Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27783 State: PUBLISHED Published: 2022-05-06T17:23:46.497Z Last Updated: 2025-04-23T18:27:24.144Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-121 Description: Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in After Effects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
crafted file in After Effects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb22-19.html
CVE ID: CVE-2022-27784 State: PUBLISHED Published: 2022-05-06T17:24:25.494Z Last Updated: 2025-04-23T18:27:17.504Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-121 Description: Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in After Effects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
CVE ID: CVE-2022-27785 State: PUBLISHED Published: 2022-05-11T17:10:19.826062Z Last Updated: 2024-09-16T17:14:10.031Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - htt
action in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-27786 State: PUBLISHED Published: 2022-05-11T17:11:17.335273Z Last Updated: 2024-09-16T16:38:40.402Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - htt
CVE ID: CVE-2022-27787 State: PUBLISHED Published: 2022-05-11T17:12:04.905853Z Last Updated: 2024-09-16T17:58:41.287Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
im must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-27788 State: PUBLISHED Published: 2022-05-11T17:12:56.095599Z Last Updated: 2024-09-17T02:58:01.673Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
CVE ID: CVE-2022-27789 State: PUBLISHED Published: 2022-05-11T17:13:59.728311Z Last Updated: 2024-09-16T22:20:23.182Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refe
es user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-27790 State: PUBLISHED Published: 2022-05-11T17:14:44.242299Z Last Updated: 2024-09-17T00:46:10.123Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - htt
CVE ID: CVE-2022-27791 State: PUBLISHED Published: 2022-05-11T17:15:29.873263Z Last Updated: 2024-09-16T20:31:31.266Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-121 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a stack-based buffer overflow vulnerability due to insecure processing of a font, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file Additional Analyst Notes: - CVE Program Container: Re
es user interaction in that a victim must open a crafted .pdf file Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-27792 State: PUBLISHED Published: 2022-05-11T17:16:11.029286Z Last Updated: 2024-09-16T23:16:54.428Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
CVE ID: CVE-2022-27793 State: PUBLISHED Published: 2022-05-11T17:17:03.882917Z Last Updated: 2024-09-16T23:41:51.590Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
CVE ID: CVE-2022-27794 State: PUBLISHED Published: 2022-05-11T17:17:56.608205Z Last Updated: 2024-09-17T03:49:06.272Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-824 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file Additional Analyst Notes: - CVE Program Containe
equires user interaction in that a victim must open a crafted .pdf file Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-27795 State: PUBLISHED Published: 2022-05-11T17:18:48.317132Z Last Updated: 2024-09-17T00:26:59.660Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refe
CVE ID: CVE-2022-27796 State: PUBLISHED Published: 2022-05-11T17:19:31.046623Z Last Updated: 2024-09-17T03:27:55.026Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refe
CVE ID: CVE-2022-27797 State: PUBLISHED Published: 2022-05-11T17:20:13.978278Z Last Updated: 2024-09-16T22:02:10.705Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-27798 State: PUBLISHED Published: 2022-05-11T17:20:59.435459Z Last Updated: 2024-09-16T23:20:30.600Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
CVE ID: CVE-2022-27799 State: PUBLISHED Published: 2022-05-11T17:21:43.991982Z Last Updated: 2024-09-16T19:21:12.693Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refe
CVE ID: CVE-2022-27800 State: PUBLISHED Published: 2022-05-11T17:22:46.319076Z Last Updated: 2024-09-16T18:56:19.861Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
CVE ID: CVE-2022-27801 State: PUBLISHED Published: 2022-05-11T17:23:46.982154Z Last Updated: 2024-09-17T03:07:48.360Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
CVE ID: CVE-2022-27802 State: PUBLISHED Published: 2022-05-11T17:24:41.039398Z Last Updated: 2024-09-16T20:58:02.479Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
CVE ID: CVE-2022-27803 State: PUBLISHED Published: 2022-07-04T06:55:59 Last Updated: 2024-08-03T05:32:59.982Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-27804 State: PUBLISHED Published: 2022-10-25T16:33:31.178Z Last Updated: 2025-04-15T18:49:08.216Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosi
vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1567
CVE ID: CVE-2022-27805 State: PUBLISHED Published: 2022-10-25T16:33:32.259Z Last Updated: 2025-04-15T18:48:59.125Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-284 Description: An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted network request can lead to arbitrary XCMD execution. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintel
nerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1552
CVE ID: CVE-2022-27806 State: PUBLISHED Published: 2022-05-05T16:29:58.078244Z Last Updated: 2024-09-17T01:36:21.373Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP (Advanced WAF, APM, ASM), BIG-IP Guided Configuration (GC) Problem Types: CWE-77 Description: On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing command injection vulnerabilities in undisclosed URIs in F5
may be able to bypass Appliance mode restrictions, utilizing command injection vulnerabilities in undisclosed URIs in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K68647001
CVE ID: CVE-2022-27807 State: PUBLISHED Published: 2022-07-04T06:56:04 Last Updated: 2024-08-03T05:33:00.362Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-27808 State: PUBLISHED Published: 2023-02-16T20:00:27.113Z Last Updated: 2025-01-27T18:13:27.999Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Ethernet Controller Administrative Tools drivers for Windows Problem Types: escalation of privilege Description: Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/secu
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html
CVE ID: CVE-2022-27810 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T05:32:59.901Z Vendors: Facebook Products: Hermes Problem Types: CWE-674 Description: It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2022-27810
CVE ID: CVE-2022-27811 State: PUBLISHED Published: 2022-03-24T00:00:00 Last Updated: 2024-08-03T05:32:59.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13 - https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262b509f38cee - https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20
CVE ID: CVE-2022-27812 State: PUBLISHED Published: 2022-08-24T00:00:00 Last Updated: 2024-08-03T05:32:59.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2022-009/
CVE ID: CVE-2022-27813 State: PUBLISHED Published: 2023-10-19T09:34:44.148Z Last Updated: 2024-08-03T05:33:00.474Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H/E:F/RL:U/RC:C/CR:X/IR:X/AR:X/MAV:L/MAC:L/MPR:H/MUI:N/MS:C/MC:L/MI:H/MA:H) Vendors: Motorola Products: Mobile Radio Problem Types: CWE-1260 Description: Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the firmwares, an adversary with control over either core can trivially g
res. Since both units are left unconfigured by the firmwares, an adversary with control over either core can trivially gain code execution on the other, by overwriting code located in shared RAM or DDR2 memory regions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-27814 State: PUBLISHED Published: 2022-04-14T16:32:54 Last Updated: 2024-08-03T05:33:00.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waycrate/swhkd/releases - https://www.openwall.com/lists/oss-security/2022/04/14/1
CVE ID: CVE-2022-27815 State: PUBLISHED Published: 2022-03-29T23:21:34 Last Updated: 2024-08-03T05:33:00.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waycrate/swhkd/releases - https://github.com/waycrate/swhkd/commit/e661a4940df78fbb7b52c622ac4ae6a3a7f7d8aa - http://www.openwall.com/lists/oss-security/2022/04/14/1
CVE ID: CVE-2022-27816 State: PUBLISHED Published: 2022-03-30T01:47:18 Last Updated: 2024-08-03T05:33:00.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waycrate/swhkd/releases - https://github.com/waycrate/swhkd/commit/0b620a09605afb815c6d8d8953bbb7a10a8c0575 - http://www.openwall.com/lists/oss-security/2022/04/14/1