Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41763 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-08-03T12:49:43.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-41765 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:25:23.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUserTextField exposes the existence of hidden users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T309894 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-41766 State: PUBLISHED Published: 2023-05-29T00:00:00 Last Updated: 2025-01-14T15:25:06.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name (when the user has been revision deleted/suppressed). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T307278
CVE ID: CVE-2022-41767 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:23:14.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T316304 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-41769 State: PUBLISHED Published: 2023-05-10T13:17:19.291Z Last Updated: 2025-01-24T17:43:40.610Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Connect M Android application Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00779.html
CVE ID: CVE-2022-41770 State: PUBLISHED Published: 2022-10-19T21:21:48.456Z Last Updated: 2025-05-08T18:08:48.308Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IQ Problem Types: CWE-400 Description: In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ all versions of 8.x and 7.x, an authenticated iControl REST user can cause an increase in memory resource utilization, via undisclosed requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K22505850
CVE ID: CVE-2022-41771 State: PUBLISHED Published: 2023-05-10T13:17:17.680Z Last Updated: 2025-01-24T17:39:57.962Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) QAT drivers for Windows Problem Types: information disclosure, CWE-732 Description: Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00778.html
CVE ID: CVE-2022-41772 State: PUBLISHED Published: 2022-10-31T19:26:33.695Z Last Updated: 2025-04-16T16:06:52.076Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-22 Description: Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-41773 State: PUBLISHED Published: 2022-10-27T20:15:38.645Z Last Updated: 2025-04-16T17:45:10.058Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-41775 State: PUBLISHED Published: 2022-11-17T22:45:55.264Z Last Updated: 2025-04-16T17:42:46.800Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-41776 State: PUBLISHED Published: 2022-10-31T19:48:17.936Z Last Updated: 2025-04-16T16:06:29.428Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-306 Description: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrative passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa
ve passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-41777 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:32:18.432Z Vendors: kujirahand Products: Nako3edit, editor component of nadesiko3 (PC Version) Problem Types: Improper check or handling of exceptional conditions Description: Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kujirahand/nadesiko3/issues/1325 - https://
Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kujirahand/nadesiko3/issues/1325 - https://github.com/kujirahand/nadesiko3/issues/1347 - https://jvn.jp/en/jp/JVN56968681/index.html
CVE ID: CVE-2022-41778 State: PUBLISHED Published: 2023-01-12T23:19:47.452Z Last Updated: 2025-01-16T22:02:07.832Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-502 Description: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/ad
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-41779 State: PUBLISHED Published: 2022-10-31T19:19:35.913Z Last Updated: 2025-04-16T17:43:44.238Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-502 Description: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.c
code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-41780 State: PUBLISHED Published: 2022-10-19T21:22:10.493Z Last Updated: 2025-05-08T18:59:13.435Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: F5OS-A, F5OS-C Problem Types: CWE-22 Description: In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K81701735
CVE ID: CVE-2022-41781 State: PUBLISHED Published: 2022-11-18T19:00:40.013Z Last Updated: 2025-02-20T19:52:24.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Maciej Bis Products: Permalink Manager Lite Problem Types: CWE-264 Description: Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/permalink-manager/wordpress-permalink-manager-lite-plugin-2-2-20-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-41782 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:56.294Z Description: No description available.
CVE ID: CVE-2022-41783 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T16:04:22.941Z Vendors: TP-Link Products: TP-Link RE300 V1 Problem Types: Improper Handling of Syntactically Invalid Structure Description: tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (DoS) condition of the product's OneMesh function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/en/support/download/re300/v1/#Firmware - https://jvn.jp/en/jp/JVN29657972/index.html
CVE ID: CVE-2022-41784 State: PUBLISHED Published: 2023-05-10T13:17:10.808Z Last Updated: 2025-01-27T18:01:21.448Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) OFU software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00792.html
CVE ID: CVE-2022-41785 State: PUBLISHED Published: 2023-03-21T05:57:16.560Z Last Updated: 2025-01-10T19:18:37.366Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Galleryape Products: Gallery Images Ape Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin <= 2.2.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gallery-images-ape/wordpress-gallery-images-ape-plugin-2-2-8-auth-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-41786 State: PUBLISHED Published: 2024-01-17T17:14:35.810Z Last Updated: 2024-11-13T19:50:31.221Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WP Job Portal Products: WP Job Portal – A Complete Job Board Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-job-portal/wordpress-wp-job-portal-plugin-1-1-9-unauthorized-plugin-settings-change-vulnerabilit
tabase/vulnerability/wp-job-portal/wordpress-wp-job-portal-plugin-1-1-9-unauthorized-plugin-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2022-41787 State: PUBLISHED Published: 2022-10-19T21:22:36.379Z Last Updated: 2025-05-06T18:52:18.250Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP DNS, BIG-IP LTM Problem Types: CWE-476 Description: In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K70569537
CVE ID: CVE-2022-41788 State: PUBLISHED Published: 2022-11-18T22:09:27.321545Z Last Updated: 2024-09-16T21:08:27.515Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PenciDesign Products: Soledad (WordPress theme) Problem Types: CWE-79 Description: Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-premium-theme-8-2-5-auth-cross-site-scripting-xss-vulnerability?_s_id=cve - https://themeforest.net/item/soledad-multiconcept-blogmagazine-wp-theme/12945398
CVE ID: CVE-2022-41789 State: PUBLISHED Published: 2022-11-15T14:24:50.166Z Last Updated: 2025-04-29T20:08:57.304Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hallo Welt! GmbH Products: BlueSpice Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-04
CVE ID: CVE-2022-41790 State: PUBLISHED Published: 2024-01-17T18:13:44.505Z Last Updated: 2025-06-17T21:19:16.994Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: WP Time Slots Booking Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-time-slots-booking-form/wordpress-wp-time-slots-booking-form-plugin-1-1-76-missing-authorization-leading-to-feedback-submission-vul
booking-form/wordpress-wp-time-slots-booking-form-plugin-1-1-76-missing-authorization-leading-to-feedback-submission-vulnerability
CVE ID: CVE-2022-41791 State: PUBLISHED Published: 2022-11-17T22:08:40.097Z Last Updated: 2025-02-20T19:53:41.086Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Profilegrid Products: ProfileGrid (WordPress plugin) Problem Types: CSV Injection Description: Auth. (subscriber+) CSV Injection vulnerability in ProfileGrid plugin <= 5.1.6 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-plugin-5-1-6-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-41793 State: PUBLISHED Published: 2023-07-21T20:25:40.659Z Last Updated: 2024-08-03T12:49:44.052Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-120 Description: An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1667
CVE ID: CVE-2022-41794 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-15T14:28:40.904Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-122 Description: A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1626 - https:
ner: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1626 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33 - https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html
CVE ID: CVE-2022-41796 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T16:06:31.655Z Vendors: Sony Corporation Products: Content Transfer (for Windows) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sony.jp/support/audiosoftware/contenttransfer/ - https://jvn.jp/en/jp/JVN40620121/index.html
CVE ID: CVE-2022-41797 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T16:10:53.211Z Vendors: ByteDance K.K. Products: Lemon8 App for Android and Lemon8 App for iOS Problem Types: Improper Authorization in Handler for Custom URL Scheme Description: Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
im of a phishing attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.bd.nproject&hl=ja&gl=US - https://apps.apple.com/jp/app/lemon8/id1498607143 - https://jvn.jp/en/jp/JVN10921428/index.html
CVE ID: CVE-2022-41798 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:30:52.508Z Vendors: KYOCERA Document Solutions Inc. Products: Kyocera Document Solutions MFPs and printers Problem Types: Session Information Easily Guessable Description: Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+
5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html - https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html - https://jvn.jp/
on/2022-11-01.html - https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html - https://jvn.jp/en/jp/JVN46345126/index.html
CVE ID: CVE-2022-41799 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T16:12:01.378Z Vendors: WESEEK, Inc. Products: GROWI v5 series and v4 series Problem Types: Improper Access Control Description: Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://weseek.co.jp/en/news/2022/10/07/growi-private-page-can-be-viewed/ - https://jvn.jp/en/jp/JVN00845253/index.
s: - https://weseek.co.jp/en/news/2022/10/07/growi-private-page-can-be-viewed/ - https://jvn.jp/en/jp/JVN00845253/index.html
CVE ID: CVE-2022-41800 State: PUBLISHED Published: 2022-12-07T03:12:17.395Z Last Updated: 2025-04-23T13:33:29.909Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-77 Description: In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K13325942