Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28560 State: PUBLISHED Published: 2022-05-03T15:20:33 Last Updated: 2024-08-03T05:56:15.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iot-firmeware/-Router-vulnerability/tree/main/Tenda%20AC9
CVE ID: CVE-2022-28561 State: PUBLISHED Published: 2022-05-03T15:21:47 Last Updated: 2024-08-03T05:56:15.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iot-firmeware/-Router-vulnerability/tree/main/AX12
CVE ID: CVE-2022-28568 State: PUBLISHED Published: 2022-05-04T14:32:16 Last Updated: 2024-08-03T05:56:15.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored. Additional Analyst Notes: - CVE Program Container: References: - http://sourcecodetester.com - http://doctors.com - https://github.com/b3nj1-1/CVE/tree/main/CVE-2022-28568
CVE ID: CVE-2022-28571 State: PUBLISHED Published: 2022-05-02T12:35:00 Last Updated: 2024-08-03T05:56:15.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/F0und-icu/TempName/tree/main/Dlink-882
CVE ID: CVE-2022-28572 State: PUBLISHED Published: 2022-05-02T12:36:51 Last Updated: 2024-08-03T05:56:16.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function Additional Analyst Notes: - CVE Program Container: References: - https://github.com/F0und-icu/TempName/tree/main/TendaAX18
CVE ID: CVE-2022-28573 State: PUBLISHED Published: 2022-05-02T13:06:07 Last Updated: 2024-08-03T05:56:16.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the system_time_timezone parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/F0und-icu/TempName/tree/main/Dlink-823pro
CVE ID: CVE-2022-28575 State: PUBLISHED Published: 2022-05-05T17:28:45 Last Updated: 2024-08-03T05:56:16.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows attackers to execute arbitrary commands through a carefully constructed payload Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/1
CVE ID: CVE-2022-28577 State: PUBLISHED Published: 2022-05-05T17:33:23 Last Updated: 2024-08-03T05:56:16.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/3
CVE ID: CVE-2022-28578 State: PUBLISHED Published: 2022-05-05T17:36:23 Last Updated: 2024-08-03T05:56:16.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/2
CVE ID: CVE-2022-28579 State: PUBLISHED Published: 2022-05-05T17:38:56 Last Updated: 2024-08-03T05:56:16.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/4
CVE ID: CVE-2022-28580 State: PUBLISHED Published: 2022-05-05T17:40:56 Last Updated: 2024-08-03T05:56:16.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/5
CVE ID: CVE-2022-28581 State: PUBLISHED Published: 2022-05-05T17:42:41 Last Updated: 2024-08-03T05:56:16.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/9
CVE ID: CVE-2022-28582 State: PUBLISHED Published: 2022-05-05T17:44:23 Last Updated: 2024-08-03T05:56:16.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/6
CVE ID: CVE-2022-28583 State: PUBLISHED Published: 2022-05-05T17:47:15 Last Updated: 2024-08-03T05:56:16.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/7
CVE ID: CVE-2022-28584 State: PUBLISHED Published: 2022-05-05T17:26:18 Last Updated: 2024-08-03T05:56:16.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/8
CVE ID: CVE-2022-28585 State: PUBLISHED Published: 2022-05-03T17:02:58 Last Updated: 2024-08-03T05:56:16.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leadscloud/EmpireCMS/issues/5
CVE ID: CVE-2022-28586 State: PUBLISHED Published: 2022-04-25T12:38:49 Last Updated: 2024-08-03T05:56:16.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havok89/Hoosk/issues/63
CVE ID: CVE-2022-28588 State: PUBLISHED Published: 2022-05-03T17:42:00 Last Updated: 2024-08-03T05:56:16.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lkmc2/SpringBootMovie/issues/3
CVE ID: CVE-2022-28589 State: PUBLISHED Published: 2022-05-03T13:59:31 Last Updated: 2024-08-03T05:56:16.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=add_new Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pixelimity/pixelimity/issues/23
CVE ID: CVE-2022-28590 State: PUBLISHED Published: 2022-05-03T13:57:33 Last Updated: 2024-08-03T05:56:16.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pixelimity/pixelimity/issues/24
CVE ID: CVE-2022-28598 State: PUBLISHED Published: 2022-08-22T00:00:00 Last Updated: 2024-08-03T05:56:16.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. Additional Analyst Notes: - CVE Program Container: References: - http://erpnext.com - http://frappe.com - https://github.com/patrickdeanramos/CVE-2022-28598/blob/main/ERPNext%20-%2012.29.0.pdf - http://packetstormsecurity.com/files/171730/ERPNext-12.29-Cross-Site-Scripting.html
CVE ID: CVE-2022-28599 State: PUBLISHED Published: 2022-05-03T18:01:45 Last Updated: 2024-08-03T05:56:16.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/595
CVE ID: CVE-2022-28601 State: PUBLISHED Published: 2022-05-10T20:42:50 Last Updated: 2024-08-03T05:56:16.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://www.lmsdoctor.com/simple-2-factor-authentication-plugin-for-moodle - https://github.com/FlaviuPopescu/CVE-2022-28601
CVE ID: CVE-2022-28605 State: PUBLISHED Published: 2022-05-31T20:11:38 Last Updated: 2024-08-03T05:56:16.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/zachi40/1f8d174939684c07f5e32ee039ce9acf
CVE ID: CVE-2022-28606 State: PUBLISHED Published: 2022-05-05T16:00:46 Last Updated: 2024-08-03T05:56:16.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2022-04804 - https://www.cnvd.org.cn/patchInfo/show/313666 - https://www.bosscms.net/
CVE ID: CVE-2022-28607 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T14:28:56.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/mod_users/controller.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/killmonday/isic.lk-RCE
CVE ID: CVE-2022-28611 State: PUBLISHED Published: 2022-11-11T15:48:45.794Z Last Updated: 2025-02-05T20:47:35.045Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) XMM(TM) 7560 Modem software Problem Types: escalation of privilege Description: Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE ID: CVE-2022-28612 State: PUBLISHED Published: 2022-06-15T19:34:24.378Z Last Updated: 2025-02-20T20:18:18.272Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Muneeb Products: Custom Popup Builder (WordPress plugin) Problem Types: CWE-284, CWE-79 Description: Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb's Custom Popup Builder plugin <= 1.3.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/m-wp-popup/ - https://patchstack.com/database/vulnerability/m-w
ulnrichment: References: - https://wordpress.org/plugins/m-wp-popup/ - https://patchstack.com/database/vulnerability/m-wp-popup/wordpress-custom-popup-builder-plugin-1-3-1-improper-access-control-vulnerability-leading-to-multiple-authenticated-stored-xss
CVE ID: CVE-2022-28613 State: PUBLISHED Published: 2022-05-02T19:01:06.262330Z Last Updated: 2024-09-25T07:58:13.187Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: RTU500 series CMU Firmware Problem Types: CWE-1284 Description: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus T
The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function. Additional Analyst Notes: - CVE Program Container: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000103&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-28614 State: PUBLISHED Published: 2022-06-08T10:00:48 Last Updated: 2024-08-03T05:56:16.107Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-190, CWE-200 Description: The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and distributed separately from Apache HTTP Server that use the 'ap_rputs' function and may pass it a very large (INT_MAX or larger) string must be compiled against current headers to resolve the issue. Additional Analyst Notes: - C
(INT_MAX or larger) string must be compiled against current headers to resolve the issue. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/4 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-28615 State: PUBLISHED Published: 2022-06-08T10:00:51 Last Updated: 2024-08-03T05:56:16.195Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-190 Description: Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.co
CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/9 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-28616 State: PUBLISHED Published: 2022-05-17T20:04:17 Last Updated: 2024-08-03T05:56:16.046Z Vendors: n/a Products: HPE OneView Problem Types: remote server-side request forgery (ssrf) Description: A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04278en_us
CVE ID: CVE-2022-28617 State: PUBLISHED Published: 2022-05-17T19:59:15 Last Updated: 2024-08-03T05:56:16.116Z Vendors: n/a Products: HPE OneView Problem Types: remote bypass security restrictions Description: A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04278en_us
CVE ID: CVE-2022-28618 State: PUBLISHED Published: 2022-05-20T20:50:19 Last Updated: 2024-08-03T05:56:16.116Z Vendors: n/a Products: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays Problem Types: remote arbitrary code execution Description: A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays that could allow an attacker to execute arbitrary commands on a Nimble appliance. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 o
s made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04276en_us
CVE ID: CVE-2022-28619 State: PUBLISHED Published: 2022-06-24T15:00:09 Last Updated: 2024-08-03T05:56:16.091Z Vendors: n/a Products: HPE Version Control Repository Manager Problem Types: local escalation of privilege Description: A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager installer 7.6.14.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04310en_us
CVE ID: CVE-2022-28620 State: PUBLISHED Published: 2022-06-24T15:00:10 Last Updated: 2024-08-03T05:56:16.132Z Vendors: n/a Products: Cray Legacy Shasta System Solutions; HPE Slingshot; HPE Cray EX supercomputers Problem Types: remote authentication bypass Description: A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27; All Slingshot versions prior to 1.7.2; All versions of no
Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27; All Slingshot versions prior to 1.7.2; All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27. HPE has provided a software update to resolve this vulnerability in HPE Cray Legacy Shasta System Solutions, HPE Slingshot, and HPE Cray EX Supercomputers. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbcr04284en_us
CVE ID: CVE-2022-28621 State: PUBLISHED Published: 2022-06-28T17:48:43 Last Updated: 2024-08-03T05:56:16.084Z Vendors: n/a Products: HPE NonStop DSM/SCM T6031 Problem Types: remote disclosure of sensitive information Description: A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP. HPE has provided a software update to resolve this vulnerability in HPE NonStop DSM/SCM. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns04328en_us
CVE ID: CVE-2022-28622 State: PUBLISHED Published: 2022-06-27T18:51:25 Last Updated: 2024-08-03T05:56:16.162Z Vendors: n/a Products: HPE StoreOnce Software Problem Types: remote unauthorized access Description: A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04311en_us