Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33755 State: PUBLISHED Published: 2022-06-16T21:23:47 Last Updated: 2024-08-03T08:09:22.681Z Vendors: n/a Products: CA Automic Automation Problem Types: insecure input handling Description: CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629
CVE ID: CVE-2022-33756 State: PUBLISHED Published: 2022-06-16T21:23:58 Last Updated: 2024-08-03T08:09:22.669Z Vendors: n/a Products: CA Automic Automation Problem Types: entropy weakness Description: CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629
CVE ID: CVE-2022-33757 State: PUBLISHED Published: 2022-10-24T21:12:00.000Z Last Updated: 2025-05-07T14:06:42.806Z Vendors: Tenable, Inc. Products: Tenable Nessus Problem Types: Broken Access Control Description: An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2022-11
CVE ID: CVE-2022-33859 State: PUBLISHED Published: 2022-10-28T01:15:03.902Z Last Updated: 2025-05-06T19:40:37.059Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H) Vendors: Eaton Products: Foreseer EPMS Problem Types: CWE-434 Description: A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary files using the file upload feature. This vulnerability is present in versions 4.x, 5.x, 6.x & 7.0 to 7.5. A new version (v7.6) containing the r
oad feature. This vulnerability is present in versions 4.x, 5.x, 6.x & 7.0 to 7.5. A new version (v7.6) containing the remediation has been made available by Eaton and a mitigation has been provided for the affected versions that are currently supported. Customers are advised to update the software to the latest version (v7.6). Foreseer EPMS versions 4.x, 5.x, 6.x are no longer supported by Eaton. Please refer to the End-of-Support notification https://www.eaton.com/in/en-us/catalog/services/foreseer/foreseer-legacy.html . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.eaton.com/us/en-us/company/news-insights/cybersecurity/security-notif
- CISA ADP Vulnrichment: References: - https://www.eaton.com/us/en-us/company/news-insights/cybersecurity/security-notifications.html
CVE ID: CVE-2022-33860 State: REJECTED Published: 2024-11-26T05:08:05.947Z Last Updated: 2024-11-26T05:16:21.365Z Description: No description available.
CVE ID: CVE-2022-33861 State: PUBLISHED Published: 2024-11-25T08:50:04.170Z Last Updated: 2024-11-25T13:57:28.375Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eaton Products: Intelligent Power Protector Problem Types: CWE-345 Description: IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/ETN-VA-2022-1011.pdf
CVE ID: CVE-2022-33862 State: PUBLISHED Published: 2024-11-25T08:54:39.616Z Last Updated: 2024-11-25T13:56:45.587Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Eaton Products: Intelligent Power Protector (IPP) Problem Types: CWE-287 Description: IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/ETN-VA-2022-1011.pdf
CVE ID: CVE-2022-33869 State: PUBLISHED Published: 2023-02-16T18:07:38.200Z Last Updated: 2024-10-23T14:32:10.064Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R) Vendors: Fortinet Products: FortiWAN Problem Types: CWE-78 Description: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-157
CVE ID: CVE-2022-33870 State: PUBLISHED Published: 2022-11-02T00:00:00 Last Updated: 2024-10-25T13:27:09.218Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiTester Problem Types: Execute unauthorized code or commands Description: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-070
CVE ID: CVE-2022-33871 State: PUBLISHED Published: 2023-02-16T18:06:11.661Z Last Updated: 2024-10-23T14:47:25.480Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/p
ions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-164
CVE ID: CVE-2022-33872 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-10-25T13:29:27.553Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiTester Problem Types: Execute unauthorized code or commands Description: An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the underlying shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
r to execute arbitrary command in the underlying shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-237
CVE ID: CVE-2022-33873 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-10-25T13:29:17.401Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiTester Problem Types: Execute unauthorized code or commands Description: An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the underlying shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
cute arbitrary command in the underlying shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-237
CVE ID: CVE-2022-33874 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-10-25T13:29:05.669Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiTester Problem Types: Execute unauthorized code or commands Description: An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the underlying shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
o execute arbitrary command in the underlying shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-237
CVE ID: CVE-2022-33875 State: PUBLISHED Published: 2022-12-06T16:01:04.481Z Last Updated: 2024-10-22T20:51:13.857Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiADC Problem Types: CWE-89 Description: An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-252
CVE ID: CVE-2022-33876 State: PUBLISHED Published: 2022-12-06T16:01:01.740Z Last Updated: 2024-10-22T20:51:21.951Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiADC Problem Types: CWE-20 Description: Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-253
CVE ID: CVE-2022-33877 State: PUBLISHED Published: 2023-06-13T08:41:40.721Z Last Updated: 2024-10-23T14:27:28.404Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiConverter, FortiClientWindows Problem Types: CWE-276 Description: An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder. Additional Anal
h files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-229
CVE ID: CVE-2022-33878 State: PUBLISHED Published: 2022-11-02T00:00:00 Last Updated: 2024-10-22T20:53:05.248Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiClientMac Problem Types: Information disclosure Description: An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/
minal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-246
CVE ID: CVE-2022-33879 State: PUBLISHED Published: 2022-06-27T21:40:10 Last Updated: 2024-08-03T08:09:22.671Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: Regex Denial Of Service Description: The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh - http://www.openwall.com/lists/oss-security/2022/06/27/5 - https://security.net
thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh - http://www.openwall.com/lists/oss-security/2022/06/27/5 - https://security.netapp.com/advisory/ntap-20220812-0004/
CVE ID: CVE-2022-33880 State: PUBLISHED Published: 2022-09-29T18:43:52.000Z Last Updated: 2025-05-20T20:04:19.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/7
CVE ID: CVE-2022-33881 State: PUBLISHED Published: 2022-07-29T15:18:44 Last Updated: 2024-08-03T08:09:22.698Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-bound Read vulnerability Description: Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-a
rent process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0014
CVE ID: CVE-2022-33882 State: PUBLISHED Published: 2022-10-03T15:04:01 Last Updated: 2024-08-03T08:09:22.671Z Vendors: n/a Products: Autodesk desktop app Problem Types: Improper Privilege Management Description: Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop app (ADA). An attacker could leverage this vulnerability to escalate privileges and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0015
CVE ID: CVE-2022-33883 State: PUBLISHED Published: 2022-10-03T14:28:54 Last Updated: 2024-08-03T08:09:22.675Z Vendors: n/a Products: Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Problem Types: Memory Corruption Description: A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/ads
Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019
CVE ID: CVE-2022-33884 State: PUBLISHED Published: 2022-10-03T14:24:47 Last Updated: 2024-08-03T08:09:22.855Z Vendors: n/a Products: utodesk® AutoCAD®, Advance Steel and Civil 3D® Problem Types: Out-of-bound Read Description: Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE ID: CVE-2022-33885 State: PUBLISHED Published: 2022-10-03T14:24:51 Last Updated: 2024-08-03T08:09:22.685Z Vendors: n/a Products: utodesk® AutoCAD®, Advance Steel and Civil 3D® Problem Types: Out-of-bound Write Description: A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE ID: CVE-2022-33886 State: PUBLISHED Published: 2022-10-03T00:00:00 Last Updated: 2024-08-03T08:09:22.659Z Vendors: n/a Products: Autodesk Maya Problem Types: Out-of-bound Write Description: A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an unhandled exception. A malicious actor could leverage this vulnerability to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisori
code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE ID: CVE-2022-33887 State: PUBLISHED Published: 2022-10-03T14:24:56 Last Updated: 2024-08-03T08:09:22.660Z Vendors: n/a Products: utodesk® AutoCAD®, Advance Steel and Civil 3D® Problem Types: Heap based Buffer Overflow Description: A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE ID: CVE-2022-33888 State: PUBLISHED Published: 2022-10-03T14:24:59.000Z Last Updated: 2025-05-20T15:03:36.589Z Vendors: n/a Products: utodesk® AutoCAD®, Advance Steel and Civil 3D® Problem Types: Memory Corruption Description: A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE ID: CVE-2022-33889 State: PUBLISHED Published: 2022-10-03T14:22:14 Last Updated: 2024-08-03T08:09:22.694Z Vendors: n/a Products: Autodesk® Design Review, Autodesk® Advance Steel, Autodesk® Civil 3D® Problem Types: Heap based Overflow Buffer Description: A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021
CVE ID: CVE-2022-33890 State: PUBLISHED Published: 2022-10-03T00:00:00 Last Updated: 2024-08-03T08:09:22.758Z Vendors: n/a Products: Autodesk® Design Review, Problem Types: Memory corruption Description: A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021
CVE ID: CVE-2022-33891 State: PUBLISHED Published: 2022-07-18T00:00:00.000Z Last Updated: 2025-10-21T23:15:38.160Z Vendors: Apache Software Foundation Products: Apache Spark Problem Types: CWE-78 Description: The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on thei
er might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc - http://packetstormsecurity.com/files/168309/Apache-Spark-Unauthenticated-Command-Injection.html - http://www.openwall.com/lists/oss-security/2023/05/02/1
CVE ID: CVE-2022-33892 State: PUBLISHED Published: 2023-02-16T19:59:53.532Z Last Updated: 2025-01-27T18:23:05.088Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus Prime Pro and Standard edition software Problem Types: escalation of privilege Description: Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html
CVE ID: CVE-2022-33893 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:11.694Z Description: No description available.
CVE ID: CVE-2022-33894 State: PUBLISHED Published: 2023-05-10T13:17:14.993Z Last Updated: 2025-02-13T16:32:43.460Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html - https://security.netapp.com/advisory/ntap-20230921-0002/
CVE ID: CVE-2022-33895 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:50.412Z Description: No description available.