Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28708 State: PUBLISHED Published: 2022-05-05T16:40:05.054560Z Last Updated: 2024-09-17T01:17:01.695Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-20 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References:
eached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K85054496
CVE ID: CVE-2022-28709 State: PUBLISHED Published: 2022-08-18T19:35:42.000Z Last Updated: 2025-05-05T16:21:12.043Z Vendors: n/a Products: Intel(R) E810 Ethernet Controllers Problem Types: denial of service Description: Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
CVE ID: CVE-2022-28710 State: PUBLISHED Published: 2022-08-22T18:22:30.434Z Last Updated: 2025-04-15T18:52:06.618Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-73 Description: An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/update
Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1550
CVE ID: CVE-2022-28711 State: PUBLISHED Published: 2022-04-14T19:56:41.921Z Last Updated: 2025-04-15T19:05:30.044Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: ArduPilot Products: APWeb Problem Types: CWE-20 Description: A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1512 - htt
tainer: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1512 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1512
CVE ID: CVE-2022-28712 State: PUBLISHED Published: 2022-08-22T18:22:51.697Z Last Updated: 2025-04-15T18:51:58.681Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1540
CVE ID: CVE-2022-28713 State: PUBLISHED Published: 2022-07-04T06:56:12 Last Updated: 2024-08-03T06:03:52.071Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authentication Description: Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-28714 State: PUBLISHED Published: 2022-05-05T16:40:53.297009Z Last Updated: 2024-09-16T17:18:27.730Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP APM, BIG-IP APM Clients Problem Types: CWE-427 Description: On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not
BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K54460845
CVE ID: CVE-2022-28715 State: PUBLISHED Published: 2022-08-18T07:10:47 Last Updated: 2024-08-03T06:03:52.057Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007584.html - https://jvn.jp/en/jp/JVN20573662/index.html
CVE ID: CVE-2022-28716 State: PUBLISHED Published: 2022-05-05T16:41:38.300470Z Last Updated: 2024-09-17T02:51:57.041Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-79 Description: On 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x 11.6.x, a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP AFM, CGNAT, and PEM Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have rea
an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K25451853
CVE ID: CVE-2022-28717 State: PUBLISHED Published: 2022-05-18T09:50:23 Last Updated: 2024-08-03T06:03:52.068Z Vendors: MEIKYO ELECTRIC CO.,LTD. Products: Rebooter, PoE Rebooter, Scheduler, and Contact Converter Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT light RPC-M5C [End of Sale] all firmware versions, WATCH BOOT L-zero RPC-M4L [End of Sale] all firmware versions, WATCH BOOT mini RPC-M4H [End of Sale] all firmware versions, WATCH BOOT nino RPC-M2CS firmware version 1.00A to 1.00D, WATCH BOOT light RPC-M5CS firmware version 1.00A to 1.00D, WATCH BOOT L-zero RPC-M4LS fi
irmware version 1.00A to 1.00D, WATCH BOOT light RPC-M5CS firmware version 1.00A to 1.00D, WATCH BOOT L-zero RPC-M4LS firmware version 1.00A to 1.20A, and Signage Rebooter RPC-M4HSi firmware version 1.00A), PoE Rebooter(PoE BOOT nino PoE8M2 firmware version 1.00A to 1.20A), Scheduler(TIME BOOT mini RSC-MT4H [End of Sale] all firmware versions, TIME BOOT RSC-MT8F [End of Sale] all firmware versions, TIME BOOT RSC-MT8FP [End of Sale] all firmware versions, TIME BOOT mini RSC-MT4HS firmware version 1.00A to 1.10A, and TIME BOOT RSC-MT8FS firmware version 1.00A to 1.00E), and Contact Converter(POSE SE10-8A7B1 firmware version 1.00A to 1.20A) allows a remote attacker with the administrative privi
ontact Converter(POSE SE10-8A7B1 firmware version 1.00A to 1.20A) allows a remote attacker with the administrative privilege to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.meikyo.co.jp/vln/ - https://jvn.jp/en/jp/JVN58266015/index.html
CVE ID: CVE-2022-28718 State: PUBLISHED Published: 2022-07-04T06:56:17 Last Updated: 2024-08-03T06:03:52.475Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authorization Description: Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-28719 State: PUBLISHED Published: 2022-04-28T08:25:12 Last Updated: 2024-08-03T06:03:52.606Z Vendors: Hammock Corporation Products: AssetView Problem Types: Missing Authentication for Critical Function Description: Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.hammock.jp/assetview/info/220422.html - https://jvn.jp/en/jp
t Notes: - CVE Program Container: References: - https://www.hammock.jp/assetview/info/220422.html - https://jvn.jp/en/jp/JVN54857505/index.html
CVE ID: CVE-2022-28721 State: PUBLISHED Published: 2022-09-26T14:54:08.000Z Last Updated: 2025-05-27T20:05:55.708Z Vendors: n/a Products: Certain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printers. Problem Types: Remote Code Execution Description: Certain HP Print Products are potentially vulnerable to Remote Code Execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810
CVE ID: CVE-2022-28722 State: PUBLISHED Published: 2022-09-26T14:54:12.000Z Last Updated: 2025-05-27T20:07:28.394Z Vendors: n/a Products: Certain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printers Problem Types: Buffer Overflow Description: Certain HP Print Products are potentially vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810
CVE ID: CVE-2022-28730 State: PUBLISHED Published: 2022-08-04T06:15:29 Last Updated: 2024-08-03T06:03:52.583Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: XSS Description: A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce plugin dangerously renders user-supplied URLs. Upon re-testing CVE-2021-40369, it appears that the patch was incomplete as it was still possible to insert malicious input via the Denounce plugin. Apache
appears that the patch was incomplete as it was still possible to insert malicious input via the Denounce plugin. Apache JSPWiki users should upgrade to 2.11.3 or later. Additional Analyst Notes: - CVE Program Container: References: - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE ID: CVE-2022-28731 State: PUBLISHED Published: 2022-08-04T06:15:43 Last Updated: 2024-08-03T06:03:52.648Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: CSRF Account Takeover Description: A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page. Additional Analyst Notes: - CVE Program Container: References: - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE ID: CVE-2022-28732 State: PUBLISHED Published: 2022-08-04T06:15:57 Last Updated: 2024-08-03T06:03:52.589Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: XSS Description: A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.3 or later. Additional Analyst Notes: - CVE Program Container: References: - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE ID: CVE-2022-28733 State: PUBLISHED Published: 2023-07-20T00:20:02.458Z Last Updated: 2025-02-13T16:32:35.678Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GNU Project Products: GNU GRUB Problem Types: CWE-191 Description: Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer. Additional Analyst Notes
If the attack succeeds in such way, subsequent operations can write past the end of the buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2022/06/07/5 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28733 - https://security.netapp.com/advisory/ntap-20230825-0002/
CVE ID: CVE-2022-28734 State: PUBLISHED Published: 2023-07-20T00:22:37.840Z Last Updated: 2025-02-13T16:32:36.223Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GNU Project Products: GNU GRUB Description: Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata. Additional Analyst Notes: - CVE Program Container: R
ets can lead to corruption of the GRUB2's internal memory metadata. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/06/07/5 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28734 - https://security.netapp.com/advisory/ntap-20230825-0002/
CVE ID: CVE-2022-28735 State: PUBLISHED Published: 2023-07-20T00:22:51.229Z Last Updated: 2025-02-13T16:32:36.760Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: GNU Project Products: GNU GRUB Description: The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2022/06/07/5 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735 - https://
.openwall.com/lists/oss-security/2022/06/07/5 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735 - https://security.netapp.com/advisory/ntap-20230825-0002/
CVE ID: CVE-2022-28736 State: PUBLISHED Published: 2023-07-20T00:23:01.952Z Last Updated: 2025-02-13T16:32:37.356Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: GNU Project Products: GNU GRUB Description: There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-after-free vulnerability is triggered. If an attacker can control the GRUB2's memory allocation pattern sensitive data may be exposed and arbitrary code execution can be achieved. Additional Analyst No
ory allocation pattern sensitive data may be exposed and arbitrary code execution can be achieved. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2022/06/07/5 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28736 - https://security.netapp.com/advisory/ntap-20230825-0002/
CVE ID: CVE-2022-28737 State: PUBLISHED Published: 2023-07-20T00:26:15.627Z Last Updated: 2024-10-22T13:17:50.789Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Bootloader Team Products: shim Description: There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openw
ch scenario. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2022/06/07/5 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737
CVE ID: CVE-2022-28738 State: PUBLISHED Published: 2022-05-09T00:00:00 Last Updated: 2024-08-03T06:03:52.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1220911 - https://www.ruby-lang.org/en/news/2022/04/12/double-free-in-regexp-compilation-cve-2022-28738/ - https://security-tracker.debian.org/tracker/CVE-2022-28738 - https://security.netapp.com/advisory/nta
-cve-2022-28738/ - https://security-tracker.debian.org/tracker/CVE-2022-28738 - https://security.netapp.com/advisory/ntap-20220624-0002/ - https://security.gentoo.org/glsa/202401-27
CVE ID: CVE-2022-28739 State: PUBLISHED Published: 2022-05-09T00:00:00.000Z Last Updated: 2025-11-04T16:09:44.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1248108 - https://security-tracker.debian.org/tracker/CVE-2022-28739 - https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/ - https://security.netapp.com/advisory/ntap-20220624-0002/ - https://su
uffer-overrun-in-string-to-float-cve-2022-28739/ - https://security.netapp.com/advisory/ntap-20220624-0002/ - https://support.apple.com/kb/HT213488 - https://support.apple.com/kb/HT213494 - https://support.apple.com/kb/HT213493 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - http://seclists.org/fulldisclosure/2022/Oct/30 - http://seclists.org/fulldisclosure/2022/Oct/29 - http://seclists.org/fulldisclosure/2022/Oct/42 - https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html - https://security.gentoo.org/glsa/202401-27
CVE ID: CVE-2022-28740 State: PUBLISHED Published: 2022-09-09T15:59:02 Last Updated: 2024-08-03T06:03:52.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor. Additional Analyst Notes: - CVE Program Container: References: - https://www.aenrich.com.tw - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0034/MNDT-2022-0034.md
CVE ID: CVE-2022-28741 State: PUBLISHED Published: 2022-09-09T15:48:42 Last Updated: 2024-08-03T06:03:52.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to missing input validation in v5.x Additional Analyst Notes: - CVE Program Container: References: - https://www.aenrich.com.tw - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0035/MNDT-2022-0035.md
CVE ID: CVE-2022-28742 State: PUBLISHED Published: 2022-09-09T15:54:37 Last Updated: 2024-08-03T06:03:52.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user session when accessing many application pages. This can allow an attacker to gain unauthenticated access to sensitive functionalities in the application Additional Analyst Notes: - CVE Program Container: References: - https://www.aenrich.com.tw - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0036/MNDT-2022-0036.md
CVE ID: CVE-2022-28743 State: PUBLISHED Published: 2022-04-21T18:09:16 Last Updated: 2024-08-03T06:03:52.757Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running System FW <= 1.13.1.6, and Application FW <= 2.91.2.66, allows an authenticated remote attacker with administrator permissions to execute arbitrary remote code via a malicious firmware patch. The impact of this vulnerability is that the remote attacker could gain full remote access to the IP camera and the underlying Linux system with root permissions. With r
te attacker could gain full remote access to the IP camera and the underlying Linux system with root permissions. With root access to the camera's Linux OS, an attacker could effectively change the code that is running, add backdoor access, or invade the privacy of the user by accessing the live camera stream. Additional Analyst Notes: - CVE Program Container: References: - https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/keeping-a-critical-eye-on-iot-devices.html
CVE ID: CVE-2022-28747 State: PUBLISHED Published: 2022-08-25T22:38:12 Last Updated: 2024-08-03T06:03:52.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. To exploit this vulnerability, an attacker must craft and sign a serialized payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecure.net - https://s3.us-west-2.amazonaws.com/download.countertack.com/files/IDR/IDR-4.1.1-Release-Notes.pdf
CVE ID: CVE-2022-28748 State: REJECTED Published: N/A Last Updated: 2022-11-10T00:00:00 Description: No description available.