Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26155 State: PUBLISHED Published: 2022-02-28T15:22:47 Last Updated: 2024-08-03T04:56:37.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body. Additional Analyst Notes: - CVE Program Container: References: - https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html - https://github.com/l00neyhacker/CVE-2022-26155
CVE ID: CVE-2022-26156 State: PUBLISHED Published: 2022-02-28T15:24:00 Last Updated: 2024-08-03T04:56:37.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places user-supplied input into the action URL of an HTML form. An attacker can use this vulnerability to construct a URL that, if visited by another application user, will modify the action URL of a form to point to the attacker's server.
RL that, if visited by another application user, will modify the action URL of a form to point to the attacker's server. Additional Analyst Notes: - CVE Program Container: References: - https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html - https://github.com/l00neyhacker/CVE-2022-26156
CVE ID: CVE-2022-26157 State: PUBLISHED Published: 2022-02-28T15:25:10 Last Updated: 2024-08-03T04:56:37.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels. Additional Analyst Notes: - CVE Program Container: References: - https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html - https://github.com/l00neyhacker/CVE-2022-26157
CVE ID: CVE-2022-26158 State: PUBLISHED Published: 2022-02-28T15:25:53 Last Updated: 2024-08-03T04:56:37.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page. Additional Analyst Notes: - CVE Program Container: References: - https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html - https://github.com/l00neyhacker/CVE-2022-26158
CVE ID: CVE-2022-26159 State: PUBLISHED Published: 2022-02-28T03:53:46 Last Updated: 2024-08-03T04:56:37.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/<domain>/en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords. Additional Analyst Notes: - CVE Program Container: References: - https://issues.ametys.org/browse/CMS-10973 - https://podali
tional Analyst Notes: - CVE Program Container: References: - https://issues.ametys.org/browse/CMS-10973 - https://podalirius.net/en/cves/2022-26159/ - https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/
CVE ID: CVE-2022-26169 State: PUBLISHED Published: 2022-03-02T22:39:33 Last Updated: 2024-08-03T04:56:37.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Air-Cargo-Management-System
CVE ID: CVE-2022-26170 State: PUBLISHED Published: 2022-03-02T22:39:34 Last Updated: 2024-08-03T04:56:37.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple-Mobile-Comparison-Website
CVE ID: CVE-2022-26171 State: PUBLISHED Published: 2022-03-02T22:39:35 Last Updated: 2024-08-03T04:56:37.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bank Management System v1.o was discovered to contain a SQL injection vulnerability via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/campcodes.com/Bank-Management-System
CVE ID: CVE-2022-26173 State: PUBLISHED Published: 2022-06-16T21:53:34 Last Updated: 2024-08-03T04:56:37.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts. Additional Analyst Notes: - CVE Program Container: References: - http://jforum.com - https://jforum.net/ - https://sourceforge.net/p/jforum2/wiki2/NewFeatures281/ - https://community.jforum.net/posts/list/248.page - https://github.com/WULINPIN/CVE/blob/main/JForum/poc.html
CVE ID: CVE-2022-26174 State: PUBLISHED Published: 2022-03-21T21:54:35 Last Updated: 2024-08-03T04:56:37.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/beekeeper-studio/beekeeper-studio/issues/1051
CVE ID: CVE-2022-26180 State: PUBLISHED Published: 2022-04-08T20:08:52 Last Updated: 2024-08-03T04:56:37.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/166630/qdPM-9.2-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/50854
CVE ID: CVE-2022-26181 State: PUBLISHED Published: 2022-02-28T18:33:50 Last Updated: 2024-08-03T04:56:37.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/bitops.cc:108. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/154 - https://github.com/dropbox/lepton - https://drive.google.com/file/d/1bJlHozO37c5NZ1wI0NBWh0yHHyTcfaQL/view?usp=sharing
CVE ID: CVE-2022-26183 State: PUBLISHED Published: 2022-03-21T00:00:00 Last Updated: 2024-08-03T04:56:37.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pnpm/pnpm/commit/04b7f60861ddee8331e50d70e193d1e701abeefb - https://github.com/pnpm/pnpm/releases/tag/v6.15.1 - https://www.sonarsource.com/blog/securing-developer-tool
701abeefb - https://github.com/pnpm/pnpm/releases/tag/v6.15.1 - https://www.sonarsource.com/blog/securing-developer-tools-package-managers/
CVE ID: CVE-2022-26184 State: PUBLISHED Published: 2022-03-21T00:00:00 Last Updated: 2024-08-03T04:56:37.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python-poetry/poetry/releases/tag/1.1.9 - https://github.com/python-poetry/poetry-core/pull/205/commits/fa9cb6f358ae840885c700f954317f34838caba7 - https://www.sonars
ps://github.com/python-poetry/poetry-core/pull/205/commits/fa9cb6f358ae840885c700f954317f34838caba7 - https://www.sonarsource.com/blog/securing-developer-tools-package-managers/
CVE ID: CVE-2022-26186 State: PUBLISHED Published: 2022-03-22T20:13:16 Last Updated: 2024-08-03T04:56:37.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/
CVE ID: CVE-2022-26187 State: PUBLISHED Published: 2022-03-22T20:13:17 Last Updated: 2024-08-03T04:56:37.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function. Additional Analyst Notes: - CVE Program Container: References: - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/
CVE ID: CVE-2022-26188 State: PUBLISHED Published: 2022-03-22T20:13:19 Last Updated: 2024-08-03T04:56:37.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost. Additional Analyst Notes: - CVE Program Container: References: - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/
CVE ID: CVE-2022-26189 State: PUBLISHED Published: 2022-03-22T20:13:21 Last Updated: 2024-08-03T04:56:37.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface. Additional Analyst Notes: - CVE Program Container: References: - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/
CVE ID: CVE-2022-26197 State: PUBLISHED Published: 2022-03-25T20:21:42 Last Updated: 2024-08-03T04:56:37.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table. Additional Analyst Notes: - CVE Program Container: References: - http://joget.com - https://gist.github.com/CrimsonHamster/1aeec6db0d740de6ed4690f6a975f377
CVE ID: CVE-2022-26198 State: PUBLISHED Published: 2022-03-26T23:18:49 Last Updated: 2024-08-03T04:56:37.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/notable/notable/issues/1595
CVE ID: CVE-2022-26200 State: REJECTED Published: 2022-03-26T23:39:14 Last Updated: 2022-03-27T12:44:55 Description: No description available.
CVE ID: CVE-2022-26201 State: PUBLISHED Published: 2022-03-04T13:07:17 Last Updated: 2024-08-03T04:56:37.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victor CMS v1.0 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/truonghuuphuc/CVE - https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-26201.pdf
CVE ID: CVE-2022-26205 State: PUBLISHED Published: 2022-03-27T00:31:06 Last Updated: 2024-08-03T04:56:37.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1ntLyn/marky_3686565726c65756e
CVE ID: CVE-2022-26206 State: PUBLISHED Published: 2022-03-15T21:56:13 Last Updated: 2024-08-03T04:56:37.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langType parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_
ional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_27/27.md
CVE ID: CVE-2022-26207 State: PUBLISHED Published: 2022-03-15T21:56:14 Last Updated: 2024-08-03T04:56:37.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the ipDoamin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln
tional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_28/28.md
CVE ID: CVE-2022-26208 State: PUBLISHED Published: 2022-03-15T21:56:14 Last Updated: 2024-08-03T04:56:37.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln
tional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_22/22.md
CVE ID: CVE-2022-26209 State: PUBLISHED Published: 2022-03-15T21:56:16 Last Updated: 2024-08-03T04:56:37.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUploadSetting, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vul
itional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_24/24.md
CVE ID: CVE-2022-26210 State: PUBLISHED Published: 2022-03-15T21:56:16 Last Updated: 2024-08-03T04:56:37.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_23
nal Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_23/23.md
CVE ID: CVE-2022-26211 State: PUBLISHED Published: 2022-03-15T21:56:17 Last Updated: 2024-08-03T04:56:37.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/bl
crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_25/25.md
CVE ID: CVE-2022-26212 State: PUBLISHED Published: 2022-03-15T21:56:17 Last Updated: 2024-08-03T04:56:37.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/mai
d request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_26/26.md
CVE ID: CVE-2022-26213 State: PUBLISHED Published: 2022-03-15T21:56:18 Last Updated: 2024-08-03T04:56:37.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_21/21.md
CVE ID: CVE-2022-26214 State: PUBLISHED Published: 2022-03-15T21:56:18 Last Updated: 2024-08-03T04:56:37.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the host_time parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_29/29.md
CVE ID: CVE-2022-26233 State: PUBLISHED Published: 2022-04-03T22:05:41 Last Updated: 2024-08-03T04:56:37.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2022/Apr/0 - http://packetstormsecurity.com/files/166577/Barco-Control-Room-Management-Suite-Directory-Traversal.html
CVE ID: CVE-2022-26235 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T04:56:37.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installation, the permissions set by Remisol Advance allow non-privileged users to overwrite and/or manipulate executables and libraries that run as the elevated SYSTEM user on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance - https://pastebin.com/amgw9pE7
CVE ID: CVE-2022-26236 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T04:56:37.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance - https://pastebin.com/hwrvFix5
CVE ID: CVE-2022-26237 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T04:56:37.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance - https://pastebin.com/DREqM7AT
CVE ID: CVE-2022-26238 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T04:56:37.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance - https://pastebin.com/23N5wcC7
CVE ID: CVE-2022-26239 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T04:56:37.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance - https://pastebin.com/1QEHrj01
CVE ID: CVE-2022-26240 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T04:56:37.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance - https://pastebin.com/Bsy6KTxJ