Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33896 State: PUBLISHED Published: 2022-10-07T15:05:08.443Z Last Updated: 2025-04-15T18:49:15.593Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hancom Products: Hancom Office 2020 Problem Types: CWE-124 Description: A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1574
CVE ID: CVE-2022-33897 State: PUBLISHED Published: 2022-10-25T16:33:57.085Z Last Updated: 2025-04-15T18:45:32.257Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Robustel Products: R1510 Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1579
CVE ID: CVE-2022-33898 State: PUBLISHED Published: 2023-11-14T19:04:44.189Z Last Updated: 2024-08-30T17:05:22.778Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Watchdog Timer installation software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908
: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2022-33899 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:51.654Z Description: No description available.
CVE ID: CVE-2022-33900 State: PUBLISHED Published: 2022-08-22T14:48:37.139Z Last Updated: 2025-02-20T20:13:03.946Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Easy Digital Downloads Products: Easy Digital Downloads Problem Types: PHP Object Injection Description: PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-digital-downloads/wordpress-easy-digital-downloads-plugin-3-0-1-php-object-injection-vulnerability - https://wordpress.org/plugins/easy-digital-downloads/#developers
CVE ID: CVE-2022-33901 State: PUBLISHED Published: 2022-07-22T16:52:53.184Z Last Updated: 2025-02-20T20:15:27.682Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: MultiSafepay Products: MultiSafepay plugin for WooCommerce (WordPress plugin) Problem Types: Arbitrary File Read Description: Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/multisafepay/#developers - https://patchstack.com/database/vulnerability/multisafepay/wordpress-multisafepay-plugin-for-woocommerce-plugi
elopers - https://patchstack.com/database/vulnerability/multisafepay/wordpress-multisafepay-plugin-for-woocommerce-plugin-4-13-1-unauthenticated-arbitrary-file-read-vulnerability
CVE ID: CVE-2022-33902 State: PUBLISHED Published: 2023-02-16T19:59:54.087Z Last Updated: 2025-01-27T18:22:52.662Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus Prime Pro and Standard edition software Problem Types: escalation of privilege Description: Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html
CVE ID: CVE-2022-33903 State: PUBLISHED Published: 2022-07-17T00:00:00 Last Updated: 2024-08-03T08:09:22.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.html - https://security-tracker.debian.org/tracker/CVE-2022-33903 - https://security.gentoo.org/glsa/202305-11
CVE ID: CVE-2022-33905 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:06:39.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU attack). DMA transactions which are targeted at input buffers used for the software SMI handler used by the AhciBusDxe driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group, Fixed in kernel 5.2: 05.27.23, kernel 5.3: 05.36.23, kernel 5.4: 05.44.23, kernel 5.5: 05.52.2
by Intel's iSTARE group, Fixed in kernel 5.2: 05.27.23, kernel 5.3: 05.36.23, kernel 5.4: 05.44.23, kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022047 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022047
CVE ID: CVE-2022-33906 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:56:41.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the FwBlockServiceSmm driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.23, 5.3: 05.36.23, 5.4: 05.44.23, 5.5: 05.52.23
description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.23, 5.3: 05.36.23, 5.4: 05.44.23, 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022048 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022048 - https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
CVE ID: CVE-2022-33907 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:52:04.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack... DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.4
eral description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25 https://www.insyde.com/security-pledge/SA-2022049 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022049 - https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
CVE ID: CVE-2022-33908 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:35:31.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdHostDriver driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.
n provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.5: 05.52.25 https://www.insyde.com/security-pledge/SA-2022050 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022050
CVE ID: CVE-2022-33909 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:32:02.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the HddPassword driver could cause SMRAM corruption through a TOCTOU attack..This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel Kernel 5.2: 05.27.23, Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23, Kern
provided by Intel's iSTARE group. Fixed in kernel Kernel 5.2: 05.27.23, Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23, Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022051 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022051
CVE ID: CVE-2022-33910 State: PUBLISHED Published: 2022-06-24T16:45:56 Last Updated: 2024-08-03T08:09:22.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a user or an admin clicks on the attachment, file_download.php opens the SVG document in a browser tab instead of downloading it as a file, causing the JavaScript code to execute. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=29135 - https://mantisbt.org/bugs/view.php?id=30384 - https://mantisbt.org/blog/archives/mantisbt/719
CVE ID: CVE-2022-33911 State: PUBLISHED Published: 2022-07-11T12:20:54 Last Updated: 2024-08-03T08:09:22.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-33912 State: PUBLISHED Published: 2022-06-17T06:47:38 Last Updated: 2024-08-03T08:09:22.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: A permission issue affects users that deployed the shipped version of the Checkmk Debian package. Packages created by the agent bakery (enterprise editions only) were not affected. Using the shipped version of the agents, the maintainer scripts located at /var/lib/dpkg/info/ will be owned by the user and the group with ID 1001. If such a user exists on the system, they can change the content of these files (which are then executed by root). This leads to a local privilege escalation on the monitored host. Version 1.6 through
which are then executed by root). This leads to a local privilege escalation on the monitored host. Version 1.6 through 1.6.9p29, version 2.0 through 2.0.0p26, version 2.1 through 2.1.0p3, and version 2.2.0i1 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://checkmk.com/werk/14098
CVE ID: CVE-2022-33913 State: PUBLISHED Published: 2022-06-20T15:26:25 Last Updated: 2024-08-03T08:09:22.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=9138
CVE ID: CVE-2022-33915 State: PUBLISHED Published: 2022-06-17T07:01:30 Last Updated: 2024-08-03T08:09:22.699Z Severity: HIGH (CVSS 7 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or CVE-2021-45046; it provides a temporary mitigation to CVE-2021-44228 by hotpatching the local Java virtual machines. To do so, it iterates through all running Java processe
o CVE-2021-44228 by hotpatching the local Java virtual machines. To do so, it iterates through all running Java processes, performs several checks, and executes the Java virtual machine with the same permissions and capabilities as the running process to load the hotpatch. A local user could cause the hotpatch script to execute a binary with elevated privileges by running a custom java process that performs exec() of an SUID binary after the hotpatch has observed the process path and before it has observed its effective user ID. Additional Analyst Notes: - CVE Program Container: References: - https://alas.aws.amazon.com/ALAS-2022-1601.html - https://alas.aws.amazon.com/AL2/ALAS-2022-1806.htm
iner: References: - https://alas.aws.amazon.com/ALAS-2022-1601.html - https://alas.aws.amazon.com/AL2/ALAS-2022-1806.html
CVE ID: CVE-2022-33916 State: PUBLISHED Published: 2022-08-23T00:34:00 Last Updated: 2024-08-03T08:09:22.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation.org - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-33916.pdf
CVE ID: CVE-2022-33917 State: PUBLISHED Published: 2022-08-02T22:17:17 Last Updated: 2024-08-03T08:09:22.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Additional Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities - http://packetstormsecurity.com/files/168147/Arm-Mali-CSF-VMA-Split-Mishandling.html
CVE ID: CVE-2022-33918 State: PUBLISHED Published: 2022-10-12T19:25:42.464Z Last Updated: 2025-05-15T15:35:09.852Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: GeoDrive Problem Types: CWE-316 Description: Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000203632
CVE ID: CVE-2022-33919 State: PUBLISHED Published: 2022-10-12T19:25:43.454Z Last Updated: 2025-05-15T15:34:50.965Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: GeoDrive Problem Types: CWE-200 Description: Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000203632
CVE ID: CVE-2022-33920 State: PUBLISHED Published: 2022-10-12T19:25:44.432Z Last Updated: 2025-05-15T15:34:29.559Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: GeoDrive Problem Types: CWE-428 Description: Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000203632
CVE ID: CVE-2022-33921 State: PUBLISHED Published: 2022-10-12T19:25:45.515Z Last Updated: 2025-05-15T15:33:49.283Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: GeoDrive Problem Types: CWE-427 Description: Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000203632
CVE ID: CVE-2022-33922 State: PUBLISHED Published: 2022-10-12T19:25:46.493Z Last Updated: 2025-05-15T15:33:18.690Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: GeoDrive Problem Types: CWE-276 Description: Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000203632
CVE ID: CVE-2022-33923 State: PUBLISHED Published: 2022-07-20T20:55:28.864536Z Last Updated: 2024-09-16T17:57:59.623Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-78 Description: Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/
ver by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000201283
CVE ID: CVE-2022-33924 State: PUBLISHED Published: 2022-08-10T16:30:36.665455Z Last Updated: 2024-09-16T19:40:24.856Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could potentially exploit this vulnerability and create rules. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33925 State: PUBLISHED Published: 2022-08-10T16:30:42.153716Z Last Updated: 2024-09-17T00:11:09.693Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authenticated attacker could potentially exploit this vulnerability by bypassing access controls in order to download reports containing sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-s
am Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33926 State: PUBLISHED Published: 2022-08-10T16:30:47.574121Z Last Updated: 2024-09-17T04:29:00.986Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user could exploit this vulnerability in order to retain access to a file repository after it has been revoked. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33927 State: PUBLISHED Published: 2022-08-10T16:30:57.747836Z Last Updated: 2024-09-17T00:46:28.916Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-384 Description: Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabiliti
ell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-33928 State: PUBLISHED Published: 2022-08-10T16:31:13.908122Z Last Updated: 2024-09-17T02:37:41.986Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-256 Description: Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. Additional Analyst Notes: - CVE Program Container: Re
vulnerable application with privileges of the compromised account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities