Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-2-unauthenticated-wordpress-options-change-vulnerability
CVE ID: CVE-2022-33200 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:47.940Z Description: No description available.
CVE ID: CVE-2022-33201 State: PUBLISHED Published: 2022-08-05T15:08:21.172Z Last Updated: 2025-02-20T20:13:56.541Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: MailerLite Products: MailerLite (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/official-mailerlite-sign-up-forms/wordpress-mailerlite-signup-forms-official-plugin-1-5-7-cross-site-request-forgery-csrf
fficial-mailerlite-sign-up-forms/wordpress-mailerlite-signup-forms-official-plugin-1-5-7-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/official-mailerlite-sign-up-forms/#developers
CVE ID: CVE-2022-33202 State: PUBLISHED Published: 2022-06-27T00:20:25 Last Updated: 2024-08-03T08:01:20.169Z Vendors: SOFTCREATE CORP. Products: L2Blocker Problem Types: Authentication bypass Description: Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative paths or channels for Sensor. Additional Analyst Notes: - CVE Program Container: References: - https://www.softcreate.co.jp/news/detail/210 - https://jvn.jp/en/jp/JVN51464799/index.html
CVE ID: CVE-2022-33203 State: PUBLISHED Published: 2022-08-04T17:46:20.481684Z Last Updated: 2024-09-17T03:38:18.177Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP APM Problem Types: CWE-400 Description: In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access policy with Service Connect agent is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/
pport (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K52534925
CVE ID: CVE-2022-33204 State: PUBLISHED Published: 2022-10-25T16:33:53.117Z Last Updated: 2025-04-15T18:46:07.441Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `ssid_hex` HTTP paramet
TTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `ssid_hex` HTTP parameter to construct an OS Command at offset `0x19afc0` of the `/root/hpgw` binary included in firmware 6.9Z. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE ID: CVE-2022-33205 State: PUBLISHED Published: 2022-10-25T16:33:54.093Z Last Updated: 2025-04-15T18:45:58.181Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `wpapsk_hex` HTTP param
TTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `wpapsk_hex` HTTP parameter to construct an OS Command at offset `0x19b0ac` of the `/root/hpgw` binary included in firmware 6.9Z. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE ID: CVE-2022-33206 State: PUBLISHED Published: 2022-10-25T16:33:55.060Z Last Updated: 2025-04-15T18:45:46.603Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `key` and `default_key_
TTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `key` and `default_key_id` HTTP parameters to construct an OS Command crafted at offset `0x19b1f4` of the `/root/hpgw` binary included in firmware 6.9Z. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE ID: CVE-2022-33207 State: PUBLISHED Published: 2022-10-25T16:33:56.062Z Last Updated: 2025-04-15T18:45:38.939Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on a second unsafe use of the `default_key_id` H
TTP request to trigger these vulnerabilities.This vulnerability focuses on a second unsafe use of the `default_key_id` HTTP parameter to construct an OS Command at offset `0x19B234` of the `/root/hpgw` binary included in firmware 6.9Z. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE ID: CVE-2022-33208 State: PUBLISHED Published: 2022-07-04T01:50:44 Last Updated: 2024-08-03T08:01:20.422Z Vendors: OMRON Corporation Products: Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series Problem Types: Authentication Bypass by Capture-replay Description: Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V
Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf - https://jvn.jp/en/vu/JVNVU97050784/index.html
CVE ID: CVE-2022-33209 State: PUBLISHED Published: 2022-08-18T20:03:35.000Z Last Updated: 2025-02-18T15:30:23.590Z Vendors: n/a Products: Intel(R) NUC Laptop Kits Problem Types: escalation of privilege Description: Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE ID: CVE-2022-33210 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T14:28:42.937Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto Problem Types: Use of Out-of-range Pointer Offset in Automotive Multimedia Description: Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin
CVE ID: CVE-2022-33211 State: PUBLISHED Published: 2023-04-04T04:46:23.347Z Last Updated: 2024-08-03T08:01:20.237Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: memory corruption in modem due to improper check while calculating size of serialized CoAP message Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33213 State: PUBLISHED Published: 2023-03-07T04:43:22.682Z Last Updated: 2024-08-03T08:01:20.349Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption in modem due to buffer overflow while processing a PPP packet Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE ID: CVE-2022-33214 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T14:29:50.609Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Time-of-check time-of-use race condition in Display Description: Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container:
, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin
CVE ID: CVE-2022-33216 State: PUBLISHED Published: 2023-02-09T06:58:25.463Z Last Updated: 2024-08-03T08:01:20.360Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33217 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T15:15:23.165Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Buffer copy without checking size of input in Qualcomm IPC Description: Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin
CVE ID: CVE-2022-33218 State: PUBLISHED Published: 2023-01-06T05:02:13.762Z Last Updated: 2025-04-09T19:52:46.369Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Memory corruption in Automotive due to improper input validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33219 State: PUBLISHED Published: 2023-01-06T05:02:15.033Z Last Updated: 2025-04-09T19:49:24.198Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33220 State: PUBLISHED Published: 2023-09-05T06:23:46.847Z Last Updated: 2024-08-03T08:01:20.211Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in Automotive multimedia due to buffer over-read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
CVE ID: CVE-2022-33221 State: PUBLISHED Published: 2023-02-09T06:58:27.004Z Last Updated: 2024-08-03T08:01:20.200Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33222 State: PUBLISHED Published: 2023-04-04T04:46:24.575Z Last Updated: 2024-08-03T08:01:20.355Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure due to buffer over-read while parsing DNS response packets in Modem. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33223 State: PUBLISHED Published: 2023-04-04T04:46:26.078Z Last Updated: 2024-08-03T08:01:20.395Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33224 State: PUBLISHED Published: 2023-06-06T07:38:35.157Z Last Updated: 2024-08-03T08:01:20.459Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE ID: CVE-2022-33225 State: PUBLISHED Published: 2023-02-09T06:58:28.625Z Last Updated: 2024-08-03T08:01:20.254Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption due to use after free in trusted application environment. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33226 State: PUBLISHED Published: 2023-06-06T07:38:36.613Z Last Updated: 2024-08-03T08:01:20.485Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE ID: CVE-2022-33227 State: PUBLISHED Published: 2023-06-06T07:38:38.184Z Last Updated: 2024-08-03T08:01:20.554Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory corruption in Linux android due to double free while calling unregister provider after register call. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE ID: CVE-2022-33228 State: PUBLISHED Published: 2023-04-04T04:46:27.647Z Last Updated: 2024-08-03T08:01:20.412Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33229 State: PUBLISHED Published: 2023-02-09T06:58:30.207Z Last Updated: 2024-08-03T08:01:20.398Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33230 State: PUBLISHED Published: 2023-06-06T07:38:39.682Z Last Updated: 2024-08-03T08:01:20.488Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE ID: CVE-2022-33231 State: PUBLISHED Published: 2023-04-04T04:46:29.234Z Last Updated: 2024-08-03T08:01:20.424Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory corruption due to double free in core while initializing the encryption key. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33232 State: PUBLISHED Published: 2023-02-09T06:58:31.974Z Last Updated: 2024-08-03T08:01:20.517Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33233 State: PUBLISHED Published: 2023-02-09T06:58:33.583Z Last Updated: 2024-08-03T08:01:20.556Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-16 Description: Memory corruption due to configuration weakness in modem wile sending command to write protected files. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33234 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-22T15:49:24.862Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Configuration weakness in video Description: Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container:
, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin
CVE ID: CVE-2022-33235 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T15:44:28.488Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Buffer over-read in WLAN firmware Description: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon C
ue to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin
CVE ID: CVE-2022-33236 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-22T15:49:16.930Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Problem Types: Buffer over-read in WLAN Description: Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.q
e and Networking Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin