Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38051 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2025-01-02T21:27:13.256Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pac
), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Graphics Component Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38051
CVE ID: CVE-2022-38053 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2025-01-02T21:27:43.749Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CV
dditional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38053
CVE ID: CVE-2022-38054 State: PUBLISHED Published: 2022-09-02T07:10:21 Last Updated: 2024-08-03T10:45:51.955Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-384 Description: In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/rsd3h89xdp16rg0ltovx3m7q3ypkxsbb - http://www.openwall.com/lists/oss-security/2022/09/02/1
CVE ID: CVE-2022-38055 State: PUBLISHED Published: 2024-06-21T15:52:07.897Z Last Updated: 2024-08-03T10:45:52.012Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: gVectors Team Products: wpForo Forum Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue affects wpForo Forum: from n/a through 2.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-auth-html-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-38056 State: PUBLISHED Published: 2023-02-16T20:00:28.218Z Last Updated: 2025-01-27T18:12:59.981Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) EMA software Problem Types: escalation of privilege Description: Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00764.html
CVE ID: CVE-2022-38057 State: PUBLISHED Published: 2024-03-25T11:36:57.616Z Last Updated: 2025-04-10T18:30:53.173Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: ThemeHunk Products: Advance WordPress Search Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-reset-vulnerabi
-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-reset-vulnerability?_s_id=cve
CVE ID: CVE-2022-38058 State: PUBLISHED Published: 2022-09-09T14:39:53.949Z Last Updated: 2025-02-20T20:07:27.418Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wpvar.com Products: WP Shamsi (WordPress plugin) Problem Types: CWE-264 Description: Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-shamsi/wordpress-wp-shamsi-plugin-4-1-1-authenticated-plugin-setting-change-vulnerability/_s_id=cve - https://wordpress.org/plugins/wp-shamsi/#developers
CVE ID: CVE-2022-38059 State: PUBLISHED Published: 2022-09-09T14:39:50.809Z Last Updated: 2025-02-20T20:08:36.672Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Alexey Trofimov Products: Access Code Feeder (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Alexey Trofimov's Access Code Feeder plugin <= 1.0.3 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/access-code-feeder/wordpress-access-code-feeder-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability/_s_id=cve - https://wordpress.org/plugins/
access-code-feeder-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability/_s_id=cve - https://wordpress.org/plugins/access-code-feeder/
CVE ID: CVE-2022-38060 State: PUBLISHED Published: 2022-12-21T23:14:33.786Z Last Updated: 2025-05-07T13:57:02.812Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: OpenStack Products: OpenStack Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1589
CVE ID: CVE-2022-38061 State: PUBLISHED Published: 2022-09-23T14:40:08.045Z Last Updated: 2025-02-20T20:02:21.820Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: Apasionados Products: Export Post Info (WordPress plugin) Problem Types: CSV Injection Description: Authenticated (author+) CSV Injection vulnerability in Export Post Info plugin <= 1.2.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/export-post-info/#developers - https://patchstack.com/database/vulnerability/export-post-info/wordpress-export-post-info-plugin-1-2-0-authenticated-csv-injection-vulnerability/_s_id
e/vulnerability/export-post-info/wordpress-export-post-info-plugin-1-2-0-authenticated-csv-injection-vulnerability/_s_id=cve
CVE ID: CVE-2022-38062 State: PUBLISHED Published: 2023-07-17T15:20:52.721Z Last Updated: 2024-09-30T13:08:21.166Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Metagauss Products: Download Theme Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Theme plugin <= 1.0.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/download-theme/wordpress-download-theme-plugin-1-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-38063 State: PUBLISHED Published: 2023-03-16T08:39:48.769Z Last Updated: 2025-01-13T15:51:24.824Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Social Login WP Products: Social Login WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Social Login WP plugin <= 5.0.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/social-login-wp/wordpress-social-login-wp-plugin-5-0-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-38064 State: PUBLISHED Published: 2022-09-09T14:39:56.531029Z Last Updated: 2024-09-16T18:07:49.771Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-305 Description: OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md
CVE ID: CVE-2022-38065 State: PUBLISHED Published: 2022-12-21T23:14:33.786Z Last Updated: 2025-04-15T18:38:04.748Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: OpenStack Products: OpenStack Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1599
CVE ID: CVE-2022-38066 State: PUBLISHED Published: 2023-01-26T21:24:36.877Z Last Updated: 2025-03-05T19:27:57.780Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1615
CVE ID: CVE-2022-38067 State: PUBLISHED Published: 2022-09-09T14:39:55.482Z Last Updated: 2025-02-20T20:06:38.674Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Totalsoft Products: Event Calendar – Calendar (WordPress plugin) Problem Types: CWE-264 Description: Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/calendar-event/wordpress-event-calendar-calendar-plugin-1-4-6-unauthenticated-event-deletion-vulnerability/_s_id=cve - https://wordpress.org/plugins/cal
alendar-calendar-plugin-1-4-6-unauthenticated-event-deletion-vulnerability/_s_id=cve - https://wordpress.org/plugins/calendar-event/
CVE ID: CVE-2022-38068 State: PUBLISHED Published: 2022-09-09T14:39:52.037Z Last Updated: 2025-02-20T20:08:29.050Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Apasionados Products: Export Post Info (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apasionados Export Post Info plugin <= 1.1.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/export-post-info/wordpress-export-post-info-plugin-1-1-0-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://word
press-export-post-info-plugin-1-1-0-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/export-post-info/#developers
CVE ID: CVE-2022-38069 State: PUBLISHED Published: 2022-09-13T14:54:54.113Z Last Updated: 2025-04-16T16:10:11.963Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Contec Health Products: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor Problem Types: CWE-798 Description: Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device parameters Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
modification of device parameters Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01
CVE ID: CVE-2022-38070 State: PUBLISHED Published: 2022-09-09T14:39:52.211Z Last Updated: 2025-02-20T20:08:21.970Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Pop-ups Products: Pop-up (WordPress plugin) Problem Types: CWE-264 Description: Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pop-up-pop-up/wordpress-pop-up-plugin-1-1-5-privilege-escalation-vulnerability/_s_id=cve - https://wordpress.org/plugins/pop-up-pop-up/#developers
CVE ID: CVE-2022-38071 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:44.063Z Description: No description available.
CVE ID: CVE-2022-38072 State: PUBLISHED Published: 2023-04-03T15:07:21.146Z Last Updated: 2025-02-11T15:53:10.185Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: ADMesh, Slic3r Products: ADMesh, libslic3r Problem Types: CWE-118 Description: An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_repor
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1594 - https://github.com/admesh/admesh/commit/5fab257268a0ee6f832c18d72af89810a29fbd5f
CVE ID: CVE-2022-38073 State: PUBLISHED Published: 2022-09-21T19:07:42.549Z Last Updated: 2025-02-20T20:05:02.689Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Awesome Support Team Products: Awesome Support (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/awesome-support/#developers - https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0
support/#developers - https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2022-38074 State: PUBLISHED Published: 2023-03-13T13:43:34.752Z Last Updated: 2025-01-08T22:08:34.007Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: VeronaLabs Products: WP Statistics Problem Types: CWE-89 Description: SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-statistics/wordpress-wp-statistics-plugin-13-2-10-multiple-authenticated-sql-injection-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-38075 State: PUBLISHED Published: 2022-11-18T18:57:06.939933Z Last Updated: 2024-09-17T02:01:48.906Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Carlos Doral Products: Mantenimiento web (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin <= 0.13 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mantenimiento-web/wordpress-mantenimiento-web-plugin-0-13-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting
press-mantenimiento-web-plugin-0-13-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-38076 State: PUBLISHED Published: 2023-08-11T02:36:55.105Z Last Updated: 2025-02-13T16:32:56.803Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html - https://
lnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
CVE ID: CVE-2022-38077 State: PUBLISHED Published: 2023-03-29T12:19:03.503Z Last Updated: 2025-01-10T19:14:56.012Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP OnlineSupport, Essential Plugin Products: Popup Anything – A Marketing Popup and Lead Generation Conversions Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin <= 2.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/popup-anything-on-click/wordpress-popup-
A ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/popup-anything-on-click/wordpress-popup-anything-plugin-2-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-38078 State: PUBLISHED Published: 2022-08-24T08:40:42 Last Updated: 2024-08-03T10:45:52.350Z Vendors: Six Apart Ltd. Products: Movable Type XMLRPC API Problem Types: Command Injection Description: Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Pr
Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2022/08/mt-795-687-released.html - https://jvn.jp/en/jp/JVN57728859/index.html
CVE ID: CVE-2022-38079 State: PUBLISHED Published: 2022-09-23T18:35:40.330Z Last Updated: 2025-02-20T20:00:41.072Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: SedLex Products: Backup Scheduler (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/backup-scheduler/wordpress-backup-scheduler-plugin-1-5-13-cross-site-request-forgery-csrf-vulnerability/_s_id=cve - https://wordpress.org/plugins/backup-scheduler/
CVE ID: CVE-2022-38080 State: PUBLISHED Published: 2022-08-24T08:41:07 Last Updated: 2024-08-03T10:45:52.407Z Vendors: Kajitori Co.,Ltd Products: Exment Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: References: - https://exment.net/docs/#/weakness/20220817 - https://exment.net/docs/#/release_note?id=v503-20220817 - https://jvn.jp/en/jp/
://exment.net/docs/#/weakness/20220817 - https://exment.net/docs/#/release_note?id=v503-20220817 - https://jvn.jp/en/jp/JVN46239102/index.html
CVE ID: CVE-2022-38081 State: PUBLISHED Published: 2022-09-09T14:39:56.871079Z Last Updated: 2024-09-16T20:26:45.986Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-305 Description: OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md
CVE ID: CVE-2022-38083 State: PUBLISHED Published: 2023-08-11T02:37:01.438Z Last Updated: 2025-02-13T16:32:57.362Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure, CWE-665 Description: Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html - https://security.netapp.com/advisory/ntap-20230824-0001/
CVE ID: CVE-2022-38084 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:45.409Z Description: No description available.