Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
LPS06493842; Issue ID: ALPS06493842. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21773 State: PUBLISHED Published: 2022-07-06T13:07:07 Last Updated: 2024-08-03T02:53:35.620Z Vendors: MediaTek, Inc. Products: MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6755S, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893 Problem Types: Elevation of Privilege Description: In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06
of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641388; Issue ID: ALPS06641388. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21774 State: PUBLISHED Published: 2022-07-06T13:07:13 Last Updated: 2024-08-03T02:53:36.172Z Vendors: MediaTek, Inc. Products: MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6875, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983 Problem Types: Elevation of Privilege Description: In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641447; Issue ID: ALPS06641447. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulleti
447. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21775 State: PUBLISHED Published: 2022-07-06T13:07:19 Last Updated: 2024-08-03T02:53:35.958Z Vendors: MediaTek, Inc. Products: MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8167, MT8167S, MT8168, MT8173, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution pri
sible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479032; Issue ID: ALPS06479032. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21776 State: PUBLISHED Published: 2022-07-06T13:07:25 Last Updated: 2024-08-03T02:53:36.281Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. Us
ee due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21777 State: PUBLISHED Published: 2022-07-06T13:07:31 Last Updated: 2024-08-03T02:53:36.239Z Vendors: MediaTek, Inc. Products: MT6580, MT6735, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6879, MT6885, MT6891, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges n
o a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06713894; Issue ID: ALPS06713894. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21778 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T19:19:08.836Z Vendors: MediaTek, Inc. Products: MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788 Problem Types: Elevation of Privilege Description: In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://co
e ID: ALPS06382421. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2022
CVE ID: CVE-2022-21779 State: PUBLISHED Published: 2022-07-06T13:07:37 Last Updated: 2024-08-03T02:53:36.242Z Vendors: MediaTek, Inc. Products: MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526
ivilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704393. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21780 State: PUBLISHED Published: 2022-07-06T13:07:43 Last Updated: 2024-08-03T02:53:36.232Z Vendors: MediaTek, Inc. Products: MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526
ivilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704526. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21781 State: PUBLISHED Published: 2022-07-06T13:08:02 Last Updated: 2024-08-03T02:53:36.223Z Vendors: MediaTek, Inc. Products: MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526
ivilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704433. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21782 State: PUBLISHED Published: 2022-07-06T13:08:08 Last Updated: 2024-08-03T02:53:36.181Z Vendors: MediaTek, Inc. Products: MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526
ivilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704508. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21783 State: PUBLISHED Published: 2022-07-06T13:08:14 Last Updated: 2024-08-03T02:53:35.684Z Vendors: MediaTek, Inc. Products: MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526
ivilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704482. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21784 State: PUBLISHED Published: 2022-07-06T13:08:20 Last Updated: 2024-08-03T02:53:36.281Z Vendors: MediaTek, Inc. Products: MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526
ivilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704462. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21785 State: PUBLISHED Published: 2022-07-06T13:08:27 Last Updated: 2024-08-03T02:53:36.260Z Vendors: MediaTek, Inc. Products: MT6877, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06807363; Issue ID: ALPS06807363. Additional Analyst Notes: - CVE Program Container: References:
oitation. Patch ID: ALPS06807363; Issue ID: ALPS06807363. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21786 State: PUBLISHED Published: 2022-07-06T13:08:34 Last Updated: 2024-08-03T02:53:36.217Z Vendors: MediaTek, Inc. Products: MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21787 State: PUBLISHED Published: 2022-07-06T13:08:50 Last Updated: 2024-08-03T02:53:36.253Z Vendors: MediaTek, Inc. Products: MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558844; Issue ID: ALPS06558844. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/July-2022
CVE ID: CVE-2022-21788 State: PUBLISHED Published: 2022-08-01T13:57:16 Last Updated: 2024-08-03T02:53:36.268Z Vendors: MediaTek, Inc. Products: MT6879, MT6895, MT6983 Problem Types: Elevation of Privilege Description: In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06988728; Issue ID: ALPS06988728. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2022
CVE ID: CVE-2022-21789 State: PUBLISHED Published: 2022-08-01T13:55:38 Last Updated: 2024-08-03T02:53:36.155Z Vendors: MediaTek, Inc. Products: MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8791, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478101; Issue ID: ALPS06478101. Additional Analyst Notes: - CVE Program Container: References: - https://corp.med
ALPS06478101; Issue ID: ALPS06478101. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2022
CVE ID: CVE-2022-21790 State: PUBLISHED Published: 2022-08-01T13:55:51 Last Updated: 2024-08-03T02:53:36.281Z Vendors: MediaTek, Inc. Products: MT6833, MT6853, MT6873, MT6877, MT6893 Problem Types: Information Disclosure Description: In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479306; Issue ID: ALPS06479306. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2022
CVE ID: CVE-2022-21791 State: PUBLISHED Published: 2022-08-01T13:56:05 Last Updated: 2024-08-03T02:53:36.285Z Vendors: MediaTek, Inc. Products: MT6833, MT6853, MT6873, MT6877, MT6885, MT6893 Problem Types: Information Disclosure Description: In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478059; Issue ID: ALPS06478059. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2022
CVE ID: CVE-2022-21792 State: PUBLISHED Published: 2022-08-01T13:56:16 Last Updated: 2024-08-03T02:53:36.140Z Vendors: MediaTek, Inc. Products: MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6893 Problem Types: Elevation of Privilege Description: In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085410; Issue ID: ALPS07085410. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2022
CVE ID: CVE-2022-21793 State: PUBLISHED Published: 2022-08-18T19:44:40.000Z Last Updated: 2025-05-05T16:30:28.369Z Vendors: n/a Products: Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare Problem Types: denial of service Description: Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via local access. Additional Analyst Notes: - CVE Program Container:
ted user to potentially enable a denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00650.html
CVE ID: CVE-2022-21794 State: PUBLISHED Published: 2022-11-11T15:48:50.809Z Last Updated: 2025-02-05T20:25:15.523Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits Problem Types: escalation of privilege Description: Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2022-21795 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:11.042Z Description: No description available.
CVE ID: CVE-2022-21796 State: PUBLISHED Published: 2022-01-28T19:10:03.000Z Last Updated: 2025-04-15T19:22:01.401Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A memory corruption vulnerability exists in the netserver parse_command_list functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1451
CVE ID: CVE-2022-21797 State: PUBLISHED Published: 2022-09-26T05:05:17.410454Z Last Updated: 2024-09-17T04:24:12.503Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: joblib Problem Types: Arbitrary Code Execution Description: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-PYTHON-JOBLIB-3027033 - https://github.com/joblib/joblib/commit/b90f10efeb670a2cc877fb88ebb3f2019189e059 - https://github.com/joblib/jobli
033 - https://github.com/joblib/joblib/commit/b90f10efeb670a2cc877fb88ebb3f2019189e059 - https://github.com/joblib/joblib/issues/1128 - https://github.com/joblib/joblib/pull/1321 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BVOMMW37OXZWU2EV5ONAAS462IQEHZOF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MJ5XTJS6OKJRRVXWFN5J67K3BYPEOBDF/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00027.html - https://security.gentoo.org/glsa/202401-01
CVE ID: CVE-2022-21798 State: PUBLISHED Published: 2022-02-25T18:10:56.670Z Last Updated: 2025-04-16T18:00:26.255Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: General Electric Products: Proficy CIMPLICITY Problem Types: CWE-319 Description: The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-02
CVE ID: CVE-2022-21799 State: PUBLISHED Published: 2022-02-08T10:30:37 Last Updated: 2024-08-03T02:53:36.272Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN router Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20220208-02/ - https://jvn.jp/en/jp/JVN17482543/index.html
CVE ID: CVE-2022-21800 State: PUBLISHED Published: 2022-02-18T17:50:18.612Z Last Updated: 2025-04-16T16:45:32.729Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Airspan Networks Products: MMP, PTP C-series, PTMP C-series and A5x Problem Types: CWE-327 Description: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attackers may be able to crack the hashed passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
ck the hashed passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02
CVE ID: CVE-2022-21801 State: PUBLISHED Published: 2022-01-28T19:10:04.000Z Last Updated: 2025-04-15T19:21:54.573Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-190 Description: A denial of service vulnerability exists in the netserver recv_command functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted network request can lead to a reboot. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1450