Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-20592 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:47:14.573Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238976908References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20593 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:46:19.740Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415809References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20594 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:45:24.422Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239567689References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20595 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:44:03.807Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239700137References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20596 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:43:04.992Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239700400References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20597 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:42:17.355Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243480506References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20598 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:25:03.549Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242357514References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20599 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:21:23.567Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242332706References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20600 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T14:20:33.475Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239847859References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20601 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:39:27.080Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20602 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:38:38.999Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20603 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:37:44.951Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-219265339References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20604 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:36:58.171Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from a single device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-230463606References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20605 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:36:12.389Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231722405References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20606 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:35:27.989Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233230674References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20607 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:34:45.937Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238914868References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20608 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:34:05.836Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239239246References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20609 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:33:17.793Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239240808References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20610 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:32:30.428Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240462530References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20611 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T17:14:23.751Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242996180 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.a
: A-242996180 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20612 State: PUBLISHED Published: 2022-01-12T19:05:44 Last Updated: 2024-08-03T02:17:53.077Z Vendors: Jenkins project Products: Jenkins Description: A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558 - http://www.openwall.com/lists/oss-security/2022/01/12/6 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2022-20613 State: PUBLISHED Published: 2022-01-12T00:00:00 Last Updated: 2024-08-03T02:17:52.870Z Vendors: Jenkins project Products: Jenkins Mailer Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163 - http://www.openwall.com/lists/oss-security/2022/01/12/6 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2022-20614 State: PUBLISHED Published: 2022-01-12T00:00:00 Last Updated: 2024-08-03T02:17:52.949Z Vendors: Jenkins project Products: Jenkins Mailer Plugin Description: A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163 - http://www.openwall.com/lists/oss-security/2022/01/12/6 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2022-20615 State: PUBLISHED Published: 2022-01-12T19:05:49 Last Updated: 2024-08-03T02:17:52.951Z Vendors: Jenkins project Products: Jenkins Matrix Project Plugin Description: Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2017 - http://www.openwall.com/lists/oss-security/2022/01/12/6 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2022-20616 State: PUBLISHED Published: 2022-01-12T19:05:51 Last Updated: 2024-08-03T02:17:52.979Z Vendors: Jenkins project Products: Jenkins Credentials Binding Plugin Description: Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to validate if a credential ID refers to a secret file credential and whether it's a zip file. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2342 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-20617 State: PUBLISHED Published: 2022-01-12T19:05:53 Last Updated: 2024-08-03T02:17:52.926Z Vendors: Jenkins project Products: Jenkins Docker Commons Plugin Description: Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1878 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-20618 State: PUBLISHED Published: 2022-01-12T19:05:54 Last Updated: 2024-08-03T02:17:52.908Z Vendors: Jenkins project Products: Jenkins Bitbucket Branch Source Plugin Description: A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2033 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-20619 State: PUBLISHED Published: 2022-01-12T19:05:56 Last Updated: 2024-08-03T02:17:52.944Z Vendors: Jenkins project Products: Jenkins Bitbucket Branch Source Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2467 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-20620 State: PUBLISHED Published: 2022-01-12T19:05:58 Last Updated: 2024-08-03T02:17:52.924Z Vendors: Jenkins project Products: Jenkins SSH Agent Plugin Description: Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2189 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-20621 State: PUBLISHED Published: 2022-01-12T19:06:00 Last Updated: 2024-08-03T02:17:52.871Z Vendors: Jenkins project Products: Jenkins Metrics Plugin Description: Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1624 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-20622 State: PUBLISHED Published: 2022-04-15T14:17:04.918191Z Last Updated: 2024-11-06T16:25:12.614Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco Aironet Access Point Software Problem Types: CWE-770 Description: A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may experience a performance degradation in traffic processing or high CPU usage prior to the unexpected reload. This vulnerability is due
rformance degradation in traffic processing or high CPU usage prior to the unexpected reload. This vulnerability is due to improper rate limiting of IP packets to the management interface. An attacker could exploit this vulnerability by sending a steady stream of IP traffic at a high rate to the management interface of the affected device. A successful exploit could allow the attacker to cause the device to reload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ
CVE ID: CVE-2022-20623 State: PUBLISHED Published: 2022-02-23T17:40:26.958880Z Last Updated: 2024-11-06T16:29:33.324Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco NX-OS Software Problem Types: CWE-399 Description: A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error in the BFD rate limiter functionality. An attacker could exploit this vulnerability by sending a crafted stream of traffic through
rate limiter functionality. An attacker could exploit this vulnerability by sending a crafted stream of traffic through the device. A successful exploit could allow the attacker to cause BFD traffic to be dropped, resulting in BFD session flaps. BFD session flaps can cause route instability and dropped traffic, resulting in a denial of service (DoS) condition. This vulnerability applies to both IPv4 and IPv6 traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-bfd-dos-wGQXrzxn
CVE ID: CVE-2022-20624 State: PUBLISHED Published: 2022-02-23T17:40:21.653325Z Last Updated: 2024-11-06T16:29:42.741Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco NX-OS Software Problem Types: CWE-400 Description: A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacker could exploit this vulnerability by sending crafted CFSoIP packets to an affected device. A successful exploit could allow the
exploit this vulnerability by sending crafted CFSoIP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cfsoip-dos-tpykyDr
CVE ID: CVE-2022-20625 State: PUBLISHED Published: 2022-02-23T17:40:15.926880Z Last Updated: 2024-11-06T16:29:50.135Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Cisco Products: Cisco NX-OS Software Problem Types: CWE-399 Description: A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability b