Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ess violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.se.com/us/en/download/document/SEVD-2022-221-02/
CVE ID: CVE-2022-37302 State: PUBLISHED Published: 2022-09-13T09:35:12 Last Updated: 2024-08-03T10:29:20.575Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Schneider Electric Products: EcoStruxure Control Expert Problem Types: CWE-119 Description: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Control Expert software when an incorrect project file is opened. Affected Products: EcoStruxure Control Expert(V15.1 HF001 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/us/en/download/document/SEVD-2022-221-03/
CVE ID: CVE-2022-37303 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-37304 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-37305 State: PUBLISHED Published: 2022-08-24T05:05:40 Last Updated: 2024-08-03T10:29:20.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Keyless Entry (RKE) receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely. Additional Analyst Notes: - CVE Program Container: References: - https://www.blackhat.com/us-22/briefings/schedule/#rollback---a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-271
briefings/schedule/#rollback---a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-27185 - https://medium.com/codex/rollback-a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-df5f99ba9490 - https://www.youtube.com/playlist?list=PLYodcy84oQL1gxwiuRm13xRXxTQL9cO5t - https://www.pcmag.com/news/is-your-car-key-fob-vulnerable-to-this-simple-replay-attack - https://hackaday.com/2022/08/17/rollback-breaks-into-your-car/
CVE ID: CVE-2022-37306 State: PUBLISHED Published: 2023-04-16T00:00:00.000Z Last Updated: 2025-02-06T17:13:42.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html
CVE ID: CVE-2022-37307 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:44:24.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37308 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:43:15.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37309 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:42:07.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37310 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:38:35.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#!!&app=io.ox/files&cap= URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37311 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:36:38.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37312 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:35:39.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37313 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:33:40.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-37315 State: PUBLISHED Published: 2022-08-01T21:53:26 Last Updated: 2024-08-03T10:29:20.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/graphql-go/graphql/issues/637
CVE ID: CVE-2022-37316 State: PUBLISHED Published: 2022-08-25T22:49:00 Last Updated: 2024-08-03T10:29:20.639Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 (6.10.0.3.1) is also a fixed release. Additional Analyst Notes: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/security-advisories/archer-update-for-improper-access-c
es: - https://archerirm.com - https://www.archerirm.community/t5/security-advisories/archer-update-for-improper-access-control/ta-p/682059
CVE ID: CVE-2022-37317 State: PUBLISHED Published: 2022-08-25T22:42:47 Last Updated: 2024-08-03T10:29:20.811Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious code in the context of the web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases. Additional Analyst Notes: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/securi
Analyst Notes: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060
CVE ID: CVE-2022-37318 State: PUBLISHED Published: 2022-08-25T22:44:16 Last Updated: 2024-08-03T10:29:20.783Z Severity: HIGH (CVSS 7 CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then reflected to the victim and gets executed by the web browser in the context of the vulnerable web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4
d gets executed by the web browser in the context of the vulnerable web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases. Additional Analyst Notes: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060
CVE ID: CVE-2022-37325 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:38:48.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://downloads.asterisk.org/pub/security/AST-2022-007.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00029.html - https://www.debian.org/security/2023/dsa-5358
CVE ID: CVE-2022-37326 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T19:12:59.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#docker-desktop-460 - https://www.cyberark.com/resources/threat-research-blog/breaking-docke
r.com/desktop/release-notes/#docker-desktop-460 - https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-2
CVE ID: CVE-2022-37327 State: PUBLISHED Published: 2023-05-10T13:16:47.728Z Last Updated: 2025-01-27T18:08:56.094Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: n/a Products: Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC
UC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged Problem Types: information disclosure, CWE-20 Description: Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Comput
C Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2022-37328 State: PUBLISHED Published: 2022-09-23T14:23:39.991Z Last Updated: 2025-02-20T20:03:29.573Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: Themes Awesome Products: History Timeline (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in Themes Awesome History Timeline plugin <= 1.0.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/timeline-awesome/wordpress-history-timeline-plugin-1-0-5-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://
wordpress-history-timeline-plugin-1-0-5-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/timeline-awesome/
CVE ID: CVE-2022-37329 State: PUBLISHED Published: 2023-02-16T20:00:09.070Z Last Updated: 2025-01-27T18:19:16.309Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro and Standard Edition software Problem Types: escalation of privilege Description: Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html
CVE ID: CVE-2022-37330 State: PUBLISHED Published: 2022-09-23T13:33:42.058Z Last Updated: 2025-02-20T20:04:43.151Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: WHA Products: WHA Crossword (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA Crossword plugin <= 1.1.10 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wha-crossword/ - https://patchstack.com/database/vulnerability/wha-crossword/wordpress-wha-crossword-plugin-1-1-10-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-37331 State: PUBLISHED Published: 2023-07-21T20:25:38.616Z Last Updated: 2024-08-03T10:29:20.942Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Open Babel Products: Open Babel Problem Types: CWE-119 Description: An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-202
Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1672
CVE ID: CVE-2022-37332 State: PUBLISHED Published: 2022-11-21T16:05:36.155Z Last Updated: 2025-04-15T18:40:12.492Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted,
ng the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1602
CVE ID: CVE-2022-37333 State: PUBLISHED Published: 2022-08-24T08:40:18 Last Updated: 2024-08-03T10:29:20.932Z Vendors: Kajitori Co.,Ltd Products: Exment Problem Types: SQL Injection Description: SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://exment.net/docs/#/weakness/20220817 - https://exment.net/docs/#/release_note?id=v503-20220817 - https://jvn.jp/en/jp/JVN46239102/index
s/#/weakness/20220817 - https://exment.net/docs/#/release_note?id=v503-20220817 - https://jvn.jp/en/jp/JVN46239102/index.html
CVE ID: CVE-2022-37334 State: PUBLISHED Published: 2022-11-11T15:48:54.894Z Last Updated: 2025-02-05T15:28:32.518Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards Problem Types: escalation of privilege Description: Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory
ogram Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2022-37335 State: PUBLISHED Published: 2022-09-09T14:40:07.270Z Last Updated: 2025-02-20T20:06:03.209Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: WHA Products: Word Search Puzzles game (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in WHA's Word Search Puzzles game plugin <= 2.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wha-wordsearch/wordpress-word-search-puzzles-game-plugin-2-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - htt
dpress-word-search-puzzles-game-plugin-2-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/wha-wordsearch/
CVE ID: CVE-2022-37336 State: PUBLISHED Published: 2023-08-11T02:37:18.544Z Last Updated: 2024-10-02T13:27:03.292Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
CVE ID: CVE-2022-37337 State: PUBLISHED Published: 2023-03-21T17:41:26.101Z Last Updated: 2025-02-26T16:12:07.056Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Netgear Products: Orbi Router RBR750 Problem Types: CWE-78 Description: A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1596
am Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1596 - https://kb.netgear.com/000065417/Security-Advisory-for-Command-Injection-on-Some-Orbi-WiFi-Systems-PSV-2022-0187
CVE ID: CVE-2022-37338 State: PUBLISHED Published: 2022-09-23T13:35:04.708Z Last Updated: 2025-02-20T20:04:35.937Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Blossomthemes Products: Blossom Recipe Maker (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Blossom Recipe Maker plugin <= 1.0.7 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/blossom-recipe-maker/wordpress-blossom-recipe-maker-plugin-1-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulner
m-recipe-maker/wordpress-blossom-recipe-maker-plugin-1-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities - https://wordpress.org/plugins/blossom-recipe-maker/
CVE ID: CVE-2022-37339 State: PUBLISHED Published: 2022-09-23T13:39:10.675Z Last Updated: 2025-02-20T20:04:29.392Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Fullworks Products: Meet My Team (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Meet My Team plugin <= 2.0.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/meet-my-team/wordpress-meet-my-team-plugin-2-0-5-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/meet-m
-my-team-plugin-2-0-5-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/meet-my-team/#developers
CVE ID: CVE-2022-37340 State: PUBLISHED Published: 2023-02-16T20:00:26.055Z Last Updated: 2025-01-27T18:13:53.436Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT drivers for Windows Problem Types: escalation of privilege Description: Uncontrolled search path in some Intel(R) QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html
CVE ID: CVE-2022-37341 State: PUBLISHED Published: 2024-05-16T20:47:52.449Z Last Updated: 2024-08-03T10:29:20.951Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/