-2022-33172 State: PUBLISHED Published: 2022-08-24T11:34:24 Last Updated: 2024-08-03T08:01:20.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BSI-Bund/de.fac2 - https://github.com/BSI-Bund/de.fac2/commit/d3c93c620850183d83ba9a0f5944d44a2ee30250
CVE ID: CVE-2022-33173 State: PUBLISHED Published: 2022-07-11T12:20:42 Last Updated: 2024-08-03T08:01:20.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-33174 State: PUBLISHED Published: 2022-06-13T17:04:08 Last Updated: 2024-08-03T08:01:20.163Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd
This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://gynvael.coldwind.pl/?lang=en&id=748
CVE ID: CVE-2022-33175 State: PUBLISHED Published: 2022-06-13T17:03:47 Last Updated: 2024-08-03T08:01:20.393Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is accessible to everyone through the /cgi/get_param.cgi HTTP API. This leads to disclosing active session ids of currently logged-in administrators. The session id can then be reused to act as the administrator, allowing reading of the cleartext password, or reconfiguring the device. Additional Analys
to act as the administrator, allowing reading of the cleartext password, or reconfiguring the device. Additional Analyst Notes: - CVE Program Container: References: - https://gynvael.coldwind.pl/?lang=en&id=748
CVE ID: CVE-2022-33176 State: PUBLISHED Published: 2022-11-11T15:48:49.818Z Last Updated: 2025-02-05T20:26:09.926Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs Problem Types: escalation of privilege Description: Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/conten
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2022-33177 State: PUBLISHED Published: 2022-09-06T17:18:54.357Z Last Updated: 2025-02-20T20:09:21.580Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPdevelop/Oplugins Products: Booking Calendar (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/booking/wordpress-booking-calendar-plugin-9-2-1-cross-site-request-forgery-csrf-leading-to-translations-update/_s_id=c
y/booking/wordpress-booking-calendar-plugin-9-2-1-cross-site-request-forgery-csrf-leading-to-translations-update/_s_id=cve - https://wordpress.org/plugins/booking/#developers
CVE ID: CVE-2022-33178 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:40:36.059Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Improper input validation Description: A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2077 - https://security.netapp.com/advisory/ntap-20230127-0003/
CVE ID: CVE-2022-33179 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T17:12:03.847Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with “set context” and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2079 - https://security.netapp.com/advis
ort/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2079 - https://security.netapp.com/advisory/ntap-20230127-0004/
CVE ID: CVE-2022-33180 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T18:03:05.124Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Improper Authorization Description: A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local authenticated attacker to export out sensitive files with “seccryptocfg”, “configupload”. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2079 - https://security.netapp.com/advisory/ntap-20230127-0005/
CVE ID: CVE-2022-33181 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T14:04:38.515Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Information disclosure vulnerability Description: An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to read sensitive files using switch commands “configshow” and “supportlink”. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2083 - https://security.ne
adcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2083 - https://security.netapp.com/advisory/ntap-20230127-0006/
CVE ID: CVE-2022-33182 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T14:01:11.437Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Privilege escalation Description: A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “supportlink”, “firmwaredownload”, “portcfgupload, license, and “fosexec”. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2084
ces: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2084 - https://security.netapp.com/advisory/ntap-20230127-0007/
CVE ID: CVE-2022-33183 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T13:59:49.447Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Stack Buffer Overflow Description: A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2085 - https://security.netapp.com/advisory/ntap-2023012
l-networking/security-advisories/brocade-security-advisory-2022-2085 - https://security.netapp.com/advisory/ntap-20230127-0008/
CVE ID: CVE-2022-33184 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T13:58:39.727Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Stack Buffer Overflow and Code Execution Description: A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated attackers to exploit stack-based buffer overflows and execute arbitrary code as the root user account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-
: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2080 - https://security.netapp.com/advisory/ntap-20230127-0009/
CVE ID: CVE-2022-33185 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T18:17:07.470Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Stack Buffer Overflow Description: Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-
: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078 - https://security.netapp.com/advisory/ntap-20230127-0010/
CVE ID: CVE-2022-33186 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T16:02:10.753Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Privilege escalation Description: A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisor
nt: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2121
CVE ID: CVE-2022-33187 State: PUBLISHED Published: 2022-12-09T01:48:24.949Z Last Updated: 2025-04-22T20:26:49.948Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-532 Description: Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2122
CVE ID: CVE-2022-33188 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:45.498Z Description: No description available.
CVE ID: CVE-2022-33189 State: PUBLISHED Published: 2022-10-25T16:33:48.021Z Last Updated: 2025-04-15T18:46:47.862Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerab
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1558
CVE ID: CVE-2022-33190 State: PUBLISHED Published: 2023-02-16T20:00:11.419Z Last Updated: 2025-01-27T18:18:29.497Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) SUR software Problem Types: escalation of privilege Description: Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html
CVE ID: CVE-2022-33191 State: PUBLISHED Published: 2022-07-22T16:46:52.229Z Last Updated: 2025-02-20T20:15:57.739Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Chinmoy Paul (chinmoy29) Products: Testimonials (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Chinmoy Paul's Testimonials plugin <= 3.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/testimonials/#description - https://patchstack.com/database/vulnerability/testimonials/wordpress-testimonials-plugin-3-0-1-a
imonials/#description - https://patchstack.com/database/vulnerability/testimonials/wordpress-testimonials-plugin-3-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-33192 State: PUBLISHED Published: 2022-10-25T16:33:49.061Z Last Updated: 2025-04-15T18:46:39.677Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the `WL_SSID` and `WL_SSID_HEX` configuration values in the
his vulnerability specifically focuses on the unsafe use of the `WL_SSID` and `WL_SSID_HEX` configuration values in the function at offset `0x1c7d28` of firmware 6.9Z. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE ID: CVE-2022-33193 State: PUBLISHED Published: 2022-10-25T16:33:50.086Z Last Updated: 2025-04-15T18:46:32.799Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the `WL_WPAPSK` configuration value in the function located
his vulnerability specifically focuses on the unsafe use of the `WL_WPAPSK` configuration value in the function located at offset `0x1c7d28` of firmware 6.9Z. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE ID: CVE-2022-33194 State: PUBLISHED Published: 2022-10-25T16:33:51.055Z Last Updated: 2025-04-15T18:46:25.186Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `WL_Key` and `WL_DefaultKeyID` configuration values in the function l
his vulnerability focuses on the unsafe use of the `WL_Key` and `WL_DefaultKeyID` configuration values in the function located at offset `0x1c7d28` of firmware 6.9Z , and even more specifically on the command execution occuring at offset `0x1c7f6c`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE ID: CVE-2022-33195 State: PUBLISHED Published: 2022-10-25T16:33:52.055Z Last Updated: 2025-04-15T18:46:16.443Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `WL_DefaultKeyID` in the function located at offset `0x1c7d28` of fir
his vulnerability focuses on the unsafe use of the `WL_DefaultKeyID` in the function located at offset `0x1c7d28` of firmware 6.9Z, and even more specifically on the command execution occuring at offset `0x1c7fac`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE ID: CVE-2022-33196 State: PUBLISHED Published: 2023-02-16T20:00:22.704Z Last Updated: 2025-01-27T18:14:48.745Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) Processors with IntelÂ® Software Guard Extensions (SGX) Problem Types: escalation of privilege Description: Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/con
cess. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html
CVE ID: CVE-2022-33197 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:46.732Z Description: No description available.
CVE ID: CVE-2022-33198 State: PUBLISHED Published: 2022-07-21T17:26:30.629Z Last Updated: 2025-02-20T20:16:43.161Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Biplob Adhikari Products: Accordions (WordPress plugin) Problem Types: CWE-264 Description: Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/accordions-or-faqs/#developers - https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-2-unauthenticated-wordpress-options-change