Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36429 State: PUBLISHED Published: 2023-03-21T17:41:25.748Z Last Updated: 2024-08-03T10:07:33.896Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Netgear Products: Orbi Satellite RBS750 Problem Types: CWE-912 Description: A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-crafted JSON object can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_report
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1597 - https://kb.netgear.com/000065424/Security-Advisory-for-Command-Injection-on-Some-Orbi-WiFi-Systems-PSV-2022-0188
CVE ID: CVE-2022-36431 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T17:57:58.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synacktiv.com/sites/default/files/2022-11/trufusion_enterprise_unauthenticated_arbitrary_file_write.pdf - https://docs.rocketsoftware.com/bundle/TRUfusionEnterprise_ReleaseNotes_V7.9.6.1/resource/TRUfusionEnterprise_ReleaseN
- https://docs.rocketsoftware.com/bundle/TRUfusionEnterprise_ReleaseNotes_V7.9.6.1/resource/TRUfusionEnterprise_ReleaseNotes_V7.9.6.1.pdf
CVE ID: CVE-2022-36432 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-30T14:48:40.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/afine-com/CVE-2022-36432
CVE ID: CVE-2022-36433 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T14:56:39.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users via posts/preview or posts/save. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://weglow.ski - https://github.com/afine-com/CVE-2022-36433
CVE ID: CVE-2022-36436 State: PUBLISHED Published: 2022-09-14T03:04:34 Last Updated: 2024-08-03T10:07:33.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VNCServerAuthenticator authentication-bypass vulnerability that could allow a malicious actor to gain unauthorized access to a VNC session or to disconnect a legitimate user from a VNC session. A remote attacker with network access to the proxy server could leverage this vulnerability to connect to VNC servers protected by the proxy server without providing any authentication credentials. Exploitation of this issue requires that the proxy s
the proxy server without providing any authentication credentials. Exploitation of this issue requires that the proxy server is currently accepting connections for the target VNC server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/osuosl/twisted_vncauthproxy/tree/release/1.1.1 - https://pypi.org/project/VNCAuthProxy/ - https://github.com/osuosl/twisted_vncauthproxy/commit/edc149af29242178091b2d6fcd42c3ef0851644b - https://cert.grnet.gr/en/blog/cve-2022-36436-twisted-vnc-authentication-proxy-authentication-bypass/
CVE ID: CVE-2022-36437 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-11T22:46:33.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already authenticated connection. The affected Hazelcast versions are through 4.0.6, 4.1.9, 4.2.5, 5.0.3, and 5.1.2. The affected Hazelcast Jet versions are through 4.5.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hazelcast/hazelcast/security/advisories/GHSA-c5hg-mr8r-f6jp
CVE ID: CVE-2022-36438 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:51:25.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete files within the system arbitrarily). This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asus.com - https://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_co
ps://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713%2FAsus%20Switch%20LPE.pdf&parent=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713&ga=1
CVE ID: CVE-2022-36439 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:49:45.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via SYSTEM privileges. This affects ASUS System Control Interface 3 before 3.1.5.0, AsusSoftwareManger.exe before 1.0.53.0, and AsusLiveUpdate.dll before 1.0.45.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asus.com - https://asus-my.sharepoint.com/personal/carinacw_li_asus_c
er: - CISA ADP Vulnrichment: References: - https://asus.com - https://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713%2FAsus%20Arbitary%20File%20Deletion.pdf&parent=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713&ga=1
CVE ID: CVE-2022-36440 State: PUBLISHED Published: 2023-04-03T00:00:00 Last Updated: 2024-08-03T10:07:33.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spwpun/pocs - https://github.com/spwpun/pocs/blob/main/frr-bgpd.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GM66PNHGCXZU66LQCTP2FSJLFF6CVMSI/ - https://lists.fedoraproject.
list/package-announce%40lists.fedoraproject.org/message/GM66PNHGCXZU66LQCTP2FSJLFF6CVMSI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HU4PKLUVB5CTMOVQ2GV33TNUNMJCBGD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBXEXL2ZQBWCBLNUP6P67FHECXQWSK3L/ - https://www.debian.org/security/2023/dsa-5495 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html
CVE ID: CVE-2022-36441 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:15.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The Gboard used by different applications can be used to launch and use several other applications that are restricted by the admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-36441 - https://www.zebra.com/fr/fr/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36441
CVE ID: CVE-2022-36442 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:22.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-36442 - https://www.zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36442
CVE ID: CVE-2022-36443 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:17.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels (wireless and SD card) but it is still possible to use a physical connection (Ethernet cable) without restriction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html - https://excellium-services.com/cert-xlm-advisory/CVE-2022-36443 - https
bile-app-utilities/enterprise-home-screen.html - https://excellium-services.com/cert-xlm-advisory/CVE-2022-36443 - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36443
CVE ID: CVE-2022-36444 State: PUBLISHED Published: 2022-07-25T05:38:54 Last Updated: 2024-08-03T10:07:34.079Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system. Additional Analyst Notes: - CVE Program Con
y or potentially compromise the confidentiality and integrity of the system. Additional Analyst Notes: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-2203-01.pdf
CVE ID: CVE-2022-36446 State: PUBLISHED Published: 2022-07-25T05:56:47 Last Updated: 2024-08-03T10:07:34.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webmin/webmin/commit/13f7bf9621a82d93f1e9dbd838d1e22020221bde - https://github.com/webmin/webmin/compare/1.996...1.997 - http://packetstormsecurity.com/files/167894/Webmin-1.996-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/50998 - https://gist.github.com/emirpolatt/cf19d6c0128fa3e25ebb47e09243919b - http://packetstormsecurity.com/files/168049/W
98 - https://gist.github.com/emirpolatt/cf19d6c0128fa3e25ebb47e09243919b - http://packetstormsecurity.com/files/168049/Webmin-Package-Updates-Command-Injection.html
CVE ID: CVE-2022-36447 State: PUBLISHED Published: 2022-07-29T20:32:20 Last Updated: 2024-08-03T10:07:34.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any holder of any amount of the token. The total amount of the token can be increased as high as the malicious actor pleases. This is true for every CAT1 on the Chia blockchain regardless of issuance rules. This attack is auditable on chain, so maliciously altered coins can potentially be marked by off-chain observers as malicious. Addit
is auditable on chain, so maliciously altered coins can potentially be marked by off-chain observers as malicious. Additional Analyst Notes: - CVE Program Container: References: - https://chia.net - https://www.chia.net/2022/07/25/upgrading-the-cat-standard.en.html
CVE ID: CVE-2022-36448 State: PUBLISHED Published: 2022-09-28T15:50:09.000Z Last Updated: 2025-05-21T14:26:24.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://binarly.io/advisories/BRLY-2022-023/index.html - https://www.insyde.com/security-pledge/SA-2022032
CVE ID: CVE-2022-36449 State: PUBLISHED Published: 2022-09-01T02:50:37 Last Updated: 2024-08-03T10:07:33.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0, Bifrost r0p0 through r38p0 and r39p0 before r38p1, and Valhall r19p0 through r38p0 and r39p0 before r38p1. Additional Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%
onal Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities - http://packetstormsecurity.com/files/168432/Arm-Mali-Physical-Address-Exposure.html - http://packetstormsecurity.com/files/168431/Arm-Mali-Released-Buffer-Use-After-Free.html - http://packetstormsecurity.com/files/168434/Arm-Mali-CSF-Missing-Buffer-Size-Check.html - http://packetstormsecurity.com/files/168433/Arm-Mali-Race-Condition.html
CVE ID: CVE-2022-36450 State: PUBLISHED Published: 2022-07-25T06:15:49 Last Updated: 2024-08-03T10:07:34.109Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL. Additional Analyst Notes: - CVE Program Container: References: - https://forum.obsidian.md/t/possible-remote-code-execution-through-obsidian-uri-scheme/39743 - https://www.chtsecurity.com/news/f2a1ad21-3442-495f-8b6e-f0fe433d6caa
CVE ID: CVE-2022-36451 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:36:20.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack due to insufficient restriction of URL parameters. A successful exploit could allow an attacker to leverage connections and permissions available to the host server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/sec
SA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006
CVE ID: CVE-2022-36452 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:21:32.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006
CVE ID: CVE-2022-36453 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:20:24.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to control another extension number. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006
CVE ID: CVE-2022-36454 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:17:35.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the MiCollab Client API of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to impersonate another user's name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006
CVE ID: CVE-2022-36455 State: PUBLISHED Published: 2022-08-25T14:06:06 Last Updated: 2024-08-03T10:07:34.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3600R/1/readme.md
CVE ID: CVE-2022-36456 State: PUBLISHED Published: 2022-08-25T13:53:25 Last Updated: 2024-08-03T10:07:34.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A720R/1
CVE ID: CVE-2022-36458 State: PUBLISHED Published: 2022-08-25T13:53:26 Last Updated: 2024-08-03T10:07:34.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/2/readme.md
CVE ID: CVE-2022-36459 State: PUBLISHED Published: 2022-08-25T13:53:27 Last Updated: 2024-08-03T10:07:34.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/3/readme.md
CVE ID: CVE-2022-36460 State: PUBLISHED Published: 2022-08-25T13:53:27 Last Updated: 2024-08-03T10:07:34.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/4/readme.md
CVE ID: CVE-2022-36461 State: PUBLISHED Published: 2022-08-25T13:53:28 Last Updated: 2024-08-03T10:07:34.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/5/readme.md
CVE ID: CVE-2022-36462 State: PUBLISHED Published: 2022-08-25T13:53:29 Last Updated: 2024-08-03T10:07:34.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/6/readme.md
CVE ID: CVE-2022-36463 State: PUBLISHED Published: 2022-08-25T13:53:30 Last Updated: 2024-08-03T10:07:34.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/8/readme.md
CVE ID: CVE-2022-36464 State: PUBLISHED Published: 2022-08-25T13:53:31 Last Updated: 2024-08-03T10:07:34.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/10/readme.md
CVE ID: CVE-2022-36465 State: PUBLISHED Published: 2022-08-25T13:53:37 Last Updated: 2024-08-03T10:07:34.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/9/readme.md
CVE ID: CVE-2022-36466 State: PUBLISHED Published: 2022-08-25T13:53:41 Last Updated: 2024-08-03T10:07:34.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/7/readme.md
CVE ID: CVE-2022-36467 State: PUBLISHED Published: 2022-08-25T13:53:42 Last Updated: 2024-08-03T10:07:34.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/4/readme.md
CVE ID: CVE-2022-36468 State: PUBLISHED Published: 2022-08-25T13:53:42 Last Updated: 2024-08-03T10:07:33.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/5/readme.md