Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-22356 State: PUBLISHED Published: 2023-08-11T02:37:30.745Z Last Updated: 2024-10-01T20:52:29.289Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: information disclosure, CWE-665 Description: Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE ID: CVE-2023-22357 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T17:42:19.921Z Vendors: OMRON Corporation Products: CP1L-EL20DR-D Problem Types: Active debug code Description: Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/v
execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU97575890/index.html
CVE ID: CVE-2023-22358 State: PUBLISHED Published: 2023-02-01T17:54:31.501Z Last Updated: 2025-03-26T18:02:11.485Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: APM Clients Problem Types: CWE-427 Description: In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K76964818
CVE ID: CVE-2023-22359 State: PUBLISHED Published: 2023-06-26T06:51:24.193Z Last Updated: 2024-08-28T20:25:29.123Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-203 Description: User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/15890
CVE ID: CVE-2023-22360 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:26:00.479Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Use-after-free Description: Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/
E Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/ - https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ - https://jvn.jp/en/vu/JVNVU98917488/
CVE ID: CVE-2023-22361 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T14:55:30.333Z Vendors: Seiko Solutions Inc. Products: SkyBridge MB-A100/110 Problem Types: Improper privilege management Description: Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seiko-sol.co.jp/archives/73969/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a
/products/skybridge/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ - https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ - https://jvn.jp/en/jp/JVN40604023/
CVE ID: CVE-2023-22362 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:32:31.724Z Vendors: AKINDO SUSHIRO CO., LTD. Products: SUSHIRO App for Android Problem Types: Insertion of sensitive information into log file Description: SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.go
HIRO Ver.2.0.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp - https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp - https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp - https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp - https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp - https://jvn.jp/en/jp/JVN84642320/
CVE ID: CVE-2023-22363 State: PUBLISHED Published: 2023-07-24T23:09:14.127Z Last Updated: 2024-10-17T13:04:52.691Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Gallagher Products: Command Centre Problem Types: CWE-121 Description: A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-22363
CVE ID: CVE-2023-22365 State: PUBLISHED Published: 2023-07-06T14:53:29.440Z Last Updated: 2025-03-05T18:54:39.354Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted set of network packets can lead to command execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1711
CVE ID: CVE-2023-22366 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-03T19:23:20.238Z Vendors: OMRON Corporation Products: CX-Motion-MCH Problem Types: Access of uninitialized pointer Description: CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU91744508/index.html
CVE ID: CVE-2023-22367 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:24:22.270Z Vendors: Betrend Corporation and ICHIRAN INC. Products: Ichiran App for iOS and Ichiran App for Android Problem Types: Improper certificate validation Description: Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://apps.apple.com/jp/app/%E4%B8%80%E8%98%AD%E5%85%AC%E5%BC%8F%E3%8
ontainer: - CISA ADP Vulnrichment: References: - https://apps.apple.com/jp/app/%E4%B8%80%E8%98%AD%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1118806170 - https://play.google.com/store/apps/details?id=jp.co.ichiran.app&hl=ja - https://jvn.jp/en/jp/JVN11257333/
CVE ID: CVE-2023-22368 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:40:30.336Z Vendors: ELECOM CO.,LTD. Products: ELECOM Camera Assistant and QuickFileDealer Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230214-01/ - https://jvn.jp/en/jp/JVN60263237/
CVE ID: CVE-2023-22369 State: REJECTED Published: N/A Last Updated: 2023-02-10T00:00:00 Description: No description available.
CVE ID: CVE-2023-22370 State: PUBLISHED Published: 2023-02-14T00:00:00 Last Updated: 2024-08-02T10:07:06.645Z Vendors: PLANEX COMMUNICATIONS INC. Products: Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G Problem Types: Stored cross-site scripting Description: Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer. Additional Analyst Notes: - CVE Program Container: References: - https://www.planex.co.jp/support/support_end_list.shtml - https://jvn.jp/en/jp/JVN986
E Program Container: References: - https://www.planex.co.jp/support/support_end_list.shtml - https://jvn.jp/en/jp/JVN98612206/
CVE ID: CVE-2023-22371 State: PUBLISHED Published: 2023-07-06T14:53:31.757Z Last Updated: 2024-08-02T10:07:06.784Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: MilesightVPN Problem Types: CWE-77 Description: An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1703
CVE ID: CVE-2023-22372 State: PUBLISHED Published: 2023-05-03T14:30:55.988Z Last Updated: 2025-01-29T21:45:41.523Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: F5 Products: BIG-IP Edge Client Problem Types: CWE-924 Description: In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000132522
CVE ID: CVE-2023-22373 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:04:31.151Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogg
434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf - https://jvn.jp/en/vu/JVNVU96873821 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03
CVE ID: CVE-2023-22374 State: PUBLISHED Published: 2023-02-01T17:54:46.798Z Last Updated: 2025-03-26T17:51:00.789Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-134 Description: A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP
eached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000130415
CVE ID: CVE-2023-22375 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T20:31:48.063Z Vendors: PLANEX COMMUNICATIONS INC. Products: Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability only affects products that are no longer supported by the developer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
products that are no longer supported by the developer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.planex.co.jp/support/support_end_list.shtml - https://jvn.jp/en/jp/JVN98612206/
CVE ID: CVE-2023-22376 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T20:24:06.004Z Vendors: PLANEX COMMUNICATIONS INC. Products: Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G Problem Types: Reflected cross-site scripting Description: Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to inject arbitrary script to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.planex.co.jp/suppo
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.planex.co.jp/support/support_end_list.shtml - https://jvn.jp/en/jp/JVN98612206/
CVE ID: CVE-2023-22377 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:36:31.386Z Vendors: FUJITSU LIMITED Products: tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools Problem Types: Improper restriction of XML external entity reference Description: Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0. If this vulnerability is exploited, an attacker may obtain an arbitrary file which meets a certain condition by reading a specially crafted XML file. Additional Analyst Notes: - CV
n arbitrary file which meets a certain condition by reading a specially crafted XML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tsClinical/tsc-desktop/security/advisories - https://jvn.jp/en/jp/JVN00712821/
CVE ID: CVE-2023-22378 State: PUBLISHED Published: 2023-08-09T08:01:57.279Z Last Updated: 2024-09-20T11:53:39.116Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-89 Description: A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application. Authenticated users may be able to extract arbitrary information from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability. Additional Analyst Note
m the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:2-01
CVE ID: CVE-2023-22379 State: PUBLISHED Published: 2023-05-10T13:17:05.067Z Last Updated: 2025-01-27T18:03:07.190Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: n/a Products: Intel(R) Server Board BMC firmware Problem Types: information disclosure, CWE-20 Description: Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
CVE ID: CVE-2023-22380 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T15:35:56.135Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-22 Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.6. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - C
fixed in version 3.7.6. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.6
CVE ID: CVE-2023-22381 State: PUBLISHED Published: 2023-03-02T20:54:34.191Z Last Updated: 2025-03-05T20:05:02.297Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-94 Description: A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environment variable value in GitHub Actions when using a Windows based runner. To exploit this vulnerability, an attacker would need existing permission to control the value of environment variables for use with GitHub Actions. This vulnerability affected all versions of GitHub Enterprise S
ue of environment variables for use with GitHub Actions. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.8.0 and was fixed in versions 3.4.15, 3.5.12, 3.6.8, 3.7.5. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.5 - https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.8 - https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.12 - https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.15 - https://docs.github.com/en/enterpris
.12 - https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.15 - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes
CVE ID: CVE-2023-22382 State: PUBLISHED Published: 2023-10-03T05:00:21.102Z Last Updated: 2025-02-27T20:48:27.191Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Weak configuration in Automotive while VM is processing a listener request from TEE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-22383 State: PUBLISHED Published: 2023-12-05T03:03:44.642Z Last Updated: 2024-08-02T10:07:06.566Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory Corruption in camera while installing a fd for a particular DMA buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-22384 State: PUBLISHED Published: 2023-10-03T05:00:22.216Z Last Updated: 2025-02-27T20:48:21.257Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-22385 State: PUBLISHED Published: 2023-10-03T05:00:23.604Z Last Updated: 2024-08-02T10:07:06.546Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE ID: CVE-2023-22386 State: PUBLISHED Published: 2023-07-04T04:46:39.094Z Last Updated: 2024-08-02T10:07:06.733Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin
CVE ID: CVE-2023-22387 State: PUBLISHED Published: 2023-07-04T04:46:40.252Z Last Updated: 2024-08-02T10:07:06.588Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin
CVE ID: CVE-2023-22388 State: PUBLISHED Published: 2023-11-07T05:26:29.886Z Last Updated: 2025-02-05T18:07:08.902Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory Corruption in Multi-mode Call Processor while processing bit mask API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin