Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-22-24
CVE ID: CVE-2022-27595 State: PUBLISHED Published: 2024-12-19T01:39:46.448Z Last Updated: 2024-12-20T17:41:46.284Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QVPN Windows Problem Types: CWE-427 Description: An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windows 2.0.0.1316 and later QVPN Windows 2.0.0.1310 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
16 and later QVPN Windows 2.0.0.1310 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-04
CVE ID: CVE-2022-27596 State: PUBLISHED Published: 2023-01-30T01:13:47.317Z Last Updated: 2025-03-27T18:24:56.700Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QuTS hero, QTS Problem Types: CWE-89 Description: A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build 20221201 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
.1.2234 build 20221201 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-01
CVE ID: CVE-2022-27597 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-12T19:32:39.994Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-1295, CWE-489, CWE-125 Description: A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later Q
appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-06
CVE ID: CVE-2022-27598 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-12T19:32:03.826Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-125 Description: A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.234
already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-06
CVE ID: CVE-2022-27599 State: PUBLISHED Published: 2023-09-08T01:58:10.128Z Last Updated: 2024-09-26T16:12:33.924Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QVR Pro Client Problem Types: CWE-532 Description: An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 an
the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-08
CVE ID: CVE-2022-27600 State: PUBLISHED Published: 2024-12-19T01:39:38.167Z Last Updated: 2024-12-20T17:41:53.027Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-400, CWE-798 Description: An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later Q
sions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-09
CVE ID: CVE-2022-27607 State: PUBLISHED Published: 2022-03-21T22:06:47 Last Updated: 2024-08-03T05:32:59.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/677
CVE ID: CVE-2022-27608 State: PUBLISHED Published: 2022-04-04T19:45:36 Last Updated: 2024-08-03T05:32:59.658Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Forcepoint Products: One Endpoint Problem Types: CWE-863 Description: Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the protection offered by it. Additional Analyst Notes: - CVE Program Container: References: - https://help.forcepoint.com/security/CVE/CVE-2022-27
t. Additional Analyst Notes: - CVE Program Container: References: - https://help.forcepoint.com/security/CVE/CVE-2022-27608.html
CVE ID: CVE-2022-27609 State: PUBLISHED Published: 2022-04-04T19:45:38 Last Updated: 2024-08-03T05:32:59.872Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Forcepoint Products: One Endpoint Problem Types: CWE-863 Description: Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling Forcepoint One Endpoint and the protection offered by it. Additional Analyst Notes: - CVE Program Container: References: - https://help.forcepoint.com/security/CVE/CVE-2022-27609.html
CVE ID: CVE-2022-27610 State: PUBLISHED Published: 2022-07-27T08:00:15.536299Z Last Updated: 2024-09-16T20:03:49.775Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25423 allows remote authenticated users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_06
CVE ID: CVE-2022-27611 State: PUBLISHED Published: 2022-07-28T07:10:28.828865Z Last Updated: 2024-09-16T16:58:23.582Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Synology Products: Audio Station Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_21
CVE ID: CVE-2022-27612 State: PUBLISHED Published: 2022-07-28T07:10:12.295071Z Last Updated: 2024-09-17T00:45:58.126Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Synology Products: Audio Station Problem Types: CWE-120 Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_21
CVE ID: CVE-2022-27613 State: PUBLISHED Published: 2022-07-28T06:35:11.777016Z Last Updated: 2024-09-17T01:40:51.399Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Synology Products: CardDAV Server Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_06
CVE ID: CVE-2022-27614 State: PUBLISHED Published: 2022-07-28T06:55:12.139529Z Last Updated: 2024-09-17T03:48:14.077Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Media Server Problem Types: CWE-200 Description: Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_24
CVE ID: CVE-2022-27615 State: PUBLISHED Published: 2022-07-28T04:00:16.877008Z Last Updated: 2024-09-16T23:16:05.261Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Synology Products: DNS Server Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_27
CVE ID: CVE-2022-27616 State: PUBLISHED Published: 2022-08-03T02:10:09.331392Z Last Updated: 2024-09-16T18:07:57.824Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 7.0.1-42218-3 allows remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_03
CVE ID: CVE-2022-27617 State: PUBLISHED Published: 2022-08-03T02:15:14.592788Z Last Updated: 2024-09-16T22:55:31.383Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Synology Products: Synology Calendar Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to download arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_07
CVE ID: CVE-2022-27618 State: PUBLISHED Published: 2022-08-03T02:20:13.652822Z Last Updated: 2024-09-16T17:03:10.482Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Synology Products: Storage Analyzer Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_11
CVE ID: CVE-2022-27619 State: PUBLISHED Published: 2022-08-03T02:25:12.115302Z Last Updated: 2024-09-17T02:46:46.570Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Synology Products: Synology Note Station Client Problem Types: CWE-319 Description: Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_12
CVE ID: CVE-2022-27620 State: PUBLISHED Published: 2022-08-03T02:55:10.286711Z Last Updated: 2024-09-16T22:45:35.273Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Synology Products: SSO Server Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_13
CVE ID: CVE-2022-27621 State: PUBLISHED Published: 2022-08-03T05:55:11.765753Z Last Updated: 2024-09-17T01:50:43.181Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Synology Products: USB Copy Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_14
CVE ID: CVE-2022-27622 State: PUBLISHED Published: 2022-10-25T16:30:54.412Z Last Updated: 2025-05-07T18:54:38.687Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access intranet resources via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_22_18
CVE ID: CVE-2022-27623 State: PUBLISHED Published: 2022-10-25T16:30:49.757Z Last Updated: 2025-05-07T18:55:42.714Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-306 Description: Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_22_18
CVE ID: CVE-2022-27624 State: PUBLISHED Published: 2022-10-20T05:50:20.654Z Last Updated: 2025-05-07T14:44:17.518Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-119 Description: A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst
kStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_22_17
CVE ID: CVE-2022-27625 State: PUBLISHED Published: 2022-10-20T05:50:14.818Z Last Updated: 2025-05-07T20:50:26.447Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-119 Description: A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst
skStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_22_17
CVE ID: CVE-2022-27626 State: PUBLISHED Published: 2022-10-20T05:50:10.327Z Last Updated: 2025-05-08T13:42:27.475Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-362 Description: A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500
els with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_22_17
CVE ID: CVE-2022-27627 State: PUBLISHED Published: 2022-07-04T06:55:50 Last Updated: 2024-08-03T05:32:59.802Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-27628 State: PUBLISHED Published: 2023-02-06T12:14:20.597Z Last Updated: 2025-01-13T15:57:52.791Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: AA-Team Products: WZone – Lite Version Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-amazon-affiliates-light-version/wordpress-wzone-lite-version-plugin-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-27629 State: PUBLISHED Published: 2022-04-20T01:05:12 Last Updated: 2024-08-03T05:32:59.802Z Vendors: VideoWhisper Products: MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset?new=2362275%40paid-m
Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset?new=2362275%40paid-membership&old=2345274%40paid-membership - https://wordpress.org/plugins/paid-membership/ - https://jvn.jp/en/jp/JVN31606885/index.html
CVE ID: CVE-2022-27630 State: PUBLISHED Published: 2022-08-05T21:19:21.446Z Last Updated: 2025-04-15T18:53:34.654Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-200 Description: An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1504
CVE ID: CVE-2022-27631 State: PUBLISHED Published: 2022-08-05T21:19:29.848Z Last Updated: 2025-04-15T18:53:26.678Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: DD-WRT Products: DD-WRT Problem Types: CWE-787 Description: A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1510
CVE ID: CVE-2022-27632 State: PUBLISHED Published: 2022-05-18T09:50:21 Last Updated: 2024-08-03T05:32:59.997Z Vendors: MEIKYO ELECTRIC CO.,LTD. Products: Rebooter, PoE Rebooter, Scheduler, and Contact Converter Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT light RPC-M5C [End of Sale] all firmware versions, WATCH BOOT L-zero RPC-M4L [End of Sale] all firmware versions, WATCH BOOT mini RPC-M4H [End of Sale] all firmware versions, WATCH BOOT nino RPC-M2CS firmware version 1.00A to 1.00D, WATCH BOOT light RPC-M5CS firmware version 1.00A to 1.00D, WATCH BOOT