Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-25403 State: PUBLISHED Published: 2022-02-23T21:11:21 Last Updated: 2024-08-03T04:36:06.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dota-st/Vulnerability/blob/master/HMS/HMS.md
CVE ID: CVE-2022-25404 State: PUBLISHED Published: 2022-02-23T21:11:20 Last Updated: 2024-08-03T04:36:06.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10.md
CVE ID: CVE-2022-25405 State: PUBLISHED Published: 2022-02-23T21:11:27 Last Updated: 2024-08-03T04:36:06.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_1.md
CVE ID: CVE-2022-25406 State: PUBLISHED Published: 2022-02-23T21:11:19 Last Updated: 2024-08-03T04:36:06.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_2.md
CVE ID: CVE-2022-25407 State: PUBLISHED Published: 2022-02-28T22:55:17 Last Updated: 2024-08-03T04:36:06.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/21
CVE ID: CVE-2022-25408 State: PUBLISHED Published: 2022-02-28T22:55:17 Last Updated: 2024-08-03T04:42:49.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/22
CVE ID: CVE-2022-25409 State: PUBLISHED Published: 2022-02-28T22:55:18 Last Updated: 2024-08-03T04:42:49.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/20
CVE ID: CVE-2022-25410 State: PUBLISHED Published: 2022-02-28T22:55:18 Last Updated: 2024-08-03T04:42:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maxsite/cms/issues/485
CVE ID: CVE-2022-25411 State: PUBLISHED Published: 2022-02-28T22:55:19 Last Updated: 2024-08-03T04:42:49.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maxsite/cms/issues/487
CVE ID: CVE-2022-25412 State: PUBLISHED Published: 2022-02-28T22:55:20 Last Updated: 2024-08-03T04:42:49.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maxsite/cms/issues/486
CVE ID: CVE-2022-25413 State: PUBLISHED Published: 2022-02-28T22:55:21 Last Updated: 2024-08-03T04:42:49.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maxsite/cms/issues/484
CVE ID: CVE-2022-25414 State: PUBLISHED Published: 2022-02-22T22:44:14 Last Updated: 2024-08-03T04:42:49.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/1
CVE ID: CVE-2022-25417 State: PUBLISHED Published: 2022-02-22T22:44:16 Last Updated: 2024-08-03T04:42:49.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/3
CVE ID: CVE-2022-25418 State: PUBLISHED Published: 2022-02-22T22:44:17 Last Updated: 2024-08-03T04:42:48.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/2
CVE ID: CVE-2022-25420 State: PUBLISHED Published: 2022-03-29T01:05:26 Last Updated: 2024-08-03T04:42:49.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abhiunix/goo-blog-App-CVE
CVE ID: CVE-2022-25427 State: PUBLISHED Published: 2022-03-18T20:52:57 Last Updated: 2024-08-03T04:42:49.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/2
CVE ID: CVE-2022-25428 State: PUBLISHED Published: 2022-03-18T20:53:02 Last Updated: 2024-08-03T04:42:49.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/3
CVE ID: CVE-2022-25429 State: PUBLISHED Published: 2022-03-18T20:53:00 Last Updated: 2024-08-03T04:42:49.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/1
CVE ID: CVE-2022-25431 State: PUBLISHED Published: 2022-03-18T20:53:01 Last Updated: 2024-08-03T04:42:49.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/4
CVE ID: CVE-2022-25433 State: PUBLISHED Published: 2022-03-18T20:53:05 Last Updated: 2024-08-03T04:42:49.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/5
CVE ID: CVE-2022-25434 State: PUBLISHED Published: 2022-03-18T20:53:06 Last Updated: 2024-08-03T04:42:48.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/6
CVE ID: CVE-2022-25435 State: PUBLISHED Published: 2022-03-18T20:53:07 Last Updated: 2024-08-03T04:42:49.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/7
CVE ID: CVE-2022-25437 State: PUBLISHED Published: 2022-03-18T20:53:10 Last Updated: 2024-08-03T04:42:48.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/9
CVE ID: CVE-2022-25438 State: PUBLISHED Published: 2022-03-18T20:53:11 Last Updated: 2024-08-03T04:42:49.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/11
CVE ID: CVE-2022-25439 State: PUBLISHED Published: 2022-03-18T20:53:11 Last Updated: 2024-08-03T04:42:48.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/8
CVE ID: CVE-2022-25440 State: PUBLISHED Published: 2022-03-18T20:53:12 Last Updated: 2024-08-03T04:42:49.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/13
CVE ID: CVE-2022-25441 State: PUBLISHED Published: 2022-03-18T20:53:13 Last Updated: 2024-08-03T04:42:49.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/12
CVE ID: CVE-2022-25445 State: PUBLISHED Published: 2022-03-18T20:53:16 Last Updated: 2024-08-03T04:42:49.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/1
CVE ID: CVE-2022-25446 State: PUBLISHED Published: 2022-03-18T20:53:17 Last Updated: 2024-08-03T04:42:49.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/3
CVE ID: CVE-2022-25447 State: PUBLISHED Published: 2022-03-18T20:53:17 Last Updated: 2024-08-03T04:42:49.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/4
CVE ID: CVE-2022-25448 State: PUBLISHED Published: 2022-03-18T20:53:18 Last Updated: 2024-08-03T04:42:49.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/2
CVE ID: CVE-2022-25449 State: PUBLISHED Published: 2022-03-18T20:53:19 Last Updated: 2024-08-03T04:42:49.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/5
CVE ID: CVE-2022-25450 State: PUBLISHED Published: 2022-03-18T20:53:19 Last Updated: 2024-08-03T04:42:49.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/8
CVE ID: CVE-2022-25451 State: PUBLISHED Published: 2022-03-18T20:53:20 Last Updated: 2024-08-03T04:42:49.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/9
CVE ID: CVE-2022-25452 State: PUBLISHED Published: 2022-03-18T20:53:21 Last Updated: 2024-08-03T04:42:49.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/7
CVE ID: CVE-2022-25453 State: PUBLISHED Published: 2022-03-18T20:53:21 Last Updated: 2024-08-03T04:42:49.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/6
CVE ID: CVE-2022-25454 State: PUBLISHED Published: 2022-03-18T20:53:22 Last Updated: 2024-08-03T04:42:49.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/10
CVE ID: CVE-2022-25455 State: PUBLISHED Published: 2022-03-18T20:53:23 Last Updated: 2024-08-03T04:42:49.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/11
CVE ID: CVE-2022-25456 State: PUBLISHED Published: 2022-03-18T20:53:23 Last Updated: 2024-08-03T04:42:49.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/12
CVE ID: CVE-2022-25457 State: PUBLISHED Published: 2022-03-18T20:53:24 Last Updated: 2024-08-03T04:42:49.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/14
CVE ID: CVE-2022-25458 State: PUBLISHED Published: 2022-03-18T20:53:25 Last Updated: 2024-08-03T04:42:49.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/13
CVE ID: CVE-2022-25459 State: PUBLISHED Published: 2022-03-18T20:53:26 Last Updated: 2024-08-03T04:42:49.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/15
CVE ID: CVE-2022-25460 State: PUBLISHED Published: 2022-03-18T20:53:29 Last Updated: 2024-08-03T04:42:49.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/17
CVE ID: CVE-2022-25461 State: PUBLISHED Published: 2022-03-18T20:53:28 Last Updated: 2024-08-03T04:42:49.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/16
CVE ID: CVE-2022-25462 State: PUBLISHED Published: 2022-03-20T19:33:14 Last Updated: 2024-08-03T04:42:49.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bbuhrow/avx-ecm/issues/1
CVE ID: CVE-2022-25464 State: PUBLISHED Published: 2022-03-20T18:34:58 Last Updated: 2024-08-03T04:42:49.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doramart/DoraCMS/issues/255
CVE ID: CVE-2022-25465 State: PUBLISHED Published: 2022-03-05T01:01:56 Last Updated: 2024-08-03T04:42:49.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espruino/Espruino/issues/2136
CVE ID: CVE-2022-25471 State: PUBLISHED Published: 2022-03-02T23:07:04 Last Updated: 2024-08-03T04:42:49.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-emr.org/ - https://securityforeveryone.com/blog/inactive-post-test/openemr-0-day-idor-vulnerability - https://github.com/openemr/openemr
CVE ID: CVE-2022-25477 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-10-29T14:53:49.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://realtek.com - https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d568140
port/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a - https://zwclose.github.io/2024/10/14/rtsper1.html
CVE ID: CVE-2022-25478 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-10-27T14:43:44.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 provides read and write access to the PCI configuration space of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://realtek.com - https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a -
Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a - https://zwclose.github.io/2024/10/14/rtsper1.html
CVE ID: CVE-2022-25479 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-10-28T18:23:37.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://realtek.com - https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a - htt
ltek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a - https://zwclose.github.io/2024/10/14/rtsper1.html
CVE ID: CVE-2022-25480 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-25T17:55:01.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows writing to kernel memory beyond the SystemBuffer of the IRP. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://realtek.com - https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a - http
tek_RtsPer_RtsUer_Security_Advisory_Report.pdf - https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a - https://zwclose.github.io/2024/10/14/rtsper1.html