Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Switch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.x, 6.0.x allows an attacker which has obtained access to a restricted administrative account to obtain sensitive information via `diagnose debug` commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-18-232
CVE ID: CVE-2022-27491 State: PUBLISHED Published: 2022-09-06T15:10:10 Last Updated: 2024-10-22T20:54:44.887Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Denial of service Description: A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim. Additional Analyst Notes: - C
TML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-073
CVE ID: CVE-2022-27492 State: PUBLISHED Published: 2022-09-23T14:00:14.000Z Last Updated: 2025-05-22T18:26:38.922Z Vendors: Meta Products: WhatsApp Business for iOS, WhatsApp for iOS, WhatsApp for Android, WhatsApp Business for Android Problem Types: CWE-191 Description: An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whatsapp.com/security/advisories/2022/
CVE ID: CVE-2022-27493 State: PUBLISHED Published: 2022-08-18T20:04:00.000Z Last Updated: 2025-02-18T15:22:29.406Z Vendors: n/a Products: Intel(R) NUC Laptop Kits Problem Types: escalation of privilege Description: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE ID: CVE-2022-27494 State: PUBLISHED Published: 2022-10-21T15:39:04.685Z Last Updated: 2025-04-17T15:47:38.971Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: Aethon Products: TUG Home Base Server Problem Types: The “Reports” tab of the Fleet Management Console is vulnerable to stored cross-site scripting attacks when new reports are created or edited. Description: Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05
CVE ID: CVE-2022-27495 State: PUBLISHED Published: 2022-05-05T16:10:52.847186Z Last Updated: 2024-09-16T16:38:41.397Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: F5 Products: NGINX Service Mesh Problem Types: CWE-306 Description: On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K94093538
CVE ID: CVE-2022-27496 State: PUBLISHED Published: 2022-03-31T07:21:44 Last Updated: 2024-08-03T05:32:57.864Z Vendors: Zero-Channel BBS Plus Developers Products: Zero-channel BBS Plus Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://osdn.net/projects/zerochplus/releases/77053 - https://jvn.jp/en/jp/JVN59576930/index.html
CVE ID: CVE-2022-27497 State: PUBLISHED Published: 2022-11-11T15:48:35.754Z Last Updated: 2025-02-05T20:54:25.497Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) AMT Problem Types: denial of service Description: Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE ID: CVE-2022-27498 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-15T18:39:13.203Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Lansweeper Products: lansweeper Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022
Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1531
CVE ID: CVE-2022-27499 State: PUBLISHED Published: 2022-11-11T15:48:41.249Z Last Updated: 2025-02-05T20:52:49.837Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) SGX SDK software Problem Types: information disclosure Description: Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00691.html
CVE ID: CVE-2022-27500 State: PUBLISHED Published: 2022-08-18T19:52:28.000Z Last Updated: 2025-05-05T16:22:16.283Z Vendors: n/a Products: Intel(R) Support Android application Problem Types: information disclosure Description: Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00660.html
CVE ID: CVE-2022-27502 State: PUBLISHED Published: 2022-06-10T12:03:05 Last Updated: 2024-08-03T05:32:57.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://realvnc.com - https://help.realvnc.com/hc/en-us/articles/360002478311-Are-there-any-known-security-vulnerabilities-#cve-2008-4770-moderate-%E2%80%94-only-affects-vnc-viewer--0-1
CVE ID: CVE-2022-27503 State: PUBLISHED Published: 2022-04-13T17:05:54 Last Updated: 2024-08-03T05:32:57.924Z Vendors: Citrix Products: StoreFront Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9 Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX377814
CVE ID: CVE-2022-27505 State: PUBLISHED Published: 2022-04-13T17:06:05.551190Z Last Updated: 2024-09-16T19:15:53.220Z Vendors: Citirx Products: Citrix SD-WAN Problem Types: CWE-79 Description: Reflected cross site scripting (XSS) Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX370550
CVE ID: CVE-2022-27506 State: PUBLISHED Published: 2022-04-13T17:06:04.592555Z Last Updated: 2024-09-16T18:24:50.407Z Vendors: Citirx Products: Citrix SD-WAN Problem Types: CWE-798 Description: Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX370550
CVE ID: CVE-2022-27507 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-01T18:40:48.533Z Vendors: Citirx Products: Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway Problem Types: CWE-400 Description: Authenticated denial of service Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX457048/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202227507-and-cve202227508
CVE ID: CVE-2022-27508 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-01T17:52:55.511Z Vendors: Citirx Products: Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway Problem Types: CWE-400 Description: Unauthenticated denial of service Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX457048/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202227507-and-cve202227508
CVE ID: CVE-2022-27509 State: PUBLISHED Published: 2022-07-28T13:11:43.072489Z Last Updated: 2024-09-16T18:43:25.275Z Vendors: Citirx Products: Citrix Application Delivery Management (Citrix ADC) and Citrix Gateway Problem Types: Unauthenticated redirection to a malicious website Description: Unauthenticated redirection to a malicious website Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX457836
CVE ID: CVE-2022-27510 State: PUBLISHED Published: 2022-11-08T21:26:10.688Z Last Updated: 2025-05-01T19:37:47.278Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Citrix Products: Citrix Gateway, Citrix ADC Problem Types: CWE-288 Description: Unauthorized access to Gateway user capabilities Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516
CVE ID: CVE-2022-27511 State: PUBLISHED Published: 2022-06-16T18:53:14.582634Z Last Updated: 2024-09-17T01:10:57.643Z Vendors: Citrix Products: Citrix Application Delivery Management (Citrix ADM) Problem Types: CWE-284 Description: Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-
ps://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512
CVE ID: CVE-2022-27512 State: PUBLISHED Published: 2022-06-16T18:53:33.283390Z Last Updated: 2024-09-16T23:35:26.170Z Vendors: Citrix Products: Citrix Application Delivery Management (Citrix ADM) Problem Types: CWE-664 Description: Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512
CVE ID: CVE-2022-27513 State: PUBLISHED Published: 2022-11-08T21:26:08.238Z Last Updated: 2025-05-01T19:38:16.814Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Citrix Products: Citrix Gateway, Citrix ADC Problem Types: CWE-345 Description: Remote desktop takeover via phishing Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516
CVE ID: CVE-2022-27516 State: PUBLISHED Published: 2022-11-08T21:26:12.642Z Last Updated: 2025-05-01T19:37:07.980Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Citrix Products: Citrix Gateway, Citrix ADC Problem Types: CWE-693 Description: User login brute force protection functionality bypass Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516
CVE ID: CVE-2022-27518 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-10-21T23:15:30.190Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Citrix Products: Citrix Gateway, Citrix ADC Problem Types: CWE-664 Description: Unauthenticated remote arbitrary code execution Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX474995
CVE ID: CVE-2022-27523 State: PUBLISHED Published: 2022-04-13T17:06:09 Last Updated: 2024-08-03T05:32:59.224Z Vendors: n/a Products: Autodesk Trueview Problem Types: Buffer Over Read Description: A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
CVE ID: CVE-2022-27524 State: PUBLISHED Published: 2022-04-13T17:06:10 Last Updated: 2024-08-03T05:32:58.419Z Vendors: n/a Products: Autodesk Trueview Problem Types: Out-of-bound Read Description: An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
CVE ID: CVE-2022-27525 State: PUBLISHED Published: 2022-04-18T16:20:25 Last Updated: 2024-08-03T05:32:59.158Z Vendors: n/a Products: Autodesk® Design Review Problem Types: Memory Corruption Description: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2022-27526 State: PUBLISHED Published: 2022-04-18T16:20:26 Last Updated: 2024-08-03T05:32:59.244Z Vendors: n/a Products: Autodesk Design Review Problem Types: Memory Corruption Description: A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2022-27527 State: PUBLISHED Published: 2022-04-19T20:26:32 Last Updated: 2024-08-03T05:32:59.091Z Vendors: n/a Products: Navisworks Problem Types: Memory Corruption vulnerability Description: A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010
CVE ID: CVE-2022-27528 State: PUBLISHED Published: 2022-04-11T19:37:54 Last Updated: 2024-08-03T05:32:59.283Z Vendors: n/a Products: Autodesk Navisworks Problem Types: Use-after-free Description: A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE ID: CVE-2022-27529 State: PUBLISHED Published: 2022-04-18T16:20:27 Last Updated: 2024-08-03T05:32:58.676Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-bounds Write Description: A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advi
rary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2022-27530 State: PUBLISHED Published: 2022-04-18T16:20:28 Last Updated: 2024-08-03T05:32:59.969Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Buffer Overflow Write Description: A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk
Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2022-27531 State: PUBLISHED Published: 2022-06-16T15:46:49 Last Updated: 2024-08-03T05:32:59.179Z Vendors: n/a Products: Autodesk 3ds Max Problem Types: Out-of-bound Read Vulnerability Description: A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0010
CVE ID: CVE-2022-27532 State: PUBLISHED Published: 2022-06-16T15:47:00 Last Updated: 2024-08-03T05:32:59.034Z Vendors: n/a Products: Autodesk 3ds Max Problem Types: Ou-of-bound Write vulnerability Description: A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0010
CVE ID: CVE-2022-27534 State: PUBLISHED Published: 2022-04-01T22:17:49 Last Updated: 2024-08-03T05:32:59.959Z Vendors: n/a Products: Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security Problem Types: Arbitrary Code Execution Description: Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies). Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#3
nalyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_2
CVE ID: CVE-2022-27535 State: PUBLISHED Published: 2022-08-05T16:47:46 Last Updated: 2024-08-03T05:32:59.299Z Vendors: n/a Products: Kaspersky VPN Secure Connection for Windows Problem Types: Local Privilege Escalation (LPE) Description: Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#050822 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/ - https://forum.kaspe
- https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/ - https://forum.kaspersky.com/topic/kaspersky-statement-on-cve-2022-27535-26742/
CVE ID: CVE-2022-27536 State: PUBLISHED Published: 2022-04-20T00:00:00 Last Updated: 2024-08-03T05:32:58.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/golang-announce - https://groups.google.com/g/golang-announce/c/oecdBNLOml8 - https://security.gentoo.org/glsa/202208-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf - https://security.netapp.com/advisory/ntap
a/202208-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf - https://security.netapp.com/advisory/ntap-20230309-0001/
CVE ID: CVE-2022-27537 State: PUBLISHED Published: 2023-01-30T21:26:11.879Z Last Updated: 2025-03-27T15:23:56.436Z Vendors: HP Inc. Products: HP PC BIOS Problem Types: n/a Description: Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6664419-6664458-16/hpsbhf03806
CVE ID: CVE-2022-27538 State: PUBLISHED Published: 2023-01-30T20:41:26.690Z Last Updated: 2025-03-27T19:04:44.066Z Vendors: HP Inc. Products: HP PC BIOS Problem Types: n/a Description: A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7387020-7387107-16/hpsbhf03827
CVE ID: CVE-2022-27539 State: PUBLISHED Published: 2023-06-12T18:56:55.490Z Last Updated: 2025-01-03T21:02:37.119Z Vendors: HP Inc. Products: HP PC BIOS Description: Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7709808-7709835-16/hpsbhf03835