Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26343 State: PUBLISHED Published: 2023-02-16T19:59:56.353Z Last Updated: 2025-01-27T18:22:06.719Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html
CVE ID: CVE-2022-26344 State: PUBLISHED Published: 2022-08-18T19:58:58.000Z Last Updated: 2025-02-25T16:59:29.193Z Vendors: n/a Products: version Problem Types: escalation of privilege Description: Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html
CVE ID: CVE-2022-26345 State: PUBLISHED Published: 2023-02-16T19:59:46.108Z Last Updated: 2025-01-27T18:25:03.405Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkit OpenMP Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-26346 State: PUBLISHED Published: 2022-08-05T21:18:33.440Z Last Updated: 2025-04-15T18:54:01.879Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-284 Description: A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1507
CVE ID: CVE-2022-26347 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:46:25.379Z Description: No description available.
CVE ID: CVE-2022-26348 State: PUBLISHED Published: 2022-07-06T16:29:59 Last Updated: 2024-08-03T05:03:32.775Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Gallagher Products: Command Centre Problem Types: CWE-89 Description: Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an application designed for public use, to invoke an arbitrary SQL query that has been preloaded into the registry of the Windows Server to obtain sensitive information. This issue affects: Gallagher Command Centre 8.60 versions prior to 8.60
Windows Server to obtain sensitive information. This issue affects: Gallagher Command Centre 8.60 versions prior to 8.60.1652; 8.50 versions prior to 8.50.2245; 8.40 versions prior to 8.40.2216; 8.30 versions prior to 8.30.1470; version 8.20 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2022-26348
CVE ID: CVE-2022-26349 State: PUBLISHED Published: 2022-03-29T16:37:08.970Z Last Updated: 2025-04-16T16:36:15.877Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26351 State: REJECTED Published: 2022-03-14T17:22:10 Last Updated: 2022-03-15T18:07:43 Description: No description available.
CVE ID: CVE-2022-26352 State: PUBLISHED Published: 2022-07-17T21:54:53.000Z Last Updated: 2025-10-21T23:15:38.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is saved outside of the intended storage location. If anonymous content creation is enabled, this allows an unauthenticated attacker to upload an executable file, such as a .jsp file, that can lead to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
.jsp file, that can lead to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/dotcms - http://packetstormsecurity.com/files/167365/dotCMS-Shell-Upload.html
CVE ID: CVE-2022-26353 State: PUBLISHED Published: 2022-03-16T14:02:33 Last Updated: 2024-08-03T05:03:32.949Z Vendors: n/a Products: qemu-kvm Problem Types: CWE-772 Description: A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2022-03/msg02438.html - https://gitlab.com/qemu-project/qemu/-/commit/abe300d9d894f7138e1af7c8e9c88c04bfe98b37 - https://security.netapp.c
tml - https://gitlab.com/qemu-project/qemu/-/commit/abe300d9d894f7138e1af7c8e9c88c04bfe98b37 - https://security.netapp.com/advisory/ntap-20220425-0003/ - https://www.debian.org/security/2022/dsa-5133 - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2022-26354 State: PUBLISHED Published: 2022-03-16T14:02:34 Last Updated: 2024-08-03T05:03:32.576Z Vendors: n/a Products: qemu-kvm Problem Types: CWE-772 Description: A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/qemu-project/qemu/-/commit/8d1b247f3748ac4078524130c6d7ae42b6140aaf - https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html - https://security.netapp.com/advisory/ntap-20220425-0003/ -
/lists.debian.org/debian-lts-announce/2022/04/msg00002.html - https://security.netapp.com/advisory/ntap-20220425-0003/ - https://www.debian.org/security/2022/dsa-5133 - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2022-26355 State: PUBLISHED Published: 2022-03-09T14:58:02 Last Updated: 2024-08-03T05:03:32.904Z Vendors: Citrix Products: Federated Authentication Service (FAS) Problem Types: CWE-668 Description: Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module (TPM) to incorrectly store that key in the Microsoft Software Key Storage Provider (MSKSP). This issue only occurs if PowerShell was used when configuring FAS to store the registration authority certificate’s private key in the TPM. It does not occur if the TPM was not selected for use or if the
tration authority certificate’s private key in the TPM. It does not occur if the TPM was not selected for use or if the FAS administration console was used for configuration. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX341587
CVE ID: CVE-2022-26356 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:03:32.753Z Vendors: Xen Products: xen Problem Types: unknown Description: Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram before Xen 4.9) is racy with ongoing log dirty hypercalls. A suitably timed call to XEN_DMOP_track_dirty_vram can enable log dirty while another CPU is still in the process of tearing down the structures related to a previously enabled log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations
led log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations and can lead to entries being added in already freed slots, resulting in a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-397.txt - http://xenbits.xen.org/xsa/advisory-397.html - http://www.openwall.com/lists/oss-security/2022/04/05/1 - https://www.debian.org/security/2022/dsa-5117 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.o
FSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-26357 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:03:32.803Z Vendors: Xen Products: xen Problem Types: unknown Description: race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-399.txt - http://
onal Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-399.txt - http://xenbits.xen.org/xsa/advisory-399.html - http://www.openwall.com/lists/oss-security/2022/04/05/2 - https://www.debian.org/security/2022/dsa-5117 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-26358 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:03:32.460Z Vendors: Xen Products: xen Problem Types: unknown Description: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with
tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-400.txt - http://xenbits.xen.org/xsa/advisory-400.html - http://www.openwall.com/lists/oss-security/2022/04/05/3 - https://www.debian.org/security/2022/dsa-5117 - https://lists.fedoraproject.org/arch
m/lists/oss-security/2022/04/05/3 - https://www.debian.org/security/2022/dsa-5117 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-26359 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:03:32.395Z Vendors: Xen Products: xen Problem Types: unknown Description: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with
CVE ID: CVE-2022-26360 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:03:32.839Z Vendors: Xen Products: xen Problem Types: unknown Description: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with
CVE ID: CVE-2022-26361 State: PUBLISHED Published: 2022-04-05T00:00:00 Last Updated: 2024-08-03T05:03:32.802Z Vendors: Xen Products: xen Problem Types: unknown Description: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with
CVE ID: CVE-2022-26362 State: PUBLISHED Published: 2022-06-09T12:50:19 Last Updated: 2024-08-03T05:03:32.792Z Vendors: Xen Products: xen Problem Types: unknown Description: x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, the logic for acquiring a type reference has a race condition, whereby a safely TLB flush is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is
is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is prohibited. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-401.txt - http://xenbits.xen.org/xsa/advisory-401.html - http://www.openwall.com/lists/oss-security/2022/06/09/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/ - http://packetstormsecurity.com/files/167718/Xen-TLB-Flush-Bypass.html - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-26363 State: PUBLISHED Published: 2022-06-09T12:50:13 Last Updated: 2024-08-03T05:03:32.601Z Vendors: Xen Products: xen Problem Types: unknown Description: x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, Xen's safety logic doesn't account for CPU-induced cache non-coherency; c
; updates need auditing by Xen. Unfortunately, Xen's safety logic doesn't account for CPU-induced cache non-coherency; cases where the CPU can cause the content of the cache to be different to the content in main memory. In such cases, Xen's safety logic can incorrectly conclude that the contents of a page is safe. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-402.txt - http://xenbits.xen.org/xsa/advisory-402.html - http://www.openwall.com/lists/oss-security/2022/06/09/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/ - https://www.debian.org/sec
s/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/ - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-26364 State: PUBLISHED Published: 2022-06-09T12:50:14 Last Updated: 2024-08-03T05:03:32.771Z Vendors: Xen Products: xen Problem Types: unknown Description: x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, Xen's safety logic doesn't account for CPU-induced cache non-coherency; c
; updates need auditing by Xen. Unfortunately, Xen's safety logic doesn't account for CPU-induced cache non-coherency; cases where the CPU can cause the content of the cache to be different to the content in main memory. In such cases, Xen's safety logic can incorrectly conclude that the contents of a page is safe. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-402.txt - http://xenbits.xen.org/xsa/advisory-402.html - http://www.openwall.com/lists/oss-security/2022/06/09/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/ - http://packetstormsecurity
s/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/ - http://packetstormsecurity.com/files/167710/Xen-PV-Guest-Non-SELFSNOOP-CPU-Memory-Corruption.html - https://www.debian.org/security/2022/dsa-5184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-26365 State: PUBLISHED Published: 2022-07-05T12:50:28 Last Updated: 2024-08-03T05:03:32.784Z Vendors: Linux, Xen Products: Linux, xen Problem Types: unknown Description: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backen
ge, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742). Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-403.txt - http://xenbits.xen.org/xsa/advisory-403.html - http://www.openwall.com/lists/oss-security/2022/07/05/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGFTRZ66KQYTSYIRT5FRHF5D6O72NWOP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://www.debian.org/security/2022/dsa-5191 - https:
sts.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ - https://www.debian.org/security/2022/dsa-5191 - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE ID: CVE-2022-26366 State: PUBLISHED Published: 2022-11-30T12:30:08.000Z Last Updated: 2025-02-20T19:48:50.831Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Arnan de Gans Products: AdRotate Banner Manager (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in AdRotate Banner Manager Plugin <= 5.9 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/adrotate/wordpress-adrotate-banner-manager-plugin-5-9-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-26367 State: PUBLISHED Published: 2022-11-11T15:48:47.217Z Last Updated: 2025-02-05T20:47:12.300Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) XMM(TM) 7560 Modem software Problem Types: escalation of privilege Description: Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE ID: CVE-2022-26368 State: PUBLISHED Published: 2022-07-04T06:55:44 Last Updated: 2024-08-03T05:03:32.781Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authorization Description: Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html