Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26369 State: PUBLISHED Published: 2022-11-11T15:48:46.271Z Last Updated: 2025-02-05T20:47:27.877Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) XMM(TM) 7560 Modem software Problem Types: escalation of privilege Description: Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE ID: CVE-2022-26370 State: PUBLISHED Published: 2022-05-05T16:25:45.545832Z Last Updated: 2024-09-16T23:35:57.203Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-908 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS)
ic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K51539421
CVE ID: CVE-2022-26372 State: PUBLISHED Published: 2022-05-05T16:26:37.047278Z Last Updated: 2024-09-16T20:11:25.433Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-400 Description: On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is configured on a virtual server with DNS queueing (default), undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program
e versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K23454411
CVE ID: CVE-2022-26373 State: PUBLISHED Published: 2022-08-18T00:00:00.000Z Last Updated: 2025-05-05T16:22:27.550Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00706.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/10/msg
://lists.debian.org/debian-lts-announce/2022/09/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html - https://security.netapp.com/advisory/ntap-20221007-0005/
CVE ID: CVE-2022-26374 State: PUBLISHED Published: 2022-08-18T19:59:11.000Z Last Updated: 2025-02-25T16:57:49.861Z Vendors: n/a Products: version Problem Types: escalation of privilege Description: Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html
CVE ID: CVE-2022-26375 State: PUBLISHED Published: 2022-10-17T17:03:21.637Z Last Updated: 2025-02-20T19:58:34.488Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Mammothology Products: AB Press Optimizer (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology AB Press Optimizer plugin <= 1.1.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ab-press-optimizer-lite/wordpress-ab-press-optimizer-plugin-1-1-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpr
/wordpress-ab-press-optimizer-plugin-1-1-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/ab-press-optimizer-lite/
CVE ID: CVE-2022-26376 State: PUBLISHED Published: 2022-08-05T21:18:47.095Z Last Updated: 2025-04-15T18:53:55.243Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Asuswrt-Merlin Products: Asuswrt-Merlin New Gen Problem Types: CWE-787 Description: A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulner
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1511
CVE ID: CVE-2022-26377 State: PUBLISHED Published: 2022-06-08T10:00:20 Last Updated: 2024-08-03T05:03:32.881Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-444 Description: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/2 - htt
ttps://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/2 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-26380 State: PUBLISHED Published: 2022-04-12T09:07:57 Last Updated: 2024-08-03T05:03:32.784Z Vendors: Siemens Products: SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coa
SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2 Problem Types: CWE-125 Description: A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALA
24-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device. Additional Analyst Notes: - CVE Program Container: References: - htt
questing specific SNMP information from the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf
CVE ID: CVE-2022-26381 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:27:45.935Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in text reflows Description: An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://www.mozilla.org/security/adviso
sories/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://www.mozilla.org/security/advisories/mfsa2022-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1736243
CVE ID: CVE-2022-26382 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:26:34.122Z Vendors: Mozilla Products: Firefox Problem Types: Autofill Text could be exfiltrated via side-channel attacks Description: While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox < 98. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://bugzilla.mozi
- CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1741888
CVE ID: CVE-2022-26383 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:19:46.176Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Browser window spoof using fullscreen mode Description: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://www.mozilla.org/security/advisories/m
/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://www.mozilla.org/security/advisories/mfsa2022-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1742421
CVE ID: CVE-2022-26384 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:17:48.151Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: iframe allow-scripts sandbox bypass Description: If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advis
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://www.mozilla.org/security/advisories/mfsa2022-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1744352
CVE ID: CVE-2022-26385 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T20:13:10.180Z Vendors: Mozilla Products: Firefox Problem Types: Use-after-free in thread shutdown Description: In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 98. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1747526
CVE ID: CVE-2022-26386 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T20:12:07.225Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Problem Types: Temporary files downloaded to /tmp and accessible by other local users Description: Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to download them to <code>/tmp</code> where they could be affected by other local users. This behavior was reverted to the original, user-specific directory. <br>*This bug only affects Firefox for macOS and Linux. Other operating systems are unaffected.*. This vulnerability affects
This bug only affects Firefox for macOS and Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.7 and Thunderbird < 91.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1752396
CVE ID: CVE-2022-26387 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T20:10:42.269Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Time-of-check time-of-use bug when verifying add-on signatures Description: When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox would not have noticed. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/adviso
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-12/ - https://www.mozilla.org/security/advisories/mfsa2022-10/ - https://www.mozilla.org/security/advisories/mfsa2022-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1752979
CVE ID: CVE-2022-26388 State: PUBLISHED Published: 2025-02-07T17:06:30.134Z Last Updated: 2025-02-07T18:50:58.812Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Welch Allyn Products: ELI 380 Resting Electrocardiograph, ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph, ELI 250c/BUR 250c Resting Electrocardiograph, ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph Problem Types: CWE-259 Description: A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Re
ons 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01 - https://hillrom.com/en/responsible-disclosures/
CVE ID: CVE-2022-26389 State: PUBLISHED Published: 2025-02-07T17:07:27.929Z Last Updated: 2025-02-07T18:49:22.506Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: Baxter/ Hillrom, Welch Allyn Products: ELI 380 Resting Electrocardiograph, ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph, ELI 250c/BUR 250c Resting Electrocardiograph, ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph Problem Types: CWE-284 Description: An improper access control vulnerability may allow privilege escalation.This issue affects: * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; * ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; *
rdiograph: Versions 2.6.0 and prior; * ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; * ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior; * ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01 - https://hillrom.com/en/responsible-disclosures/
CVE ID: CVE-2022-26390 State: PUBLISHED Published: 2022-09-09T14:40:06.351985Z Last Updated: 2024-09-17T04:09:45.443Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Baxter Products: Baxter Spectrum Wireless Battery Module (WBM) Problem Types: CWE-311 Description: The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advi
sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx
CVE ID: CVE-2022-26392 State: PUBLISHED Published: 2022-09-09T14:40:06.166154Z Last Updated: 2024-09-17T02:31:43.990Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Baxter Products: Baxter Spectrum Wireless Battery Module (WBM) Problem Types: CWE-134 Description: The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx
CVE ID: CVE-2022-26393 State: PUBLISHED Published: 2022-09-09T14:40:06.531113Z Last Updated: 2024-09-16T18:34:30.705Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Baxter Products: Baxter Spectrum Wireless Battery Module (WBM) Problem Types: CWE-134 Description: The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service (DoS) on the WBM. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx
CVE ID: CVE-2022-26394 State: PUBLISHED Published: 2022-09-09T14:40:05.978240Z Last Updated: 2024-09-16T19:35:30.066Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Baxter Products: Baxter Spectrum Wireless Battery Module (WBM) Problem Types: CWE-306 Description: The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx
CVE ID: CVE-2022-26413 State: PUBLISHED Published: 2022-04-11T12:00:19 Last Updated: 2024-08-03T05:03:32.814Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: VMG3312-T20A firmware Problem Types: CWE-78 Description: A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml
CVE ID: CVE-2022-26414 State: PUBLISHED Published: 2022-04-11T12:05:11 Last Updated: 2024-08-03T05:03:32.637Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Zyxel Products: VMG3312-T20A firmware Problem Types: CWE-120 Description: A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml
CVE ID: CVE-2022-26415 State: PUBLISHED Published: 2022-05-05T16:27:28.530203Z Last Updated: 2024-09-17T03:53:56.343Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-77 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. Note: Software versions which have reached End of Technical Support (EoTS) are not
n undisclosed iControl REST endpoint. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K81952114
CVE ID: CVE-2022-26416 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:47:36.938Z Description: No description available.
CVE ID: CVE-2022-26417 State: PUBLISHED Published: 2022-04-01T22:17:53.991Z Last Updated: 2025-04-16T17:57:32.232Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Omron Products: CX-Position Problem Types: CWE-416 Description: Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-02 - https://www.zerodayinitiative.com/advisories/ZDI-22-578/
CVE ID: CVE-2022-26418 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:47:50.804Z Description: No description available.