Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33929 State: PUBLISHED Published: 2022-08-10T16:31:24.123698Z Last Updated: 2024-09-17T04:09:04.781Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-79 Description: Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request for
e vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33930 State: PUBLISHED Published: 2022-08-10T16:31:33.490560Z Last Updated: 2024-09-16T20:37:54.123Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-209 Description: Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could potentially exploit this vulnerability, leading to the disclosure of certain sensitive information. The attacker may be able to use the exposed information to access and further vulnerability research. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/00
y research. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33931 State: PUBLISHED Published: 2022-08-10T16:31:39.580028Z Last Updated: 2024-09-16T22:29:38.782Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multi
: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33932 State: PUBLISHED Published: 2022-08-22T16:51:17.276222Z Last Updated: 2024-09-16T20:42:04.274Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-419 Description: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated network malicious attacker may potentially exploit this vulnerability, leading to a denial of filesystem services. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powers
: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en
CVE ID: CVE-2022-33933 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-33934 State: PUBLISHED Published: 2023-02-10T19:09:32.998Z Last Updated: 2025-03-24T18:38:35.188Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-79 Description: Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000205618/d
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000205618/dsa-2022-271
CVE ID: CVE-2022-33935 State: PUBLISHED Published: 2022-08-30T20:25:14.165269Z Last Updated: 2024-09-17T02:46:59.350Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Data Protection Advisor Problem Types: CWE-79 Description: Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. E
their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201824/dsa-2022-107-dell-emc-data-protection-advisor-dpa-security-update-for-stored-cross-site-scripting-vulnerability
CVE ID: CVE-2022-33936 State: PUBLISHED Published: 2022-07-07T22:05:17.456375Z Last Updated: 2024-09-17T02:57:19.617Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Cloud Mobility for Dell Storage Problem Types: Other Description: Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201258/dsa-2022-182-cloud-mobility-for-
CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201258/dsa-2022-182-cloud-mobility-for-dell-emc-storage-security-update-for-a-path-traversal-rce-vulnerability
CVE ID: CVE-2022-33937 State: PUBLISHED Published: 2022-10-12T19:25:47.448Z Last Updated: 2025-05-16T13:45:06.783Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: GeoDrive Problem Types: CWE-23 Description: Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive service: NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000203632
CVE ID: CVE-2022-33938 State: PUBLISHED Published: 2022-10-25T16:33:58.055Z Last Updated: 2025-04-15T18:45:24.390Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-134 Description: A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted XCMD can lead to memory corruption, information disclosure and denial of service. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
alicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1584
CVE ID: CVE-2022-33939 State: PUBLISHED Published: 2022-08-16T07:00:46 Last Updated: 2024-08-03T08:16:15.879Z Vendors: Yokogawa Electric Corporation Products: CENTUM VP / CS 3000 controller FCS Problem Types: Denial-of-service (DoS) Description: CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/33029/
ed product. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf - https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf - https://jvn.jp/vu/JVNVU94343729/index.html
CVE ID: CVE-2022-33940 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:52.871Z Description: No description available.
CVE ID: CVE-2022-33941 State: PUBLISHED Published: 2022-09-08T07:10:41 Last Updated: 2024-08-03T08:16:15.908Z Vendors: Alfasado Inc. Products: PowerCMS XMLRPC API Problem Types: OS Command Injection Description: PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as follows: PowerCMS 6.021 and earlier (PowerCMS 6 Series), PowerCMS 5.21 and earlier (PowerCMS 5 Series), and PowerCMS 4.51 and earlier (PowerCMS 4 Series). Note that all versions of PowerCMS 3
and earlier (PowerCMS 5 Series), and PowerCMS 4.51 and earlier (PowerCMS 4 Series). Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.powercms.jp/news/xmlrpc-api-provision-202208.html - https://jvn.jp/en/jp/JVN76024879/index.html
CVE ID: CVE-2022-33942 State: PUBLISHED Published: 2022-11-11T15:48:43.742Z Last Updated: 2025-02-05T20:52:11.139Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DCM software Problem Types: escalation of privilege Description: Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00713.html
CVE ID: CVE-2022-33943 State: PUBLISHED Published: 2022-07-27T16:22:13.162Z Last Updated: 2025-02-20T20:14:49.755Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Nico Amarilla Products: BxSlider WP (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor or higher user role) Cross-Site Scripting (XSS) vulnerability in Nico Amarilla's BxSlider WP plugin <= 2.0.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/bxslider-wp/#developers - https://patchstack.com/database/vulnerability/bxslider-wp/wordpress-bxslider-wp-plugin-2-0-0-authenticated-cross-site
- https://patchstack.com/database/vulnerability/bxslider-wp/wordpress-bxslider-wp-plugin-2-0-0-authenticated-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-33944 State: PUBLISHED Published: 2022-07-20T15:24:26.564Z Last Updated: 2025-04-16T16:14:59.125Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: MiCODUS Products: MV720 Problem Types: CWE-639 Description: The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-200-01
CVE ID: CVE-2022-33945 State: PUBLISHED Published: 2023-11-14T19:05:08.859Z Last Updated: 2024-08-14T20:01:25.503Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server board and Intel(R) Server System BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) Server board and Intel(R) Server System BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html
CVE ID: CVE-2022-33946 State: PUBLISHED Published: 2023-02-16T20:00:13.217Z Last Updated: 2025-01-27T18:17:51.641Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L) Vendors: n/a Products: Intel(R) SUR software Problem Types: escalation of privilege Description: Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html
CVE ID: CVE-2022-33947 State: PUBLISHED Published: 2022-08-04T17:46:34.893432Z Last Updated: 2024-09-16T23:10:29.522Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: F5 Products: BIG-IP DNS Problem Types: CWE-502 Description: In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface (TMUI) that allows an authenticated attacker with at least operator role privileges to cause the Tomcat process to restart and perform unauthorized DNS requests and operations through undisclosed requests. Note: Software versions
ss to restart and perform unauthorized DNS requests and operations through undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K38893457
CVE ID: CVE-2022-33948 State: PUBLISHED Published: 2022-07-04T01:50:49 Last Updated: 2024-08-03T08:16:15.975Z Vendors: KDDI CORPORATION Products: HOME SPOT CUBE2 Problem Types: OS Command Injection Description: HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/ - https://jvn.jp/en/jp/JVN41017328/index.html
CVE ID: CVE-2022-33949 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:54.133Z Description: No description available.
CVE ID: CVE-2022-33953 State: PUBLISHED Published: 2022-06-24T15:35:30.954053Z Last Updated: 2024-09-16T22:50:38.667Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:P/C:H/S:U/A:N/AC:L/I:N/PR:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected access tokens. IBM X-Force ID: 229198. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229198
CVE ID: CVE-2022-33954 State: PUBLISHED Published: 2024-12-19T00:44:55.747Z Last Updated: 2024-12-19T16:38:49.868Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Robotic Process Automation Problem Types: CWE-522 Description: IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6608458
CVE ID: CVE-2022-33955 State: PUBLISHED Published: 2022-08-01T15:40:24.074367Z Last Updated: 2024-09-16T20:03:15.121Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:P/C:L/I:L/S:U/AC:L/A:L/UI:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: CICS TX Advanced, CICS TX Standard Problem Types: Gain Access Description: IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack. IBM X-Force ID: 229312. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608186 - https://www.ibm.com/support/pages/node/6608190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229312
CVE ID: CVE-2022-33959 State: PUBLISHED Published: 2023-04-07T13:07:34.479Z Last Updated: 2025-02-10T15:22:17.601Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Sterling Order Management Problem Types: 602 Client-Side Enforcement of Server-Side Security Description: IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6981911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229320
CVE ID: CVE-2022-33960 State: PUBLISHED Published: 2022-07-22T16:40:37.518Z Last Updated: 2025-02-20T20:16:20.572Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: Supsystic Products: Social Share Buttons by Supsystic (WordPress plugin) Problem Types: CWE-89 Description: Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/social-share-buttons-by-supsystic/#developers - https://patchstack.com/database/vulnerability/social-share-buttons-by
ns/social-share-buttons-by-supsystic/#developers - https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-3-multiple-authenticated-sql-injection-sqli-vulnerabilities
CVE ID: CVE-2022-33961 State: PUBLISHED Published: 2023-05-10T09:12:06.268Z Last Updated: 2025-01-09T15:19:14.819Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: WaspThemes Products: Visual CSS Style Editor Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WaspThemes Visual CSS Style Editor plugin <= 7.5.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yellow-pencil-visual-theme-customizer/wordpress-visual-css-style-editor-plugin-7-5-8-auth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-33962 State: PUBLISHED Published: 2022-08-04T17:46:48.341992Z Last Updated: 2024-09-17T00:36:38.654Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-269 Description: In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an attacker to bypass the access control restrictions for a self IP address, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: Ref
h have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K80970653
CVE ID: CVE-2022-33963 State: PUBLISHED Published: 2023-05-10T13:17:20.326Z Last Updated: 2025-01-24T17:46:31.123Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: software installer for Intel(R) Unite(R) Client software for Windows Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/se
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00782.html
CVE ID: CVE-2022-33964 State: PUBLISHED Published: 2023-02-16T20:00:10.838Z Last Updated: 2025-01-27T18:18:41.410Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) SUR software Problem Types: escalation of privilege Description: Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html
CVE ID: CVE-2022-33965 State: PUBLISHED Published: 2022-07-25T14:01:28.353Z Last Updated: 2025-02-20T20:15:19.644Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: Osamaesh Products: WP Visitor Statistics (WordPress plugin) Problem Types: CWE-89 Description: Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-stats-manager/#developers - https://patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-visitor-statistics-plugin-5-7-multiple-unauthenticated-
chstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-visitor-statistics-plugin-5-7-multiple-unauthenticated-sql-injection-sqli-vulnerabilities
CVE ID: CVE-2022-33966 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:55.362Z Description: No description available.
CVE ID: CVE-2022-33967 State: PUBLISHED Published: 2022-07-20T06:15:22.000Z Last Updated: 2025-11-03T19:27:07.915Z Vendors: DENX Software Engineering Products: U-Boot Problem Types: Denial-of-service (DoS) Description: squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.denx.de/project/u-boot/ - https://lists.denx.de/pipermail/u-boot/2022-June/487467.html - https:
eferences: - https://www.denx.de/project/u-boot/ - https://lists.denx.de/pipermail/u-boot/2022-June/487467.html - https://source.denx.de/u-boot/u-boot/-/commit/7f7fb9937c6cb49dd35153bd6708872b390b0a44 - https://jvn.jp/en/vu/JVNVU97846460/index.html