Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
om/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2022-26309 State: PUBLISHED Published: 2022-08-01T12:44:32.077651Z Last Updated: 2024-09-16T17:38:24.600Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-352 Description: Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of privilege to Administrator group. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2022-26310 State: PUBLISHED Published: 2022-08-01T12:45:01.167736Z Last Updated: 2024-09-16T16:39:05.916Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-285 Description: Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the privileges of a higher-level user or typically an admin user. Additional Analyst Notes: - CVE Program Container: References: - https://pan
gher-level user or typically an admin user. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2022-26311 State: PUBLISHED Published: 2022-03-07T20:44:59 Last Updated: 2024-08-03T05:03:31.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments. Additional Analyst Notes: - CVE Program Container: References: - https://www.couchbase.com/alerts - https://docs.couchbase.com/operator/current/overview.html
CVE ID: CVE-2022-26313 State: PUBLISHED Published: 2022-03-08T11:31:34 Last Updated: 2024-08-03T05:03:31.844Z Vendors: Siemens Products: Mendix Forgot Password Appstore module Problem Types: CWE-284 Description: A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-134279.pdf
CVE ID: CVE-2022-26314 State: PUBLISHED Published: 2022-03-08T11:31:36 Last Updated: 2024-08-03T05:03:32.350Z Vendors: Siemens Products: Mendix Forgot Password Appstore module, Mendix Forgot Password Appstore module (Mendix 7 compatible) Problem Types: CWE-307 Description: A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2). Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to efficiently brute force passwords in specific situations. Additional Analyst Notes: - CVE Program Container: Referenc
to efficiently brute force passwords in specific situations. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-134279.pdf
CVE ID: CVE-2022-26315 State: PUBLISHED Published: 2022-02-28T18:03:03 Last Updated: 2024-08-03T05:03:32.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified by the uploader. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/claudiodangelis/qrcp/issues/223
CVE ID: CVE-2022-26317 State: PUBLISHED Published: 2022-03-08T11:31:37 Last Updated: 2024-08-03T05:03:32.443Z Vendors: Siemens Products: Mendix Applications using Mendix 7 Problem Types: CWE-284 Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the result of a completed Microflow execution call the affected framework does not correctly verify, if the request was initially made by the user requesting the result. Together with predictable identifiers for Microflow execution calls, this could allow a malicious attacker to retrieve information about arbitrary Microflow execution calls made by users within the affected
a malicious attacker to retrieve information about arbitrary Microflow execution calls made by users within the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-415938.pdf
CVE ID: CVE-2022-26318 State: PUBLISHED Published: 2022-03-04T17:36:37.000Z Last Updated: 2025-10-21T23:15:44.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html
CVE ID: CVE-2022-26319 State: PUBLISHED Published: 2022-03-08T21:55:12 Last Updated: 2024-08-03T05:03:32.227Z Vendors: Trend Micro Products: Trend Micro Portable Security Problem Types: Uncontrolled Search Patch Element LPE Description: An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmic
to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290531
CVE ID: CVE-2022-26320 State: PUBLISHED Published: 2022-03-14T17:28:04 Last Updated: 2024-10-07T16:04:03.893262 Vendors: n/a Products: n/a Problem Types: n/a Description: The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate. Additional Analyst Notes: - CVE Program Container: References: - https://global.canon/en/support/security/index.html - https://f
al Analyst Notes: - CVE Program Container: References: - https://global.canon/en/support/security/index.html - https://fermatattack.secvuln.info - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html - https://www.rambus.com/security/response-center/advisories/rmbs-2021-01/ - https://web.archive.org/web/20220922042721/https://safezoneswupdate.com/
CVE ID: CVE-2022-26322 State: PUBLISHED Published: 2024-09-12T12:40:22.648Z Last Updated: 2024-09-12T12:58:37.530Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenText Products: Identity Manager REST Driver 1.1.2.0200 Problem Types: CWE-532 Description: Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. This impact version before 1.1.2.0200. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/identity-manager-48-drivers/RESTDriver1.1.2.0300_readme/data/RESTDriver1.1.2.0300_readme.html
CVE ID: CVE-2022-26323 State: PUBLISHED Published: 2025-04-17T14:29:44.857Z Last Updated: 2025-04-17T19:12:00.464Z Vendors: OpenText™ Products: Operations Bridge Manager, Operations Bridge Suite (Containerized), UCMDB ( Classic and Containerized) Problem Types: CWE-648 Description: Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation. The vulnerability could allow authenticated attackers to elevate user privileges. This issue affects Operations Bridge Manager: through 2021.05; Operations Bridge Suite (Containerized): through 2021.05; UC
s issue affects Operations Bridge Manager: through 2021.05; Operations Bridge Suite (Containerized): through 2021.05; UCMDB ( Classic and Containerized): through 2021.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000039040?language=en_US - https://portal.microfocus.com/s/article/KM000039044?language=en_US
CVE ID: CVE-2022-26324 State: PUBLISHED Published: 2024-11-22T15:34:33.159Z Last Updated: 2024-11-26T14:20:05.412Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: OpenText Products: iManager Problem Types: CWE-79 Description: Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch1_releasenotes/imanager326_patch1_releasenotes.pdf
CVE ID: CVE-2022-26325 State: PUBLISHED Published: 2022-05-02T18:41:42 Last Updated: 2024-08-03T05:03:32.196Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L) Vendors: Micro Focus Products: NetIQ Access Manager Problem Types: CWE-79 Description: Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2 Additional Analyst Notes: - CVE Program Container: References: - https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html#t4f2msu33v8h
CVE ID: CVE-2022-26326 State: PUBLISHED Published: 2022-05-02T18:43:42 Last Updated: 2024-08-03T05:03:32.393Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: NetIQ Access Manager Problem Types: CWE-601 Description: Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2 Additional Analyst Notes: - CVE Program Container: References: - https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html#t4f2msu33v8h
CVE ID: CVE-2022-26327 State: PUBLISHED Published: 2024-08-21T15:25:48.033Z Last Updated: 2024-08-21T15:54:45.246Z Vendors: OpenText Products: Performance Center Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000006815?language=en_US
CVE ID: CVE-2022-26328 State: PUBLISHED Published: 2024-08-21T15:25:44.789Z Last Updated: 2024-08-21T16:49:52.366Z Vendors: OpenText Products: Performance Center Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on Windows allows Cross-Site Scripting (XSS).This issue affects Performance Center: 12.63. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000032041?language=en_US
CVE ID: CVE-2022-26329 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-01T17:56:30.791Z Severity: LOW (CVSS 1.8 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: Micro Focus Products: NetIQ Identity Manager Problem Types: CWE-538 Description: File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/identity-manager-48/rel
VE Program Container: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/identity-manager-48/releasenotes_idm485/data/software-fixes.html
CVE ID: CVE-2022-26330 State: PUBLISHED Published: 2022-08-31T15:52:15 Last Updated: 2024-08-03T05:03:31.777Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: Micro Focus ArcSight Logger Problem Types: Information Disclosure Description: Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.microfocus.com/support/downlo
ior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.microfocus.com/support/downloads/ - https://portal.microfocus.com/s/article/KM000010167?language=en_US
CVE ID: CVE-2022-26331 State: PUBLISHED Published: 2022-08-31T15:52:37 Last Updated: 2024-08-03T05:03:32.278Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Micro Focus Products: Micro Focus ArcSight Logger Problem Types: Self Cross-Site Scripting Description: Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.microfocus.com/support/dow
prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.microfocus.com/support/downloads/ - https://portal.microfocus.com/s/article/KM000010167?language=en_US
CVE ID: CVE-2022-26332 State: PUBLISHED Published: 2022-03-01T00:46:49 Last Updated: 2024-08-03T05:03:32.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50788 - https://github.com/andreapollastri/cipi/releases
CVE ID: CVE-2022-26333 State: REJECTED Published: 2022-03-08T15:29:24 Last Updated: 2022-03-08T15:29:24 Description: No description available.
CVE ID: CVE-2022-26334 State: PUBLISHED Published: 2022-04-12T09:07:54 Last Updated: 2024-08-03T05:03:32.480Z Vendors: Siemens Products: SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coa
SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2 Problem Types: CWE-120 Description: A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALA
24-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com
crash affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf
CVE ID: CVE-2022-26335 State: PUBLISHED Published: 2022-04-12T09:07:55 Last Updated: 2024-08-03T05:03:31.738Z Vendors: Siemens Products: SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coa
24-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productce
cted devices. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf
CVE ID: CVE-2022-26336 State: PUBLISHED Published: 2022-03-04T00:00:00 Last Updated: 2024-08-03T05:03:32.643Z Vendors: Apache Software Foundation Products: poi-scratchpad Problem Types: CWE-770, CWE-20 Description: A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNEF files and the application allows untrusted users to supply them, then a carefully crafted file can cause an Out of Memory exception. This issue affects poi-scratchpad version 5.2.0 and prior versions. Users are recommende
use an Out of Memory exception. This issue affects poi-scratchpad version 5.2.0 and prior versions. Users are recommended to upgrade to poi-scratchpad 5.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/sprg0kq986pc2271dc3v2oxb1f9qx09j - https://security.netapp.com/advisory/ntap-20221028-0006/
CVE ID: CVE-2022-26337 State: PUBLISHED Published: 2022-03-08T21:55:14 Last Updated: 2024-08-03T05:03:32.878Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: Uncontrolled Search Patch Element LPE Description: Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-10954
CVE ID: CVE-2022-26338 State: PUBLISHED Published: 2022-03-29T16:37:12.974Z Last Updated: 2025-04-16T16:35:25.209Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26339 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:26:26.182Z Description: No description available.
CVE ID: CVE-2022-26340 State: PUBLISHED Published: 2022-05-05T16:24:57.907165Z Last Updated: 2024-09-17T00:46:37.820Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: BIG-IP, BIG-IQ Centralized Management Problem Types: CWE-732 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privileged attacker with no bash access may be able to access Certificate and Key files using Secure Copy (SCP) protocol from a remote
acker with no bash access may be able to access Certificate and Key files using Secure Copy (SCP) protocol from a remote system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K38271531
CVE ID: CVE-2022-26341 State: PUBLISHED Published: 2022-11-11T15:47:12.330Z Last Updated: 2025-02-05T20:54:43.309Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC Problem Types: escalation of privilege Description: Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html
CVE ID: CVE-2022-26342 State: PUBLISHED Published: 2022-08-05T21:18:19.939Z Last Updated: 2025-04-15T18:54:08.681Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1484