Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32927 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T19:09:18.388Z Vendors: Apple Products: iOS and iPadOS Problem Types: Joining a malicious Wi-Fi network may result in a denial-of-service of the Settings app Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. Joining a malicious Wi-Fi network may result in a denial-of-service of the Settings app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32928 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:56:33.107Z Vendors: Apple Products: macOS, watchOS Problem Types: A user in a privileged network position may be able to intercept mail credentials Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213446 - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213486
CVE ID: CVE-2022-32929 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:53:43.010Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to access iOS backups Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 15.7 and iPadOS 15.7, iOS 16.1 and iPadOS 16. An app may be able to access iOS backups. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213445 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32930 State: REJECTED Published: N/A Last Updated: 2023-05-08T00:00:00 Description: No description available.
CVE ID: CVE-2022-32931 State: PUBLISHED Published: 2024-01-10T22:03:26.754Z Last Updated: 2025-05-15T15:09:12.257Z Vendors: Apple Products: macOS Problem Types: An app with root privileges may be able to access private information Description: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app with root privileges may be able to access private information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-32932 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:51:29.359Z Vendors: Apple Products: iOS and iPadOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213491 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32933 State: PUBLISHED Published: 2024-06-10T19:21:22.941Z Last Updated: 2025-03-18T15:24:33.267Z Vendors: Apple Products: macOS Problem Types: A website may be able to track the websites a user visited in Safari private browsing mode Description: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the websites a user visited in Safari private browsing mode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213345
CVE ID: CVE-2022-32934 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:50:04.324Z Vendors: Apple Products: macOS Problem Types: A remote user may be able to cause kernel code execution Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be able to cause kernel code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213443 - https://support.apple.com/en-us/HT213444 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-32935 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:48:13.462Z Vendors: Apple Products: macOS Problem Types: A user may be able to view restricted content from the lock screen Description: A lock screen issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. A user may be able to view restricted content from the lock screen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32936 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:44:01.194Z Vendors: Apple Products: macOS Problem Types: An app may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-32938 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:43:10.141Z Vendors: Apple Products: macOS Problem Types: A shortcut may be able to check the existence of an arbitrary path on the file system Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. A shortcut may be able to check the existence of an arbitrary path on the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213489
CVE ID: CVE-2022-32939 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:39:30.371Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32940 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:34:54.041Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213492 - https://suppo
com/en-us/HT213488 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213492 - https://support.apple.com/en-us/HT213491
CVE ID: CVE-2022-32941 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:06:50.859Z Vendors: Apple Products: macOS Problem Types: A buffer overflow may result in arbitrary code execution Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213493 - https://support.apple.com/en-us/HT213494 -
support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213493 - https://support.apple.com/en-us/HT213494 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32942 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:21:24.886Z Vendors: Apple Products: macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213534 - https://support.apple.com/en-us/HT213533 - http://seclists.org/fulldis
3532 - https://support.apple.com/en-us/HT213534 - https://support.apple.com/en-us/HT213533 - http://seclists.org/fulldisclosure/2022/Dec/25 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/24
CVE ID: CVE-2022-32943 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:19:48.118Z Vendors: Apple Products: macOS Problem Types: Shake-to-undo may allow a deleted photo to be re-surfaced without authentication Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.
/HT213532 - https://support.apple.com/en-us/HT213530 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23
CVE ID: CVE-2022-32944 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:04:49.365Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213493 - https://support.apple.com/en-us/HT213494 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213492 - https://support.apple.com/en-us/HT213491 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32945 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:18:41.279Z Vendors: Apple Products: macOS Problem Types: An app may be able to record audio with paired AirPods Description: An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/kb/HT213489 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-32946 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:03:33.775Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to record audio using a pair of connected AirPods Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connected AirPods. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213489
CVE ID: CVE-2022-32947 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T18:01:34.762Z Vendors: Apple Products: macOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213491
CVE ID: CVE-2022-32948 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-18T19:16:01.190Z Vendors: Apple Products: macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213346
CVE ID: CVE-2022-32949 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:56:24.484Z Vendors: Apple Products: iOS and iPadOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213487 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-32951 State: REJECTED Published: 2022-07-11T18:26:36 Last Updated: 2022-07-11T18:26:36 Description: No description available.
CVE ID: CVE-2022-32952 State: REJECTED Published: N/A Last Updated: 2023-01-27T00:00:00 Description: No description available.
CVE ID: CVE-2022-32953 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-05-05T16:15:15.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU protection for the ACPI runtime memory used for the command buffer. This attack can be mitigated by copying the link data to SMRAM before checking it and verifying that all pointers are within the buffer. Additional Analyst Notes:
link data to SMRAM before checking it and verifying that all pointers are within the buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2023013
CVE ID: CVE-2022-32954 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-20T13:52:00.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU protection for the ACPI runtime memory used for the command buffer. This attack can be mitigated by copying the link data to SMRAM before checking it and verifying that all pointers are within the buffer. Additional Analyst Notes: -
link data to SMRAM before checking it and verifying that all pointers are within the buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2023014
CVE ID: CVE-2022-32955 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:48:21.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU protection for the ACPI runtime memory used for the command buffer. This attack can be mitigated by copying the link data to SMRAM before checking it and verifying that all pointers are within the buffer. Additional Analyst Notes:
e link data to SMRAM before checking it and verifying that all pointers are within the buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2023015
CVE ID: CVE-2022-32958 State: PUBLISHED Published: 2022-07-20T02:01:55.027153Z Last Updated: 2024-09-17T04:05:10.223Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: TEAMPLUS TECHNOLOGY INC. Products: Teamplus Pro (Private cloud) Problem Types: CWE-770 Description: A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6289-a5524-1.html
CVE ID: CVE-2022-32959 State: PUBLISHED Published: 2022-07-20T02:02:25.360130Z Last Updated: 2024-09-17T01:31:04.086Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HINET Products: HiCOS’ client-side citizen digital certificate Problem Types: CWE-787 Description: HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: - ht
y code, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6290-738fe-1.html
CVE ID: CVE-2022-32960 State: PUBLISHED Published: 2022-07-20T02:02:51.701377Z Last Updated: 2024-09-16T16:48:27.253Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HINET Products: HiCOS’ client-side citizen digital certificate Problem Types: CWE-787 Description: HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: - https
ode, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6291-f58b5-1.html
CVE ID: CVE-2022-32961 State: PUBLISHED Published: 2022-07-20T02:03:13.812729Z Last Updated: 2024-09-16T16:53:04.178Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HINET Products: HiCOS’ client-side citizen digital certificate Problem Types: CWE-787 Description: HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: -
rary code, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6292-fb267-1.html
CVE ID: CVE-2022-32962 State: PUBLISHED Published: 2022-07-20T02:03:43.658699Z Last Updated: 2024-09-16T18:24:45.620Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HINET Products: HiCOS’ client-side citizen digital certificate Problem Types: CWE-415 Description: HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6293-86576-1.html
CVE ID: CVE-2022-32963 State: PUBLISHED Published: 2022-08-04T09:15:25.734952Z Last Updated: 2024-09-17T03:34:25.684Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ITPison Products: OMICARD EDM Problem Types: CWE-22 Description: OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6371-05bdc-1.html - https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f
CVE ID: CVE-2022-32964 State: PUBLISHED Published: 2022-08-04T09:15:27.394553Z Last Updated: 2024-09-17T03:43:33.094Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ITPison Products: OMICARD EDM Problem Types: CWE-89 Description: OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6372-f61bc-1.html - https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f
CVE ID: CVE-2022-32965 State: PUBLISHED Published: 2022-08-04T09:15:28.816526Z Last Updated: 2024-09-16T20:57:26.072Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ITPison Products: OMICARD EDM Problem Types: CWE-798 Description: OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6373-34d51-1.html - https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f
CVE ID: CVE-2022-32966 State: PUBLISHED Published: 2022-11-29T03:30:26.503Z Last Updated: 2025-04-24T18:00:48.672Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Realtek Products: RTL8111FP-CG Problem Types: CWE-862 Description: RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6739-5098c-1.html