Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26482 State: PUBLISHED Published: 2022-07-17T22:04:32 Last Updated: 2024-08-03T05:03:32.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.poly.com/us/en/support/security-center - https://sec-consult.com/de/vulnerability-lab/advisory/poly-eagleeye-director-ii-kritische-schwachstellen/ - https://sec-consult.com/vulnerability-lab/advisory/critical-vulnerabilities-poly-eagleeye-director-ii/
CVE ID: CVE-2022-26483 State: PUBLISHED Published: 2022-03-04T18:23:11 Last Updated: 2024-08-03T05:03:32.968Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting (XSS) vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP GET parameter (which reflect the user input without sanitization). Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/
r input without sanitization). Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-002
CVE ID: CVE-2022-26484 State: PUBLISHED Published: 2022-03-04T18:23:26 Last Updated: 2024-08-03T05:03:32.801Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via Directory Traversal. By manipulating the resource name in GET requests referring to files with absolute paths, it is possible to access arbitrary files stored on the
urce name in GET requests referring to files with absolute paths, it is possible to access arbitrary files stored on the filesystem, including application source code, configuration files, and critical system files. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-002
CVE ID: CVE-2022-26485 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-10-21T23:15:29.432Z Vendors: Mozilla Products: Firefox, Firefox ESR, Firefox for Android, Thunderbird, Focus Problem Types: Use-after-free in XSLT parameter processing Description: Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advis
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1758062
CVE ID: CVE-2022-26486 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-10-21T23:15:29.274Z Vendors: Mozilla Products: Firefox, Firefox ESR, Firefox for Android, Thunderbird, Focus Problem Types: Use-after-free in WebGPU IPC Framework Description: An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/s
3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1758070
CVE ID: CVE-2022-26487 State: REJECTED Published: 2022-03-06T02:03:15 Last Updated: 2022-03-09T15:36:42 Description: No description available.
CVE ID: CVE-2022-26488 State: PUBLISHED Published: 2022-03-07T17:26:04 Last Updated: 2024-08-03T05:03:32.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.
H, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2. Additional Analyst Notes: - CVE Program Container: References: - https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/ - https://security.netapp.com/advisory/ntap-20220419-0005/
CVE ID: CVE-2022-26490 State: PUBLISHED Published: 2022-03-06T03:58:33 Last Updated: 2024-08-03T05:03:32.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/4fbcc1a4cb20fe26ad0225679c536c80f1648221 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BG4J46EMFPDD5QHYXDUI3PJCZQ7HQAZR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists
t.org/message/BG4J46EMFPDD5QHYXDUI3PJCZQ7HQAZR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C5AUUDGSDLGYU7SZSK4PFAN22NISQZBT/ - https://security.netapp.com/advisory/ntap-20220429-0004/ - https://www.debian.org/security/2022/dsa-5127 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-26491 State: PUBLISHED Published: 2022-05-31T04:25:23 Last Updated: 2024-08-03T05:03:32.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968. Additional Analyst Notes: - CVE Program Container: References: - https://mail.jabber.org
s is similar to CVE-2022-24968. Additional Analyst Notes: - CVE Program Container: References: - https://mail.jabber.org/pipermail/standards/2022-February/038759.html - https://github.com/xsf/xeps/pull/1158 - https://developer.pidgin.im/wiki/FullChangeLog - https://pidgin.im/about/security/advisories/cve-2022-26491/ - https://keep.imfreedom.org/pidgin/pidgin/rev/13cdb7956bdc - https://lists.debian.org/debian-lts-announce/2022/06/msg00005.html
CVE ID: CVE-2022-26493 State: PUBLISHED Published: 2022-06-03T16:00:14 Last Updated: 2024-08-03T05:03:32.967Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Xecuify Products: Drupal 8 miniOrange SAML SP, Drupal 9 miniOrange SAML SP, Drupal 7 miniOrange SAML SP Problem Types: Authentication Bypass via SAML Manipulation Description: Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability. An attacker with access to a HTTP-request intercepting method is able to bypass authentication and authorization by removing the SAML Assertion Signature - impersonating existing users
able to bypass authentication and authorization by removing the SAML Assertion Signature - impersonating existing users and existing roles, including administrative users/roles. This vulnerability is not mitigated by configuring the module to enforce signatures or certificate checks. Xecurify recommends updating miniOrange modules to their most recent versions. This vulnerability is present in paid versions of the miniOrange Drupal SAML SP product affecting Drupal 7, 8, and 9. Additional Analyst Notes: - CVE Program Container: References: - https://rafarmerjr1.github.io/2022/06/13/SAML-miniOrange.html
CVE ID: CVE-2022-26494 State: PUBLISHED Published: 2022-03-21T14:24:03 Last Updated: 2024-11-18T17:00:41.752061 Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name. Additional Analyst Notes: - CVE Program Container: References: - https://docs.keyfactor.com/signserver/ - https://support.keyfactor.com/hc/en-us/articles/15618125602715-Security-Advisory-SignServer-Cross-site-scripting-issue-in-Admin-Web
CVE ID: CVE-2022-26495 State: PUBLISHED Published: 2022-03-06T00:00:00 Last Updated: 2024-08-03T05:03:32.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/nbd/2022/01/msg00037.html - https://sourceforge.net/projects/nbd/files/nbd/ - https://lists.deb
https://lists.debian.org/nbd/2022/01/msg00037.html - https://sourceforge.net/projects/nbd/files/nbd/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00014.html - https://www.debian.org/security/2022/dsa-5100 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZHR73XMAJTCFGKUZRXVTZKCK2X3IFNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/ - https://security.gentoo.org/glsa/202402-10
CVE ID: CVE-2022-26496 State: PUBLISHED Published: 2022-03-06T00:00:00 Last Updated: 2024-08-03T05:03:32.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/nbd/2022/01/msg00037.html - https://sourceforge.net/projects/nbd/files/nbd/ - https://lists.debian.org/nbd/2022/01/msg00036.html - https://www.debian.org/security/2022/dsa-5100 - https://list
nbd/ - https://lists.debian.org/nbd/2022/01/msg00036.html - https://www.debian.org/security/2022/dsa-5100 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZHR73XMAJTCFGKUZRXVTZKCK2X3IFNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/ - http://packetstormsecurity.com/files/172148/Shannon-Baseband-fmtp-SDP-Attribute-Memory-Corruption.html - https://security.gentoo.org/glsa/202402-10
CVE ID: CVE-2022-26497 State: PUBLISHED Published: 2022-06-02T00:00:00 Last Updated: 2024-08-03T05:03:32.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed in the browser of the victim in the "Share room access" dialog if the victim has shared access to the particular room with the attacker previously. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigbluebutton/greenlight/blob/master/app/assets/javascripts/room.js#L352 - https://www.mgm-sp.com/en/cve-2022-26497-bigbluebutton-greenlight-xss/ - http://pack
p/assets/javascripts/room.js#L352 - https://www.mgm-sp.com/en/cve-2022-26497-bigbluebutton-greenlight-xss/ - http://packetstormsecurity.com/files/172143/Shannon-Baseband-acfg-pcfg-SDP-Attribute-Memory-Corruption.html
CVE ID: CVE-2022-26498 State: PUBLISHED Published: 2022-04-15T00:00:00 Last Updated: 2024-08-03T05:03:32.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much larger than what one would expect to download, leading to Resource Exhaustion. This is fixed in 16.25.2, 18.11.2, and 19.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.asterisk.org/pub/security/ - https://downloads.asterisk.org/pub/security/AST-2022-001.html - http://packetstormsecurity.com/files/166744/Asterisk-Project-Security
oads.asterisk.org/pub/security/AST-2022-001.html - http://packetstormsecurity.com/files/166744/Asterisk-Project-Security-Advisory-AST-2022-001.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html - https://www.debian.org/security/2022/dsa-5285 - http://packetstormsecurity.com/files/172139/Shannon-Baseband-chatroom-SDP-Attribute-Memory-Corruption.html
CVE ID: CVE-2022-26499 State: PUBLISHED Published: 2022-04-15T00:00:00 Last Updated: 2024-08-03T05:03:32.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.asterisk.org/pub/security/ - https://downloads.asterisk.org/pub/security/AST-2022-002.html - http://packetstormsecurity.com/files/166745/Asterisk-Project-Security-Advisory-AST-2022-002.html - https://lists
.html - http://packetstormsecurity.com/files/166745/Asterisk-Project-Security-Advisory-AST-2022-002.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html - https://www.debian.org/security/2022/dsa-5285
CVE ID: CVE-2022-26500 State: PUBLISHED Published: 2022-03-17T20:56:44.000Z Last Updated: 2025-10-21T23:15:44.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://veeam.com - https://www.veeam.com/kb4288
CVE ID: CVE-2022-26501 State: PUBLISHED Published: 2022-03-17T20:28:41.000Z Last Updated: 2025-10-21T23:15:44.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://veeam.com - https://www.veeam.com/kb4288
CVE ID: CVE-2022-26502 State: REJECTED Published: 2022-03-18T18:15:20 Last Updated: 2022-04-06T14:37:05 Description: No description available.
CVE ID: CVE-2022-26503 State: PUBLISHED Published: 2022-03-17T16:11:34 Last Updated: 2024-08-03T05:03:32.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://veeam.com - https://www.veeam.com/kb4289
CVE ID: CVE-2022-26504 State: PUBLISHED Published: 2022-03-17T20:48:29 Last Updated: 2024-08-03T05:03:32.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe Additional Analyst Notes: - CVE Program Container: References: - https://veeam.com - https://www.veeam.com/kb4290
CVE ID: CVE-2022-26505 State: PUBLISHED Published: 2022-03-06T00:00:00 Last Updated: 2024-08-03T05:03:32.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/03/03/1 - https://sourceforge.net/p/minidlna/git/ci/c21208508dbc131712281ec5340687e5ae89e940/ - http://www.openwall.com/lists/oss-security/2022/03/06/1 - https://lists.debian.org/debian-lts-announce/2022/04/msg00005.html - https://security.gentoo.org/glsa/202311-12
CVE ID: CVE-2022-26507 State: PUBLISHED Published: 2022-04-14T12:04:26 Last Updated: 2024-08-03T05:03:32.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, or CVE-2021-21830. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://Claroty.com - https://download.s
the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://Claroty.com - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-02
CVE ID: CVE-2022-26508 State: PUBLISHED Published: 2022-11-11T15:48:40.737Z Last Updated: 2025-02-05T20:52:56.345Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) SDP Tool Problem Types: information disclosure Description: Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00710.html
CVE ID: CVE-2022-26509 State: PUBLISHED Published: 2023-02-16T19:59:51.439Z Last Updated: 2025-01-27T18:23:37.010Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) SGX SDK software Problem Types: information disclosure Description: Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00677.html
CVE ID: CVE-2022-26510 State: PUBLISHED Published: 2022-05-12T17:01:48.207Z Last Updated: 2025-04-15T19:02:14.358Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-347 Description: A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.
r: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1495
CVE ID: CVE-2022-26511 State: PUBLISHED Published: 2022-03-17T17:16:05 Last Updated: 2024-08-03T05:03:32.904Z Vendors: KINGSOFT JAPAN, INC. Products: WPS Presentation Problem Types: CWE-427 Description: WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current directory type' DLL loading). Additional Analyst Notes: - CVE Program Container: References: - https://support.kingsoft.jp/support-info/weakness.html - https://jvn.jp/en/jp/JVN21234459/
CVE ID: CVE-2022-26512 State: PUBLISHED Published: 2023-02-16T19:59:45.502Z Last Updated: 2025-01-27T18:25:14.728Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit before version 2022.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.ht
- CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-26513 State: PUBLISHED Published: 2022-11-11T15:48:44.749Z Last Updated: 2025-02-05T20:47:56.987Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) XMM(TM) 7560 Modem software Problem Types: escalation of privilege Description: Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE ID: CVE-2022-26514 State: PUBLISHED Published: 2022-03-29T16:37:12.212Z Last Updated: 2025-04-16T16:35:33.945Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26515 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:16.946Z Description: No description available.