Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//microchip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
CVE ID: CVE-2022-46401 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:29:14.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG - https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM - https://microchip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-
icrochip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
CVE ID: CVE-2022-46402 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:12:34.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG - https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM - https://microchip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-i
m - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
CVE ID: CVE-2022-46403 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:09:15.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG - https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM - https://microchip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
CVE ID: CVE-2022-46404 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:36:15.620Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2211-02.pdf - https://www.heise.de/news/Kommunikationssoftware-Kritische-Sicherheitsluecke-in-Atos-Unify-OpenScape-4000-7358657.html
CVE ID: CVE-2022-46405 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T15:19:38.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://borg.social/notes/98bcoo2t1n - https://hackmd.io/rD9nsTz1QeuPT-erxqjY-A
CVE ID: CVE-2022-46407 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T14:32:28.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to exploit the vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-46408 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T14:31:43.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker would need admin/elevated access to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-46410 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T15:18:44.088Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root by using specific commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS22-019#issue5
CVE ID: CVE-2022-46411 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T15:17:59.189Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS22-019#issue3
CVE ID: CVE-2022-46412 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T16:02:31.048Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS22-019#issue4
CVE ID: CVE-2022-46413 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T16:01:33.283Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command execution can occur via the management portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS22-019#issue2
CVE ID: CVE-2022-46414 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T13:41:02.152Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS22-019#issue1
CVE ID: CVE-2022-46415 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:45:20.466Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://smartstore.naver.com/chach
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://smartstore.naver.com/chachablues/products/6617613337 - https://smartstore.naver.com/hancomawesome-tech/products/5367473135 - https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-54q2-3r2m-9pgm
CVE ID: CVE-2022-46416 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:40:15.290Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://smartstore.naver.com/chacha
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://smartstore.naver.com/chachablues/products/6617613337 - https://smartstore.naver.com/hancomawesome-tech/products/5367473135 - https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-4xx4-r27p-wcrv
CVE ID: CVE-2022-46419 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:39.423Z Description: No description available.
CVE ID: CVE-2022-46421 State: PUBLISHED Published: 2022-12-20T10:20:39.431Z Last Updated: 2025-04-16T18:10:28.787Z Vendors: Apache Software Foundation Products: Apache Airflow Hive Provider Problem Types: CWE-77 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/28101 - https://lists.apache.org/thread/09twdoyoybldlfj5gvk0qswtofh0rmp4
CVE ID: CVE-2022-46422 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:25:22.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1bFKBWwi
CVE ID: CVE-2022-46423 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:23:40.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v1.2.3.7 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BktKl8ZD
lnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BktKl8ZDo
CVE ID: CVE-2022-46424 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:17:37.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40slASVrz_
ontainer: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj
CVE ID: CVE-2022-46428 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:17:16.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj
CVE ID: CVE-2022-46430 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:52:34.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJxlw2Pwi
CVE ID: CVE-2022-46432 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:51:29.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v3.12.20 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1V
ent: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1Vgv1uwo
CVE ID: CVE-2022-46434 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:48:34.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/rJl69Icws
CVE ID: CVE-2022-46435 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:48:02.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/press/security-advisory/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SyvnlO9Pi
CVE ID: CVE-2022-46438 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:11:27.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/ni4n/yesa2m/fem0pgtvgogay3lv
CVE ID: CVE-2022-46440 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T15:39:11.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/194 - https://github.com/keepinggg/poc
CVE ID: CVE-2022-46442 State: PUBLISHED Published: 2022-12-27T00:00:00.000Z Last Updated: 2025-04-11T14:59:49.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/f2b311374de4b4cec1dc22433d38c92a
CVE ID: CVE-2022-46443 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:11:02.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=Dmjk6uOU8vY - https://yuyudhn.github.io/CVE-2022-46443/
CVE ID: CVE-2022-46449 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-09T15:43:02.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MusicPlayerDaemon/MPD/issues/1676
CVE ID: CVE-2022-46456 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:25:40.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392814
CVE ID: CVE-2022-46457 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:23:11.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392809
CVE ID: CVE-2022-46463 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:07:27.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lanqingaa/123/blob/main/README.md - https://github.com/lanqingaa/123/tree/bb48caa844d88b0e41e69157f2a2734311abf02d - https://github.com/Vad1mo
CVE ID: CVE-2022-46464 State: REJECTED Published: N/A Last Updated: 2023-03-10T00:00:00 Description: No description available.
CVE ID: CVE-2022-46471 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:06:41.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter at /healthcare/Admin/consulting_detail.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dreamwonly/bug_report/blob/main/vendors/janobe/Online%20Health%20Care%20System/SQLi-1.md
CVE ID: CVE-2022-46472 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:39:20.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MAO-qi/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-1.md
CVE ID: CVE-2022-46475 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-03T19:05:03.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Insight8991/iot/blob/main/DIR-645%20genacgi%20Stack%20overflow.md
CVE ID: CVE-2022-46476 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T18:34:18.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Insight8991/iot/blob/main/dir859%20Command%20Execution%20Vulnerability.md
CVE ID: CVE-2022-46478 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:04:03.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WeiYe-Jing/datax-web/issues/587
CVE ID: CVE-2022-46480 State: PUBLISHED Published: 2023-12-04T00:00:00 Last Updated: 2024-08-03T14:31:46.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to sniff the unlock code and unlock the device whilst within Bluetooth range. Additional Analyst Notes: - CVE Program Container: References: - https://www.researchgate.net/publication/375759408_Technical_Report_-_CVE-2022-46480_CVE-2023-26941_CVE-2023-26942_and_CVE-2023-26943#fullTextFileContent - https://arxiv.org/abs/2312.00021
CVE ID: CVE-2022-46484 State: PUBLISHED Published: 2023-08-02T00:00:00 Last Updated: 2024-10-17T18:28:19.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WodenSec/CVE-2022-46484