Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46355 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:40:09.057Z Vendors: Siemens Products: SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) Problem Types: CWE-200 Description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The affected products are vulnerable to an "Exposure of Sensitive Information to an Unauthor
R) (All versions < V3.2.7). The affected products are vulnerable to an "Exposure of Sensitive Information to an Unauthorized Actor" vulnerability by leaking sensitive data in the HTTP Referer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
CVE ID: CVE-2022-46356 State: PUBLISHED Published: 2023-01-27T23:22:47.741Z Last Updated: 2025-03-28T15:48:44.499Z Vendors: HP Inc. Products: HP Security Manager Problem Types: n/a Description: Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7334353-7334378-16
CVE ID: CVE-2022-46357 State: PUBLISHED Published: 2023-01-27T23:22:09.622Z Last Updated: 2025-03-28T15:50:35.415Z Vendors: HP Inc. Products: HP Security Manager Problem Types: n/a Description: Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7334353-7334378-16
CVE ID: CVE-2022-46358 State: PUBLISHED Published: 2023-01-27T23:21:04.607Z Last Updated: 2025-03-28T15:51:23.389Z Vendors: HP Inc. Products: HP Security Manager Problem Types: n/a Description: Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7334353-7334378-16
CVE ID: CVE-2022-46359 State: PUBLISHED Published: 2023-01-27T23:20:16.899Z Last Updated: 2025-03-28T15:52:23.199Z Vendors: HP Inc. Products: HP Security Manager Problem Types: n/a Description: Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7334353-7334378-16
CVE ID: CVE-2022-46360 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T16:24:48.372Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: V-SFT and TELLUS Problem Types: Out-of-bounds Read Description: Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/index.php - https://jvn.jp/en/vu/JVNVU90679513/index.html
CVE ID: CVE-2022-46361 State: PUBLISHED Published: 2023-05-30T16:21:37.079Z Last Updated: 2025-01-09T21:26:17.690Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Honeywell Products: OneWireless Problem Types: CWE-77 Description: An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process
version 322.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com/
CVE ID: CVE-2022-46363 State: PUBLISHED Published: 2022-12-13T14:46:55.619Z Last Updated: 2025-04-22T02:50:45.431Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: CWE-20 Description: A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
e if the CXF service is misconfigured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c
CVE ID: CVE-2022-46364 State: PUBLISHED Published: 2022-12-13T16:20:26.765Z Last Updated: 2025-04-22T02:48:36.211Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: CWE-918 Description: A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2
CVE ID: CVE-2022-46365 State: PUBLISHED Published: 2023-05-01T14:53:50.130Z Last Updated: 2024-10-15T16:43:14.987Z Vendors: Apache Software Foundation Products: Apache StreamPark (incubating) Problem Types: CWE-20 Description: Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logged user and whether the user is legal, This will allow malicious attackers to send any username to modify and reset the account, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later. Additional Analyst Notes: - CVE Program C
s of the affected versions should upgrade to Apache StreamPark 2.0.0 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/f68lcwrp8pcdc4yrbpcm8j7m0f5mjn7h
CVE ID: CVE-2022-46366 State: PUBLISHED Published: 2022-12-02T00:00:00 Last Updated: 2024-08-03T14:31:46.317Z Vendors: Apache Software Foundation Products: Apache Tapestry Problem Types: CWE-502 Description: Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from CVE-2020-17531, which applies the the (also unsupported) 4.x version line. NOTE: This vulnerability only affects Apache Tapestry version line 3.x, which is no longer supported by the maintainer. Users are recommended to upgrade to a supported version line of Apache Tapestry. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
supported version line of Apache Tapestry. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/bwn1vjrvz1hq0wbdzj23wz322244swhj - http://www.openwall.com/lists/oss-security/2022/12/02/1 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0041/MNDT-2022-0041.md
CVE ID: CVE-2022-46367 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T16:00:10.383Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Rumpus Products: FTP server Problem Types: CWE-352 Description: Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-46368 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T16:20:50.387Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Rumpus Products: FTP server Problem Types: CWE-352 Description: Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-46369 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T13:40:44.402Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Rumpus Products: FTP server Problem Types: CWE-79 Description: Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-46370 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:14:54.672Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Rumpus Products: FTP server Problem Types: impoper registration verification Description: Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-46371 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:13:25.434Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Alotcer Products: AR7088H-A Problem Types: CWE-200 Description: Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-46372 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:12:07.679Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Alotcer Products: AR7088H-A Problem Types: Authenticated Command execution Description: Alotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow Authenticated command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-46377 State: PUBLISHED Published: 2023-05-10T15:23:52.324Z Last Updated: 2025-11-04T19:14:24.229Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Weston Embedded Products: uC-FTPs Problem Types: CWE-823 Description: An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
argument is provided to the `PORT` command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1681 - https://github.com/weston-embedded/uC-FTPs/pull/2
CVE ID: CVE-2022-46378 State: PUBLISHED Published: 2023-05-10T15:23:52.423Z Last Updated: 2025-11-04T19:14:25.339Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Weston Embedded Products: uC-FTPs Problem Types: CWE-823 Description: An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
ent is provided to the `PORT` command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1681 - https://github.com/weston-embedded/uC-FTPs/pull/2
CVE ID: CVE-2022-46381 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:39:14.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/omarhashem123/Security-Research/blob/main/CVE-2022-46381/CVE-2022-46381.txt
CVE ID: CVE-2022-46382 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T16:14:39.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has Insecure Permissions. After signing into Digital Rebar, users are issued authentication tokens tied to their account to perform actions within Digital Rebar. During the validation process of these tokens, Digital Rebar did not check if the user account still exists. Deleted Digital Rebar users could still use their tokens to perform actions within Digital Rebar. Additional Analyst Notes: - CVE Progra
Rebar users could still use their tokens to perform actions within Digital Rebar. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rackn.com/products/rebar/
CVE ID: CVE-2022-46383 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T16:13:32.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a privileged token via a public API endpoint (Incorrect Access Control). The token can be used to escalate privileges within the Digital Rebar system and grant full administrative access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rackn.com/products/rebar/ - https://docs.rackn.io/en/latest/doc/security/cve_2022_46383.html
CVE ID: CVE-2022-46387 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T18:59:04.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cmderdev/cmder/blob/master/CHANGELOG.md - https://gist.github.com/dgl/05ca60cdc7efc9e47bbc58d0c952635e
CVE ID: CVE-2022-46389 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T16:01:59.247Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: ServiceNow Products: Now Platform Problem Types: CWE-79 Description: There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch 4, and Utah GA. This enables an unauthenticated remote attacker to execute arbitrary JavaScript code in the browser-based web console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.servicenow.com
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1272156
CVE ID: CVE-2022-46391 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T15:20:34.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eldy/AWStats/pull/226 - https://lists.debian.org/debian-lts-announce/2022/12/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRFYH4DE3COMI3LJCOQQXA4FWOABU6Z2/ - https://lists.fedoraproject.org/archives/list/package-announce%40l
oject.org/message/GRFYH4DE3COMI3LJCOQQXA4FWOABU6Z2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYUZIFVB4N3NK4WGNHRNXZKJITCJBJX4/
CVE ID: CVE-2022-46392 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-11-03T19:27:43.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mbed-TL
er. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0 - https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BR7ZCVKLPGCOEEALUHZMFHXQHR6S4QL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XMKJ5IMJEPXYAHHU56Z4P2FSYIEAESB/
CVE ID: CVE-2022-46393 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:31:49.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and MBEDTLS_SSL_CID_IN_LEN_MAX > 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ - https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0 - https://github.com/Mbed-TLS/m
h-updates/security-advisories/ - https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0 - https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BR7ZCVKLPGCOEEALUHZMFHXQHR6S4QL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XMKJ5IMJEPXYAHHU56Z4P2FSYIEAESB/
CVE ID: CVE-2022-46394 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-05T15:11:23.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r39p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2022-46395 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-11-27T14:56:20.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20D
ttps://developer.arm.com/support/arm-security-updates - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities - http://packetstormsecurity.com/files/172855/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html
CVE ID: CVE-2022-46396 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T17:33:34.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2022-46397 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T18:40:00.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s3-docs.fd.io/vpp/23.02/ - https://lists.fd.io/g/security-announce/message/2
CVE ID: CVE-2022-46399 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:36:42.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG - https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM - https://microchip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-blue
tps://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
CVE ID: CVE-2022-46400 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:30:49.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG - https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM - https://microchip.com - https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviati