Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36987 State: PUBLISHED Published: 2022-07-28T00:55:34 Last Updated: 2024-08-03T10:21:32.387Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write files to a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h4
CVE ID: CVE-2022-36988 State: PUBLISHED Published: 2022-07-28T00:55:06 Last Updated: 2024-08-03T10:21:32.338Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server. Additional Analyst Notes: - CVE Program Container: References: -
a NetBackup Primary server or NetBackup Media server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h6
CVE ID: CVE-2022-36989 State: PUBLISHED Published: 2022-07-28T00:54:44 Last Updated: 2024-08-03T10:21:32.604Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h2
CVE ID: CVE-2022-36990 State: PUBLISHED Published: 2022-07-28T00:54:19 Last Updated: 2024-08-03T10:21:32.290Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely write arbitrary files to arbitrary locations from any Client to any other Client via a Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/suppor
Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#c2
CVE ID: CVE-2022-36991 State: PUBLISHED Published: 2022-07-28T00:53:39 Last Updated: 2024-08-03T10:21:32.370Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path on a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h
Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h5
CVE ID: CVE-2022-36992 State: PUBLISHED Published: 2022-07-28T00:53:07 Last Updated: 2024-08-03T10:21:32.445Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server (in specific notify conditions). Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/secur
s). Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#c1
CVE ID: CVE-2022-36993 State: PUBLISHED Published: 2022-07-28T00:52:38 Last Updated: 2024-08-03T10:21:32.590Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h1
CVE ID: CVE-2022-36994 State: PUBLISHED Published: 2022-07-28T00:52:07 Last Updated: 2024-08-03T10:21:32.464Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#m4
CVE ID: CVE-2022-36995 State: PUBLISHED Published: 2022-07-28T00:51:31 Last Updated: 2024-08-03T10:21:32.371Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily create directories on a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#m5
CVE ID: CVE-2022-36996 State: PUBLISHED Published: 2022-07-28T00:51:09 Last Updated: 2024-08-03T10:21:32.439Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#m6
CVE ID: CVE-2022-36997 State: PUBLISHED Published: 2022-07-28T00:50:36 Last Updated: 2024-08-03T10:21:32.596Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/supp
denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#h9
CVE ID: CVE-2022-36998 State: PUBLISHED Published: 2022-07-28T00:49:24 Last Updated: 2024-08-03T10:21:32.188Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/suppor
nial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#m3
CVE ID: CVE-2022-36999 State: PUBLISHED Published: 2022-07-28T00:48:49 Last Updated: 2024-08-03T10:21:32.317Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#m2
CVE ID: CVE-2022-37000 State: PUBLISHED Published: 2022-07-28T00:47:45 Last Updated: 2024-08-03T10:21:32.491Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-004#m1
CVE ID: CVE-2022-37001 State: PUBLISHED Published: 2022-08-09T20:10:41 Last Updated: 2024-08-03T10:21:32.475Z Vendors: Huawei Products: HarmonyOS Problem Types: Buffer Copy without Checking Size of Input Description: The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37002 State: PUBLISHED Published: 2022-08-09T20:10:52.000Z Last Updated: 2025-10-20T17:50:22.421Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Privilege escalation vulnerability Description: The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37003 State: PUBLISHED Published: 2022-08-09T20:10:59.000Z Last Updated: 2025-09-08T18:42:25.944Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Improper permission assignment vulnerability Description: The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37004 State: PUBLISHED Published: 2022-08-09T20:10:55 Last Updated: 2024-08-03T10:21:32.259Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Out-of-box experience bypass vulnerability Description: The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37005 State: PUBLISHED Published: 2022-08-09T20:11:06 Last Updated: 2024-08-03T10:21:32.603Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Argument injection vulnerability Description: The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37006 State: PUBLISHED Published: 2022-08-09T20:11:35 Last Updated: 2024-08-03T10:21:32.355Z Vendors: n/a Products: HarmonyOS;EMUI Problem Types: Permission control vulnerability Description: Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845
CVE ID: CVE-2022-37007 State: PUBLISHED Published: 2022-08-09T20:10:24 Last Updated: 2024-08-03T10:21:32.503Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Out-of-bounds read vulnerability Description: The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37008 State: PUBLISHED Published: 2022-08-09T20:10:47 Last Updated: 2024-08-03T10:21:32.469Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Verification bypass vulnerability Description: The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
CVE ID: CVE-2022-37009 State: PUBLISHED Published: 2022-07-28T10:25:10 Last Updated: 2024-08-03T10:21:32.463Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-94 Description: In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-37010 State: PUBLISHED Published: 2022-07-28T10:25:16 Last Updated: 2024-08-03T10:21:32.474Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-20 Description: In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-37011 State: PUBLISHED Published: 2022-09-13T00:00:00 Last Updated: 2024-08-03T10:21:32.435Z Vendors: Siemens Products: Mendix SAML (Mendix 7 compatible), Mendix SAML (Mendix 8 compatible), Mendix SAML (Mendix 9 compatible, New Track), Mendix SAML (Mendix 9 compatible, Upgrade Track) Problem Types: CWE-294 Description: A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0). Affected versions of the module insufficiently protect from
endix 9 compatible, Upgrade Track) (All versions < V3.3.0). Affected versions of the module insufficiently protect from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. For compatibility reasons, fix versions still contain this issue, but only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf
CVE ID: CVE-2022-37012 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T19:34:23.714Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Unified Automation Products: OPC UA C++ Demo Server Problem Types: CWE-911 Description: This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpcUa_SecureListener_ProcessSessionCallRequest method. A crafted OPC UA message can force the server to incorrectly update a reference count. An attacker
nCallRequest method. A crafted OPC UA message can force the server to incorrectly update a reference count. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-16927. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-1030/ - https://documentation.unified-automation.com/uasdkcpp/1.7.7/CHANGELOG.txt
CVE ID: CVE-2022-37013 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T19:32:44.598Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Unified Automation Products: OPC UA C++ Demo Server Problem Types: CWE-835 Description: This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 [with vendor rollup]. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of certificates. A crafted certificate can force the server into an infinite loop. An attacker can leverage this vulnerabili
ertificates. A crafted certificate can force the server into an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-17203. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.unified-automation.com/uasdkcpp/1.7.7/CHANGELOG.txt - https://www.zerodayinitiative.com/advisories/ZDI-22-1029/
CVE ID: CVE-2022-37015 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:23:14.069Z Vendors: n/a Products: Symantec Endpoint Detection and Response Problem Types: Elevation of Privilege Description: Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/external/content/SecurityA
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/21005
CVE ID: CVE-2022-37016 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T20:27:56.984Z Vendors: n/a Products: Symantec Endpoint Protection Problem Types: Privilege Escalation Description: Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdviso
hment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21014
CVE ID: CVE-2022-37017 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T20:26:10.073Z Vendors: n/a Products: Symantec Endpoint Protection Problem Types: Security Control Bypass Description: Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
d protection, if it has been enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21014
CVE ID: CVE-2022-37018 State: PUBLISHED Published: 2022-11-21T21:02:37.037Z Last Updated: 2025-04-29T04:48:11.747Z Vendors: HP Inc. Products: HP PC BIOS Problem Types: n/a Description: A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820
CVE ID: CVE-2022-37019 State: PUBLISHED Published: 2024-06-10T22:12:52.278Z Last Updated: 2025-03-27T19:49:35.233Z Vendors: HP Inc. Products: HP PC products Description: Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943
CVE ID: CVE-2022-37020 State: PUBLISHED Published: 2024-06-10T22:13:26.904Z Last Updated: 2024-10-28T18:34:17.212Z Vendors: HP Inc. Products: HP PC products Description: Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_10737430-10737454-16/hpsbhf03943