Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Additional Analyst Notes: - CVE Program Container: References: - https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10 - https://launchpad.support.sap.com/#/notes/3145987 - http://seclists.org/fulldisclosure/2022/Jun/38 - http://packetstormsecurity.com/files/167560/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Missing-Authentication.html
CVE ID: CVE-2022-24397 State: PUBLISHED Published: 2022-03-09T16:47:52 Last Updated: 2024-08-03T04:07:02.560Z Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-79 Description: SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.This reflected cross-site scripting attack can be used to non-permanently deface or modify displayed content of portal Website. The execution of the script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser. Additional Analyst Notes: - CVE Prog
portal could compromise the confidentiality and integrity of victim’s web browser. Additional Analyst Notes: - CVE Program Container: References: - https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10 - https://launchpad.support.sap.com/#/notes/3146260
CVE ID: CVE-2022-24398 State: PUBLISHED Published: 2022-03-08T13:35:41 Last Updated: 2024-08-03T04:07:02.518Z Vendors: SAP SE Products: SAP Business Objects Business Intelligence Platform Problem Types: CWE-200 Description: Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10 - https://launchpad.support.sap.com/#/notes/3103424
CVE ID: CVE-2022-24399 State: PUBLISHED Published: 2022-03-08T13:36:07 Last Updated: 2024-08-03T04:07:02.521Z Vendors: SAP SE Products: SAP Focused Run (Real User Monitoring) Problem Types: CWE-79 Description: The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10 - https://launchpad.support.sap.com/#/notes/3147283 - http://seclists.org/fulldisclosure/2022/Jun/37 - http://packetstormsecurity.com/files/167559/
.sap.com/#/notes/3147283 - http://seclists.org/fulldisclosure/2022/Jun/37 - http://packetstormsecurity.com/files/167559/SAP-FRUN-2.00-3.00-Cross-Site-Scripting.html
CVE ID: CVE-2022-24400 State: PUBLISHED Published: 2023-10-19T09:33:28.366Z Last Updated: 2024-09-12T20:30:58.123Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R/CR:H/IR:H/AR:H/MAV:A/MAC:H/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: ETSI Products: TETRA Standard Problem Types: CWE-807 Description: A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2022-24401 State: PUBLISHED Published: 2023-10-19T09:32:53.702Z Last Updated: 2024-08-03T04:13:55.205Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:A/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: ETSI Products: TETRA Standard Problem Types: CWE-323 Description: Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of these counters in a mobile station, provoking keystream re-use. By s
ner. An active adversary can manipulate the view of these counters in a mobile station, provoking keystream re-use. By sending crafted messages to the MS and analyzing MS responses, keystream for arbitrary frames can be recovered. Additional Analyst Notes: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-24402 State: PUBLISHED Published: 2023-10-19T09:32:23.476Z Last Updated: 2024-09-12T20:31:31.278Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:A/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: ETSI Products: TETRA Standard Problem Types: CWE-334 Description: The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2022-24403 State: PUBLISHED Published: 2023-12-05T13:54:32.045Z Last Updated: 2024-08-03T04:13:55.262Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:A/MAC:L/MPR:N/MUI:N/MS:U/MC:L/MI:N/MA:N) Vendors: ETSI Products: TETRA Standard Problem Types: CWE-327 Description: The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs. Additional
rsary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs. Additional Analyst Notes: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-24404 State: PUBLISHED Published: 2023-10-19T09:31:43.802Z Last Updated: 2024-08-03T04:13:55.323Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U/RL:U/RC:R/CR:H/IR:H/AR:H/MAV:A/MAC:H/MPR:N/MUI:N/MS:U/MC:N/MI:H/MA:L) Vendors: ETSI Products: TETRA Standard Problem Types: CWE-353 Description: Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-24405 State: PUBLISHED Published: 2022-07-27T13:34:25 Last Updated: 2024-08-03T04:13:55.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Jul/11
CVE ID: CVE-2022-24406 State: PUBLISHED Published: 2022-07-27T13:40:56 Last Updated: 2024-08-03T04:13:55.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Jul/11
CVE ID: CVE-2022-24407 State: PUBLISHED Published: 2022-02-23T00:00:00 Last Updated: 2024-08-03T04:13:55.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28 - http://www.openwall.com/lists/oss-security/2022/02/23/4 - https://www.debian.org/security/2022/dsa-5087 - https://lists.debian.org/debian-lts-announce/2022/03/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
bian-lts-announce/2022/03/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZC6BMPI3V3MC2IGNLN377ETUWO7QBIH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H26R4SMGM3WHXX4XYNNJB4YGFIL5UNF4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FIXU75Q6RBNK6UYM7MQ3TCFGXR7AX4U/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://github.com/cyrusimap/cyrus-sasl/blob/fdcd13ceaef8de684dc69008011fa865c5b4a3ac/docsrc/sasl/release-notes/2.1/index.rst - https://security.netapp.com/advisory/ntap-20221007-0003/
CVE ID: CVE-2022-24408 State: PUBLISHED Published: 2022-03-08T11:31:30 Last Updated: 2024-08-03T04:13:55.644Z Vendors: Siemens Products: SINUMERIK MC, SINUMERIK ONE Problem Types: CWE-269 Description: A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-337210.pdf
CVE ID: CVE-2022-24409 State: PUBLISHED Published: 2022-02-23T21:30:09.240961Z Last Updated: 2024-09-17T00:05:29.221Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell BSAFE SSL-J Problem Types: CWE-385 Description: Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kb
shared at a later date. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000196312/dsa-2022-023-dell-bsafetm-ssl-j-6-4-security-update-for-a-single-covert-timing-channel
CVE ID: CVE-2022-24410 State: PUBLISHED Published: 2023-02-10T10:34:58.416Z Last Updated: 2025-03-24T18:36:15.215Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-200 Description: Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000205719/dsa-2022-325
CVE ID: CVE-2022-24411 State: PUBLISHED Published: 2022-04-12T17:50:55.955383Z Last Updated: 2024-09-17T01:16:44.994Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-378 Description: Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale Compliance Mode guarantees. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/0001966
guarantees. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196657
CVE ID: CVE-2022-24412 State: PUBLISHED Published: 2022-04-12T17:50:57.366716Z Last Updated: 2024-09-16T16:48:37.369Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-229 Description: Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196657
CVE ID: CVE-2022-24413 State: PUBLISHED Published: 2022-04-12T17:50:58.945183Z Last Updated: 2024-09-17T04:03:41.224Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-367 Description: Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196657
CVE ID: CVE-2022-24414 State: PUBLISHED Published: 2022-05-26T15:20:17.669541Z Last Updated: 2024-09-17T00:55:43.891Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Dell Products: CloudLink Problem Types: CWE-598 Description: Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197425/dsa-2022-064-dell-emc-cl
otes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197425/dsa-2022-064-dell-emc-cloudlink-security-update-for-security-vulnerabilities
CVE ID: CVE-2022-24415 State: PUBLISHED Published: 2022-03-11T21:45:15.149838Z Last Updated: 2024-09-17T02:48:00.526Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053
CVE ID: CVE-2022-24416 State: PUBLISHED Published: 2022-03-11T21:45:16.585358Z Last Updated: 2024-09-16T17:22:51.528Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053
CVE ID: CVE-2022-24417 State: PUBLISHED Published: 2022-05-26T15:20:19.382956Z Last Updated: 2024-09-16T20:27:17.052Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000199285/dsa-2022-095
CVE ID: CVE-2022-24418 State: PUBLISHED Published: 2022-05-26T15:20:20.811864Z Last Updated: 2024-09-17T02:27:23.157Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000199285/dsa-2022-095
CVE ID: CVE-2022-24419 State: PUBLISHED Published: 2022-03-11T21:45:18.151599Z Last Updated: 2024-09-16T17:15:25.517Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053
CVE ID: CVE-2022-24420 State: PUBLISHED Published: 2022-03-11T21:45:19.523909Z Last Updated: 2024-09-17T00:30:49.605Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053
CVE ID: CVE-2022-24421 State: PUBLISHED Published: 2022-03-11T21:45:21.008810Z Last Updated: 2024-09-17T03:37:56.003Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197057/dsa-2022-053
CVE ID: CVE-2022-24422 State: PUBLISHED Published: 2022-05-26T15:20:22.189079Z Last Updated: 2024-09-16T22:31:28.430Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: Integrated Dell Remote Access Controller 9 Problem Types: CWE-287 Description: Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000199267/dsa-2022-068-dell-idrac9-security-update-for-an-improper-au
rences: - https://www.dell.com/support/kbdoc/en-us/000199267/dsa-2022-068-dell-idrac9-security-update-for-an-improper-authentication-vulnerability
CVE ID: CVE-2022-24423 State: PUBLISHED Published: 2022-04-21T20:50:15.116141Z Last Updated: 2024-09-16T19:46:48.789Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller 8 Problem Types: CWE-20 Description: Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000198064/dsa-2022-069
CVE ID: CVE-2022-24424 State: PUBLISHED Published: 2022-04-21T20:50:16.773718Z Last Updated: 2024-09-16T20:43:36.814Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: AppSync Problem Types: CWE-22 Description: Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000197433
CVE ID: CVE-2022-24425 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-24426 State: PUBLISHED Published: 2022-04-01T20:00:36.542114Z Last Updated: 2024-09-16T20:31:18.486Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Command Update (DCU) Problem Types: CWE-427 Description: Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197723/dsa-2022-074
CVE ID: CVE-2022-24427 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-24428 State: PUBLISHED Published: 2022-04-08T19:50:29.280992Z Last Updated: 2024-09-17T01:11:29.246Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-281 Description: Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation of privileges. A remote filesystem user with a local account could potentially exploit this vulnerability, leading to an escalation of file privileges and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197991/dell-emc-powersc
nalyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000197991/dell-emc-powerscale-onefs-security-update-for-multiple-component-vulnerabilities
CVE ID: CVE-2022-24429 State: PUBLISHED Published: 2022-06-10T20:00:38.006742Z Last Updated: 2024-09-17T01:50:44.179Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P) Vendors: n/a Products: convert-svg-core Problem Types: Arbitrary Code Injection Description: The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-2859212 - https://github.com/neocotic/convert-svg/issues/84 - htt
erences: - https://snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-2859212 - https://github.com/neocotic/convert-svg/issues/84 - https://github.com/neocotic/convert-svg/commit/a43dffaab0f1e419d5be84e2e7356b86ffac3cf1
CVE ID: CVE-2022-24431 State: PUBLISHED Published: 2022-12-21T23:14:33.786Z Last Updated: 2025-04-15T19:20:09.955Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: abacus-ext-cmdline Problem Types: Command Injection Description: All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-ABACUSEXTCMDLINE-3157950
CVE ID: CVE-2022-24432 State: PUBLISHED Published: 2022-03-09T15:34:32.203Z Last Updated: 2025-04-16T16:43:32.332Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: IPCOMM Products: IPCOMM ipDIO Problem Types: CWE-79 Description: Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields. The XSS payload will be executed when a legitimate user attempts to upload, copy, download, or delete an existing configuration (Administrative Services). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h