Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33722 State: PUBLISHED Published: 2022-08-05T15:19:49 Last Updated: 2024-08-03T08:09:22.669Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285 Description: Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33723 State: PUBLISHED Published: 2022-08-05T15:13:29 Last Updated: 2024-08-03T08:09:22.626Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-1021 Description: A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33724 State: PUBLISHED Published: 2022-08-05T15:20:33 Last Updated: 2024-08-03T08:09:22.662Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via log. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33725 State: PUBLISHED Published: 2022-08-05T15:15:23 Last Updated: 2024-08-03T08:09:22.643Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-94 Description: A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system privilege. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33726 State: PUBLISHED Published: 2022-08-05T15:20:04 Last Updated: 2024-08-03T08:09:22.588Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-561 Description: Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33727 State: PUBLISHED Published: 2022-08-05T15:13:43 Last Updated: 2024-08-03T08:09:22.608Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-1021 Description: A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33728 State: PUBLISHED Published: 2022-08-05T15:14:21 Last Updated: 2024-08-03T08:09:22.666Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33729 State: PUBLISHED Published: 2022-08-05T15:14:07 Last Updated: 2024-08-03T08:09:22.586Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connected Bluetooth device. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33730 State: PUBLISHED Published: 2022-08-05T15:21:02 Last Updated: 2024-08-03T08:09:22.671Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Description: Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33731 State: PUBLISHED Published: 2022-08-05T15:18:40 Last Updated: 2024-08-03T08:09:22.657Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary components. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33732 State: PUBLISHED Published: 2022-08-05T15:19:08 Last Updated: 2024-08-03T08:09:22.636Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287 Description: Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to PC by unprotected binder call. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08
CVE ID: CVE-2022-33733 State: PUBLISHED Published: 2022-08-05T15:16:07 Last Updated: 2024-08-03T08:09:22.635Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Charm by Samsung Problem Types: CWE-927 Description: Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08
CVE ID: CVE-2022-33734 State: PUBLISHED Published: 2022-08-05T15:16:21 Last Updated: 2024-08-03T08:09:22.808Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Charm by Samsung Problem Types: CWE-927 Description: Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08
CVE ID: CVE-2022-33735 State: PUBLISHED Published: 2022-09-20T19:44:06.000Z Last Updated: 2025-05-28T16:02:04.978Z Vendors: n/a Products: WS7200-10 Problem Types: Password Verification Description: There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220628-01-2eda0853-en
CVE ID: CVE-2022-33736 State: PUBLISHED Published: 2022-07-12T10:06:47 Last Updated: 2024-08-03T08:09:22.656Z Vendors: Siemens Products: Opcenter Quality V13.1, Opcenter Quality V13.2 Problem Types: CWE-303 Description: A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.s
sfully login without credentials. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf
CVE ID: CVE-2022-33737 State: PUBLISHED Published: 2022-07-06T15:09:08 Last Updated: 2024-08-03T08:09:22.660Z Vendors: n/a Products: OpenVPN Access Server Problem Types: CWE-708 Description: The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password Additional Analyst Notes: - CVE Program Container: References: - https://openvpn.net/vpn-server-resources/release-notes/
CVE ID: CVE-2022-33738 State: PUBLISHED Published: 2022-07-06T15:10:33 Last Updated: 2024-08-03T08:09:22.611Z Vendors: n/a Products: OpenVPN Access Server Problem Types: CWE-331 Description: OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal Additional Analyst Notes: - CVE Program Container: References: - https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0
CVE ID: CVE-2022-33739 State: PUBLISHED Published: 2022-06-16T21:25:45 Last Updated: 2024-08-03T08:09:22.687Z Vendors: n/a Products: CA Clarity Problem Types: insecure XML parsing Description: CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20645
CVE ID: CVE-2022-33740 State: PUBLISHED Published: 2022-07-05T12:50:30 Last Updated: 2024-08-03T08:09:22.628Z Vendors: Linux, Xen Products: Linux, xen Problem Types: unknown Description: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backen
CVE ID: CVE-2022-33741 State: PUBLISHED Published: 2022-07-05T12:50:33 Last Updated: 2024-08-03T08:09:22.659Z Vendors: Linux, Xen Products: Linux, xen Problem Types: unknown Description: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backen
CVE ID: CVE-2022-33742 State: PUBLISHED Published: 2022-07-05T12:50:39 Last Updated: 2024-08-03T08:09:22.683Z Vendors: Linux, Xen Products: Linux, xen Problem Types: unknown Description: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backen
CVE ID: CVE-2022-33743 State: PUBLISHED Published: 2022-07-05T12:50:19 Last Updated: 2024-08-03T08:09:22.607Z Vendors: Linux Products: Linux Problem Types: unknown Description: network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be freed. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-405.txt - http://xenbits.xen.org/xsa/advisory-405.html - http://www.openwall.com/lists/oss-security/2022/07/05/5 - https://www.debian.org/security/2022/dsa-5191
CVE ID: CVE-2022-33744 State: PUBLISHED Published: 2022-07-05T12:50:10 Last Updated: 2024-08-03T08:09:22.669Z Vendors: Linux Products: Linux Problem Types: unknown Description: Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.
rvice (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-406.txt - http://xenbits.xen.org/xsa/advisory-406.html - http://www.openwall.com/lists/oss-security/2022/07/05/4 - https://www.debian.org/security/2022/dsa-5191 - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE ID: CVE-2022-33745 State: PUBLISHED Published: 2022-07-26T00:00:00 Last Updated: 2024-08-03T08:09:22.681Z Vendors: Xen Products: xen Problem Types: unknown Description: insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary. Additional Analyst Notes: - CVE Program Container: References: - https:
tion, omitting flushes where such are necessary. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-408.txt - http://xenbits.xen.org/xsa/advisory-408.html - http://www.openwall.com/lists/oss-security/2022/07/26/2 - http://www.openwall.com/lists/oss-security/2022/07/26/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HUFIMNGYP5VQAA6KE3T2I5GW6UP6F7BS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/ - https://www.debian.org/security/2022/dsa-5272
CVE ID: CVE-2022-33746 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T08:09:22.668Z Vendors: Xen Products: xen Problem Types: unknown Description: P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-410.txt - http://xenbits.xen.org/xsa/advisory-410.html - http://www.openwall.com/lists/oss-security/2022/10/11/3 - https://l
txt - http://xenbits.xen.org/xsa/advisory-410.html - http://www.openwall.com/lists/oss-security/2022/10/11/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/ - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-33747 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T08:09:22.675Z Vendors: Xen Products: xen Problem Types: unknown Description: Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings.
. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-409.txt - http://xenbits.xen.org/xsa/advisory-409.html - http://www.openwall.com/lists/oss-security/2022/10/11/5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/ - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-33748 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T08:09:22.688Z Vendors: Xen Products: xen Problem Types: unknown Description: lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, but in respectively opposite order. With suitable timing between the involved grant copy operations this may result in the locking up of a CPU. Additional Analyst Notes: - CVE Program Container:
ved grant copy operations this may result in the locking up of a CPU. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-411.txt - http://xenbits.xen.org/xsa/advisory-411.html - http://www.openwall.com/lists/oss-security/2022/10/11/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/ - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
6VTK5CZZRLWLVVEOUPEQBRHI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-33749 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T08:09:22.664Z Vendors: Xapi Products: Xapi Problem Types: unknown Description: XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-413.txt - http://xenbits.xen.org/xsa/advisory-413.html - http://www.openwall.com/lists/oss-security/2022/10/11/
advisory-413.txt - http://xenbits.xen.org/xsa/advisory-413.html - http://www.openwall.com/lists/oss-security/2022/10/11/4 - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-33750 State: PUBLISHED Published: 2022-06-16T21:20:55 Last Updated: 2024-08-03T08:09:22.629Z Vendors: n/a Products: CA Automic Automation Problem Types: authentication error Description: CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629
CVE ID: CVE-2022-33751 State: PUBLISHED Published: 2022-06-16T21:21:04 Last Updated: 2024-08-03T08:09:22.676Z Vendors: n/a Products: CA Automic Automation Problem Types: insecure memory handling Description: CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629
CVE ID: CVE-2022-33752 State: PUBLISHED Published: 2022-06-16T21:21:17 Last Updated: 2024-08-03T08:09:22.639Z Vendors: n/a Products: CA Automic Automation Problem Types: insufficient input validation Description: CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629
CVE ID: CVE-2022-33753 State: PUBLISHED Published: 2022-06-16T21:21:27 Last Updated: 2024-08-03T08:09:22.662Z Vendors: n/a Products: CA Automic Automation Problem Types: insecure file creation and handling Description: CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629
CVE ID: CVE-2022-33754 State: PUBLISHED Published: 2022-06-16T21:23:34 Last Updated: 2024-08-03T08:09:22.757Z Vendors: n/a Products: CA Automic Automation Problem Types: insufficient input validation Description: CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629