Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43932 State: PUBLISHED Published: 2023-01-05T09:02:28.484Z Last Updated: 2025-04-10T14:18:17.573Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Description: Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Containe
llows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_22_25
CVE ID: CVE-2022-43933 State: PUBLISHED Published: 2024-11-21T01:36:30.175Z Last Updated: 2024-11-21T18:01:26.215Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: SANnav Problem Types: CWE-538 Description: An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notifica
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21221
CVE ID: CVE-2022-43934 State: PUBLISHED Published: 2024-11-21T01:43:54.749Z Last Updated: 2024-11-21T18:01:26.337Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: SANnav Problem Types: CWE-327 Description: Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21220
CVE ID: CVE-2022-43935 State: PUBLISHED Published: 2024-11-21T01:51:59.741Z Last Updated: 2024-11-21T18:01:26.445Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Brocade Products: SANnav Problem Types: CWE-532 Description: An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21219
CVE ID: CVE-2022-43936 State: PUBLISHED Published: 2024-11-21T03:04:52.786Z Last Updated: 2024-11-21T18:01:26.562Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Brocade Products: SANnav Problem Types: CWE-532 Description: Brocade SANnav versions before 2.2.2 log Brocade Fabric OS switch passwords when debugging is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21218
CVE ID: CVE-2022-43937 State: PUBLISHED Published: 2024-11-21T03:26:58.406Z Last Updated: 2024-11-21T17:54:10.574Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Brocade Products: SANnav Problem Types: CWE-532 Description: Possible information exposure through log file vulnerability where sensitive fields are recorded in the debug-enabled logs when debugging is turned on in Brocade SANnav before 2.3.0 and 2.2.2a Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22509
CVE ID: CVE-2022-43938 State: PUBLISHED Published: 2023-04-03T18:06:54.133Z Last Updated: 2025-02-11T14:41:56.280Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-96 Description: Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports (*.prpt) through the JVM script manager. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14454630725645--Resolved-Pentaho-BA-Ser
SA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14454630725645--Resolved-Pentaho-BA-Server-Improper-Neutralization-of-Directives-in-Statically-Saved-Code-Static-Code-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43938-
CVE ID: CVE-2022-43939 State: PUBLISHED Published: 2023-04-03T18:10:32.141Z Last Updated: 2025-10-21T23:15:21.256Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-647 Description: Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorizat
t.pentaho.com/hc/en-us/articles/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43939- - http://packetstormsecurity.com/files/172296/Pentaho-Business-Server-Authentication-Bypass-SSTI-Code-Execution.html
CVE ID: CVE-2022-43940 State: PUBLISHED Published: 2023-04-03T18:25:33.397Z Last Updated: 2025-02-11T14:40:50.348Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-863 Description: Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14456609400973--Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-
upport.pentaho.com/hc/en-us/articles/14456609400973--Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43940-
CVE ID: CVE-2022-43941 State: PUBLISHED Published: 2023-04-03T18:44:41.398Z Last Updated: 2025-02-11T14:29:51.364Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-611 Description: Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis service endpoint of the data access plugin against out-of-band XML External Entity Reference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14456719346957--Resolved-Pentaho-
: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14456719346957--Resolved-Pentaho-BA-Server-Improper-Restriction-of-XML-External-Entity-Reference-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43940-CVE-2022-43941-
CVE ID: CVE-2022-43942 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-43943 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-43944 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-43945 State: PUBLISHED Published: 2022-11-04T00:00:00.000Z Last Updated: 2025-05-01T19:08:43.378Z Vendors: linux Products: linux_kernel Problem Types: CWE-131 Description: The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forwa
message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8 - https://security.netapp.com/advisory/ntap-20221215-0006/ - http://packetstormsecurity.com/files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html
CVE ID: CVE-2022-43946 State: PUBLISHED Published: 2023-04-11T16:06:46.259Z Last Updated: 2024-10-23T14:28:47.955Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiClientWindows Problem Types: CWE-732 Description: Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition [CWE-367] vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute commands via writing data into a windows pipe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ute commands via writing data into a windows pipe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-429
CVE ID: CVE-2022-43947 State: PUBLISHED Published: 2023-04-11T16:07:03.597Z Last Updated: 2024-10-22T20:47:20.788Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiOS, FortiProxy Problem Types: CWE-307 Description: An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-force attacks on other user accounts via injecting valid login sessions. Additional Analyst Notes: - CVE Program Contai
-force attacks on other user accounts via injecting valid login sessions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-444
CVE ID: CVE-2022-43948 State: PUBLISHED Published: 2023-04-11T16:06:08.263Z Last Updated: 2024-10-23T14:29:26.566Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb, FortiADC Problem Types: CWE-78 Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.3, FortiADC version 7.1.0 through 7.1.1, FortiADC version 7.0.0 through 7.0.3, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions allows at
ns, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions allows attacker to execute unauthorized code or commands via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-186
CVE ID: CVE-2022-43949 State: PUBLISHED Published: 2023-06-13T08:41:43.255Z Last Updated: 2024-10-22T20:45:58.544Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiSIEM Problem Types: CWE-327 Description: A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-259
CVE ID: CVE-2022-43950 State: PUBLISHED Published: 2023-05-03T21:26:50.797Z Last Updated: 2024-10-22T20:46:32.741Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiNAC Problem Types: CWE-601 Description: A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psi
RL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-407
CVE ID: CVE-2022-43951 State: PUBLISHED Published: 2023-04-11T16:05:46.705Z Last Updated: 2024-10-23T14:30:12.648Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiNAC Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-409
CVE ID: CVE-2022-43952 State: PUBLISHED Published: 2023-04-11T16:06:40.242Z Last Updated: 2024-10-22T20:47:28.460Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiADC Problem Types: CWE-79 Description: An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version 7.0.3 and below, version 6.2.5 and below may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-439
CVE ID: CVE-2022-43953 State: PUBLISHED Published: 2023-06-13T08:41:43.764Z Last Updated: 2024-10-23T14:26:46.864Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiProxy, FortiOS Problem Types: CWE-134 Description: A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
e or commands via specially crafted commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-463
CVE ID: CVE-2022-43954 State: PUBLISHED Published: 2023-02-16T18:05:20.138Z Last Updated: 2024-10-22T20:50:45.705Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:X/RC:R) Vendors: Fortinet Products: FortiPortal Problem Types: CWE-532 Description: An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0.0 through 7.0.2 may allow a remote authenticated attacker to read other devices' passwords in the audit log page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-430
CVE ID: CVE-2022-43955 State: PUBLISHED Published: 2023-04-11T16:06:43.147Z Last Updated: 2024-10-23T14:29:00.243Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-79 Description: An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.3.21, 6.4 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow an unauthenticated and remote attacker to perform a reflected cross site scripting attack (XSS) via injecting malicious payload in log entries used to build report. Additional Analyst Notes: - CVE Prog
g attack (XSS) via injecting malicious payload in log entries used to build report. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-428
CVE ID: CVE-2022-43958 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-04-21T13:46:20.800Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:U/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-256 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database without any hashing mechanism. This could allow an attacker to gain access to credentials and impersonate other users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/produ
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-587547.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2022-43959 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-02T16:00:55.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the source code of /bitrix/admin/ldap_server_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bitrix24.com/prices/self-hosted.php - https://www.bitrix24.com/security/ - https://github.com/secware-ru/CVE-2022-43959
CVE ID: CVE-2022-43967 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-05-13T19:25:45.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the multilingual report due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/concretecms/concretecms/releases/9.1.3 - https://github.com/concretecms/concretecms/releases/8.5.10 - https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes -
ecms/releases/8.5.10 - https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes - https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31
CVE ID: CVE-2022-43968 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-05-13T19:25:59.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/concretecms/concretecms/releases/9.1.3 - https://github.com/concretecms/concretecms/releases/8.5.10 - https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes - htt
/releases/8.5.10 - https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes - https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31
CVE ID: CVE-2022-43969 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T14:43:06.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ricoh.com/software/dev_soft_manager - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2022-000002
CVE ID: CVE-2022-43970 State: PUBLISHED Published: 2023-01-09T00:00:00.000Z Last Updated: 2025-04-09T14:26:11.008Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Linksys Products: WRT54GL Wireless-G Broadband Router Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST req
underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/73-1lhvJPNg - https://youtu.be/TeWAmZaKQ_w - https://youtu.be/RfWVYCUBNZ0
CVE ID: CVE-2022-43971 State: PUBLISHED Published: 2023-01-09T00:00:00.000Z Last Updated: 2025-04-09T14:23:20.652Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Linksys Products: Linksys WUMC710 Wireless-AC Universal Media Connector Problem Types: CWE-78 Description: An arbitrary code exection vulnerability exists in Linksys WUMC710 Wireless-AC Universal Media Connector with firmware <= 1.0.02 (build3). The do_setNTP function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious GET or POST request to
er with administrator privileges can leverage this vulnerability over the network via a malicious GET or POST request to /setNTP.cgi to execute arbitrary commands on the underlying Linux operating system as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/73-1lhvJPNg - https://youtu.be/TeWAmZaKQ_w - https://youtu.be/RfWVYCUBNZ0