Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38649 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:35:58.414Z Vendors: Apache Software Foundation Products: Apache Airflow Pinot Provider, Apache Airflow Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airflow Pinot Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Apache Airflow Pinot Provider is installed (Apach
.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Apache Airflow Pinot Provider is installed (Apache Airflow Pinot Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pinot Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/27641 - https://lists.apache.org/thread/033o1gbc4ly6dpd2xf1o201v56fbl4dz
CVE ID: CVE-2022-38650 State: PUBLISHED Published: 2022-11-12T00:00:00 Last Updated: 2024-08-03T11:02:14.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server process. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cyber.gov.au/acsc/view-all-content
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cyber.gov.au/acsc/view-all-content/alerts/multiple-vulnerabilities-vmware-vrealize-hyperic-monitoring-and-performance-management-product
CVE ID: CVE-2022-38651 State: PUBLISHED Published: 2022-11-12T00:00:00.000Z Last Updated: 2025-05-01T13:34:12.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to bypass some authentication requirements when issuing requests to Hyperic Server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cyber.gov.au/acsc/view-all-content/alerts/multiple-vulnerabilities-vmware-vrealize-hyperic-monitoring-and-perf
tps://www.cyber.gov.au/acsc/view-all-content/alerts/multiple-vulnerabilities-vmware-vrealize-hyperic-monitoring-and-performance-management-product
CVE ID: CVE-2022-38652 State: PUBLISHED Published: 2022-11-12T00:00:00 Last Updated: 2024-08-03T11:02:13.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent process (often SYSTEM on Windows platforms). NOTE: prior exploitation of CVE-2022-38650 results in the disclosure of the authentication material required to exploit this vulnerability. NOTE: This vulnerability only affects products th
of the authentication material required to exploit this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cyber.gov.au/acsc/view-all-content/alerts/multiple-vulnerabilities-vmware-vrealize-hyperic-monitoring-and-performance-management-product
CVE ID: CVE-2022-38653 State: PUBLISHED Published: 2022-12-15T20:56:55.103Z Last Updated: 2025-04-18T14:56:02.038Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: HCL Software Products: HCL Digital Experience Problem Types: n/a Description: In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102141
CVE ID: CVE-2022-38654 State: PUBLISHED Published: 2022-11-04T20:19:37.257Z Last Updated: 2025-05-02T18:33:33.783Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: HCL Domino Problem Types: CWE-200 Description: HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_articl
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101017
CVE ID: CVE-2022-38655 State: PUBLISHED Published: 2022-12-20T04:51:01.413Z Last Updated: 2025-04-16T14:57:07.643Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: HCL Software Products: BigFix WebUI Problem Types: n/a Description: BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102140
CVE ID: CVE-2022-38656 State: PUBLISHED Published: 2022-11-04T20:58:47.868Z Last Updated: 2025-05-02T18:35:00.618Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: HCL Software Products: HCL Commerce Problem Types: n/a Description: HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101265
CVE ID: CVE-2022-38657 State: PUBLISHED Published: 2023-02-02T21:17:29.565Z Last Updated: 2025-03-26T14:58:17.649Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: HCL Software Products: Leap Problem Types: n/a Description: An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097201
CVE ID: CVE-2022-38658 State: PUBLISHED Published: 2022-12-22T18:52:52.599Z Last Updated: 2025-04-15T14:34:43.154Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:H) Vendors: HCL Software Products: BigFix Server Automation Problem Types: n/a Description: BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102117
CVE ID: CVE-2022-38659 State: PUBLISHED Published: 2022-12-17T18:44:57.327Z Last Updated: 2025-04-17T15:08:02.457Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: HCL Software Products: BigFix Platform Problem Types: n/a Description: In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102049
CVE ID: CVE-2022-38660 State: PUBLISHED Published: 2022-11-04T19:57:02.979Z Last Updated: 2025-05-02T18:32:49.631Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: HCL Software Products: HCL Domino Problem Types: CWE-352 Description: HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101037
CVE ID: CVE-2022-38661 State: PUBLISHED Published: 2022-11-04T20:47:16.299Z Last Updated: 2025-05-02T18:34:25.692Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HCL Software Products: HCL Workload Automation Problem Types: n/a Description: HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100939
CVE ID: CVE-2022-38662 State: PUBLISHED Published: 2022-12-15T20:36:54.482Z Last Updated: 2025-04-18T15:58:02.771Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: HCL Digital Experience Problem Types: n/a Description: In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102141
CVE ID: CVE-2022-38663 State: PUBLISHED Published: 2022-08-23T16:45:16 Last Updated: 2024-08-03T11:02:14.161Z Vendors: Jenkins project Products: Jenkins Git Plugin Description: Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2796 - http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE ID: CVE-2022-38664 State: PUBLISHED Published: 2022-08-23T16:45:31 Last Updated: 2024-08-03T11:02:14.355Z Vendors: Jenkins project Products: Jenkins Job Configuration History Plugin Description: Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure job names. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2765 - http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE ID: CVE-2022-38665 State: PUBLISHED Published: 2022-08-23T16:45:45 Last Updated: 2024-08-03T11:02:14.603Z Vendors: Jenkins project Products: Jenkins CollabNet Plugins Plugin Description: Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2157 - http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE ID: CVE-2022-38666 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T16:04:56.537Z Vendors: Jenkins project Products: Jenkins NS-ND Integration Performance Publisher Plugin Description: Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificate and hostname validation for several features. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2910%20%282%29 - http://www.openwall.com/lists/oss-security/2022/11/15/4
CVE ID: CVE-2022-38667 State: PUBLISHED Published: 2022-08-22T19:07:43 Last Updated: 2024-08-03T11:02:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. The HTTP parser supports HTTP pipelining, but the asynchronous Connection layer is unaware of HTTP pipelining. Specifically, the Connection layer is unaware that it has begun processing a later request before it has finished processing an earlier request. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/372.html - https://github.com/CrowCpp/C
s: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/372.html - https://github.com/CrowCpp/Crow/pull/524 - https://github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38667.md - https://gynvael.coldwind.pl/?id=753
CVE ID: CVE-2022-38668 State: PUBLISHED Published: 2022-08-22T19:06:02 Last Updated: 2024-08-03T11:02:14.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CrowCpp/Crow/pull/523 - https://gynvael.coldwind.pl/?id=752 - https://github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38668.md
CVE ID: CVE-2022-38669 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:47:24.374Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38670 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T19:24:28.462Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38671 State: PUBLISHED Published: 2022-10-14T00:00:00 Last Updated: 2024-08-03T11:02:14.221Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-126 Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38672 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:22:48.619Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-121 Description: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38673 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:21:51.112Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-126 Description: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38674 State: PUBLISHED Published: 2023-02-06T05:27:30.212Z Last Updated: 2025-03-26T13:24:06.044Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-38675 State: PUBLISHED Published: 2023-02-06T05:27:29.217Z Last Updated: 2025-03-26T13:25:26.725Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-38676 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:20:39.716Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-787 Description: In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38677 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:18:06.971Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-400 Description: In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38678 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:17:41.846Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-38679 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:16:44.971Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-400 Description: In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738
CVE ID: CVE-2022-38680 State: PUBLISHED Published: 2023-02-06T05:27:31.771Z Last Updated: 2025-03-26T13:22:37.917Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-38681 State: PUBLISHED Published: 2023-02-06T05:27:33.757Z Last Updated: 2025-03-26T18:48:50.102Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-38682 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:16:33.400Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-38683 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:14:52.508Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-38684 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:13:52.159Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001