Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43473 State: PUBLISHED Published: 2023-03-30T16:28:35.983Z Last Updated: 2025-02-11T19:14:03.416Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ManageEngine Products: OpManager Problem Types: CWE-611 Description: A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1685 - https://www.manageengin
ulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1685 - https://www.manageengine.com/itom/advisory/cve-2022-43473.html
CVE ID: CVE-2022-43474 State: PUBLISHED Published: 2023-05-10T13:17:23.916Z Last Updated: 2025-01-27T17:58:34.191Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: DSP Builder software installer for Intel(R) FPGAs Pro Edition Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/
gram Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html
CVE ID: CVE-2022-43475 State: PUBLISHED Published: 2023-05-10T13:17:12.975Z Last Updated: 2025-01-27T18:00:36.718Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) DCM software Problem Types: escalation of privilege, CWE-922 Description: Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00806.html
CVE ID: CVE-2022-43476 State: PUBLISHED Published: 2025-01-02T14:23:25.250Z Last Updated: 2025-01-02T14:43:15.256Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Daniel Söderström / Sidney van de Stouwe Products: Subscribe to Category Problem Types: CWE-862 Description: Missing Authorization vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe to Category: from n/a through 2.7.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/subscribe-to-category/vulnerability/word
DP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/subscribe-to-category/vulnerability/wordpress-subscribe-to-category-plugin-2-7-1-auth-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-43477 State: PUBLISHED Published: 2023-11-14T19:04:34.472Z Last Updated: 2024-08-30T16:07:28.575Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel Unison software Problem Types: information disclosure, CWE-459 Description: Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2022-43479 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:14:26.052Z Vendors: SHIRASAGI Project Products: SHIRASAGI Problem Types: Open Redirect Description: Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ss-proj.org/ - https://github.com/shirasagi/shirasagi - https://www.ss-proj.org/support/928.html - https://jvn.jp/en/jp/JVN86350682/index.html
CVE ID: CVE-2022-43480 State: PUBLISHED Published: 2023-04-16T08:20:39.876Z Last Updated: 2025-01-10T18:53:29.175Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Magneticlab Sàrl Products: Homepage Pop-up Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/homepage-pop-up/wordpress-homepage-pop-up-plugin-1-2-5-unauth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-43481 State: PUBLISHED Published: 2022-11-08T18:14:11.618Z Last Updated: 2025-02-20T19:56:12.932Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Rymera Web Co Products: Advanced Coupons (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Advanced Coupons for WooCommerce Coupons plugin <= 4.5 on WordPress leading to notice dismissal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-coupons-for-woocommerce-free/wordpress-advanced-coupons-for-woocommerce-coupons-plugin-4-5-cross-site-request-forg
anced-coupons-for-woocommerce-free/wordpress-advanced-coupons-for-woocommerce-coupons-plugin-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/advanced-coupons-for-woocommerce-free/
CVE ID: CVE-2022-43482 State: PUBLISHED Published: 2022-11-18T19:03:50.226Z Last Updated: 2025-02-20T19:52:17.691Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: Appointment Booking Calendar (WordPress plugin) Problem Types: CWE-862 Description: Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/appointment-booking-calendar/wordpress-appointment-booking-calendar-plugin-1-3-69-missing-authorization-vulnerability?_s_id=cve
CVE ID: CVE-2022-43483 State: PUBLISHED Published: 2023-01-18T00:37:49.835Z Last Updated: 2025-01-16T22:00:18.908Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Sewio Products: RTLS Studio Problem Types: CWE-78 Description: Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisor
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01
CVE ID: CVE-2022-43484 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:12:57.290Z Vendors: NTT DATA Corporation Products: TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) Problem Types: ClassLoader manipulation vulnerability Description: TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing
y is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://terasolunaorg.github.io/vulnerability/cve-2022-43484.html - https://osdn.net/projects/terasoluna/wiki/cve-2022-43484 - https://jvn.jp/en/jp/JVN54728399/index.html
CVE ID: CVE-2022-43485 State: PUBLISHED Published: 2023-05-30T16:19:24.146Z Last Updated: 2025-01-09T21:27:01.369Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: Honeywell Products: OneWireless Problem Types: CWE-330 Description: Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com/
CVE ID: CVE-2022-43486 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:34:25.560Z Vendors: BUFFALO INC. Products: WXR-5700AX7S, WXR-5700AX7B, WSR-3200AX4S, WSR-3200AX4B, WSR-2533DHP, WSR-2533DHP2, WSR-A2533DHP2, WSR-2533DHP3, WSR-A2533DHP3, WSR-2533DHPL, WSR-2533DHPL2, WSR-2533DHPLS, WSR-2533DHPLB, WCR-1166DS, WEX-1800AX4, WEX-1800AX4EA Problem Types: Hidden Functionality Description: Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices. Additional Analyst Notes: - CVE Program Container: - CI
lities and execute an arbitrary command on the affected devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20240131-01.html - https://jvn.jp/en/vu/JVNVU97099584/
CVE ID: CVE-2022-43487 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:11:35.993Z Vendors: Salon Booking System Products: Salon booking system Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/salon-booking-system/ - https://www.salonbookingsystem.com/ - https://jvn.jp/en/jp/JVN59663854/index.html
CVE ID: CVE-2022-43488 State: PUBLISHED Published: 2022-11-09T15:44:58.303Z Last Updated: 2025-02-20T19:54:43.820Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AlgolPlus Products: Advanced Dynamic Pricing for WooCommerce (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to rule type migration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/advanced-dynamic-pricing-for-woocommerce/ - https://patchstack.com/database/vulnerability/advanced-dynamic-pricing
ugins/advanced-dynamic-pricing-for-woocommerce/ - https://patchstack.com/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plugin-4-1-5-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE ID: CVE-2022-43490 State: PUBLISHED Published: 2023-05-25T10:17:18.016Z Last Updated: 2025-01-08T21:59:19.967Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: XWP Products: Stream Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in XWP Stream plugin <= 3.9.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/stream/wordpress-stream-plugin-3-9-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-43491 State: PUBLISHED Published: 2022-11-08T18:12:18.667Z Last Updated: 2025-02-20T19:56:19.917Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AlgolPlus Products: Advanced Dynamic Pricing for WooCommerce (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plu
m/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plugin-4-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/advanced-dynamic-pricing-for-woocommerce/
CVE ID: CVE-2022-43492 State: PUBLISHED Published: 2022-11-18T22:08:14.066Z Last Updated: 2025-02-20T19:51:13.690Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: gVectors Team Products: Comments – wpDiscuz (WordPress plugin) Problem Types: Insecure Direct Object References (IDOR) Description: Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wpdiscuz/#developers - https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-comments-wpdiscuz-plugin-7-4-2-insecur
uz/#developers - https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-comments-wpdiscuz-plugin-7-4-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2022-43493 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:19.002Z Description: No description available.
CVE ID: CVE-2022-43494 State: PUBLISHED Published: 2023-01-17T23:48:30.139Z Last Updated: 2025-01-16T22:00:56.730Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GE Digital Products: Proficy Historian Problem Types: CWE-284 Description: An unauthorized user could be able to read any file on the system, potentially exposing sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01 - https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01
CVE ID: CVE-2022-43495 State: PUBLISHED Published: 2022-11-03T19:15:16.052Z Last Updated: 2025-04-30T14:38:12.462Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-476 Description: OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a network. Network attakcers can send an abonormal packet when joining a network, cause a nullptr reference and device reboot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-11.md
CVE ID: CVE-2022-43496 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:29:39.108Z Description: No description available.
CVE ID: CVE-2022-43497 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:09:56.927Z Vendors: WordPress.org Products: WordPress Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/download/ - https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/ - https://jvn.jp/en/jp/JVN09409909/index.html
CVE ID: CVE-2022-43498 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:10.914Z Description: No description available.
CVE ID: CVE-2022-43499 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:08:54.850Z Vendors: SHIRASAGI Project Products: SHIRASAGI Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ss-proj.org/ - https://github.com/shirasagi/shirasagi - https://www.ss-proj.org/support/928.html - https://jvn.jp/en/jp/JVN86350682/index.html
CVE ID: CVE-2022-43500 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:06:16.807Z Vendors: WordPress.org Products: WordPress Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/download/ - https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/ - https://jvn.jp/en/jp/JVN09409909/index.html
CVE ID: CVE-2022-43501 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:11:03.974Z Vendors: ZUKEN Elmic Products: Kasago IPv6/v4 Dual, Kasago IPv4, Kasago IPv4 Light, Kasago mobile IPv6 Problem Types: CWE-330 Description: KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elwsc.co.jp/news/6352 - https://jvn.jp/en/vu/JVNVU99551468/
CVE ID: CVE-2022-43502 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:20.046Z Description: No description available.
CVE ID: CVE-2022-43503 State: REJECTED Published: N/A Last Updated: 2022-12-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-43504 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:04:17.689Z Vendors: WordPress.org Products: WordPress Problem Types: Improper authentication Description: Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/download/ - https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/ - h
References: - https://wordpress.org/download/ - https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/ - https://jvn.jp/en/jp/JVN09409909/index.html
CVE ID: CVE-2022-43505 State: PUBLISHED Published: 2023-08-11T02:37:02.568Z Last Updated: 2025-02-13T16:33:28.194Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: denial of service, CWE-691 Description: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html - https://security.netapp.com/advisory/ntap-20230824-0001/
CVE ID: CVE-2022-43506 State: PUBLISHED Published: 2022-11-17T22:45:55.514Z Last Updated: 2025-04-16T17:42:35.524Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-43507 State: PUBLISHED Published: 2023-05-10T13:17:22.375Z Last Updated: 2025-01-27T17:58:59.168Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT Engine for OpenSSL Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00798.html
CVE ID: CVE-2022-43508 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:46:05.306Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Use-after-free Description: Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU92877622/index.html - https://jvn.jp/vu/JVNVU92877622/index.html
CVE ID: CVE-2022-43509 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:18:24.192Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Out-of-bounds Write Description: Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU92877622/index.html - https://jvn.jp/vu/JVNVU92877622/index.html
CVE ID: CVE-2022-43510 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:12.301Z Description: No description available.
CVE ID: CVE-2022-43511 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:13.704Z Description: No description available.
CVE ID: CVE-2022-43512 State: PUBLISHED Published: 2023-03-21T22:19:09.431Z Last Updated: 2025-01-17T22:07:51.279Z Vendors: VISAM Products: VBASE Problem Types: cwe-611 Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05
CVE ID: CVE-2022-43513 State: PUBLISHED Published: 2023-01-10T11:39:38.879Z Last Updated: 2025-04-09T14:05:21.922Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: Automation License Manager V5, Automation License Manager V6, TeleControl Server Basic V3 Problem Types: CWE-73 Description: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected components allow to rename license files with user chosen input without authentication. This could allow an unauthenticated remote atta