Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28623 State: PUBLISHED Published: 2022-07-08T12:39:00 Last Updated: 2024-08-03T05:56:16.109Z Vendors: n/a Products: HPE IceWall SSO Problem Types: remote sql injection; remote unauthorized data injection Description: Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocal
dditional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us
CVE ID: CVE-2022-28624 State: PUBLISHED Published: 2022-07-08T12:36:51 Last Updated: 2024-08-03T05:56:16.214Z Vendors: n/a Products: HPE FlexNetwork 5130 EI Switch Series; HPE FlexFabric 5945 Switch Series Problem Types: remote cross-site scripting (xss) Description: A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting (XSS). HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork 5130EL_7.10.R3507P02 and HPE FlexFabric 5945_7.10.R6635. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com
HPE FlexFabric 5945_7.10.R6635. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04265en_us
CVE ID: CVE-2022-28625 State: PUBLISHED Published: 2022-08-31T15:59:33 Last Updated: 2024-08-03T05:56:16.147Z Vendors: n/a Products: HPE OneView Problem Types: local disclosure of sensitive information Description: A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE On
h credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04304en_us
CVE ID: CVE-2022-28626 State: PUBLISHED Published: 2022-08-11T17:16:14 Last Updated: 2024-08-03T05:56:16.109Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: Reference
this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28627 State: PUBLISHED Published: 2022-08-11T17:16:41 Last Updated: 2024-08-03T05:56:16.043Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: -
s vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28628 State: PUBLISHED Published: 2022-08-11T17:16:30 Last Updated: 2024-08-03T05:56:16.083Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: -
CVE ID: CVE-2022-28629 State: PUBLISHED Published: 2022-08-11T17:16:53 Last Updated: 2024-08-03T05:56:16.130Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A low privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References:
is vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28630 State: PUBLISHED Published: 2022-08-11T17:17:05 Last Updated: 2024-08-03T05:56:16.012Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality and integrity, and a partial loss of availability. User interaction is required to exploit this vulnerability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Light
to exploit this vulnerability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28631 State: PUBLISHED Published: 2022-08-11T17:17:19 Last Updated: 2024-08-03T05:56:16.092Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: adjacent arbitrary code execution and denial of service (DoS) Description: A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In add
solated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28632 State: PUBLISHED Published: 2022-08-11T17:17:33 Last Updated: 2024-08-03T05:56:16.184Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: adjacent arbitrary code execution and denial of service (DoS) Description: A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In add
CVE ID: CVE-2022-28633 State: PUBLISHED Published: 2022-08-11T17:18:12 Last Updated: 2024-08-03T05:56:16.040Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local disclosure of sensitive information and local unauthorized data modification Description: A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file system resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided
ystem resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28634 State: PUBLISHED Published: 2022-08-11T17:18:25 Last Updated: 2024-08-03T05:56:16.229Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: Reference
CVE ID: CVE-2022-28635 State: PUBLISHED Published: 2022-08-11T17:18:00 Last Updated: 2024-08-03T05:56:16.091Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution and denial of service (DoS) Description: A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition,
d process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. A successful attack depends on conditions beyond the attackers control. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us
CVE ID: CVE-2022-28636 State: PUBLISHED Published: 2022-08-11T17:17:47 Last Updated: 2024-08-03T05:56:16.445Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local arbitrary code execution and denial of service (DoS) Description: A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition,
CVE ID: CVE-2022-28637 State: PUBLISHED Published: 2022-09-20T20:07:13.000Z Last Updated: 2025-05-27T18:15:43.840Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: local denial of service (DoS); potential local arbitrary code execution Description: A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities. Additional Analyst Notes: - CVE Program Co
ntegrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us
CVE ID: CVE-2022-28638 State: PUBLISHED Published: 2022-09-20T20:04:47.000Z Last Updated: 2025-05-29T13:22:13.009Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: isolated local disclosure of information; potential isolated local arbitrary code execution Description: An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerab
Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us
CVE ID: CVE-2022-28639 State: PUBLISHED Published: 2022-09-20T20:06:05.000Z Last Updated: 2025-05-29T13:21:32.356Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: remote potential adjacent denial of service (DoS); potential adjacent arbitrary code execution Description: A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vul
ckard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us
CVE ID: CVE-2022-28640 State: PUBLISHED Published: 2022-09-20T20:01:58.000Z Last Updated: 2025-05-28T15:52:55.759Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) Problem Types: potential local arbitrary code execution Description: A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses this security vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
his security vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us
CVE ID: CVE-2022-28641 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T20:09:08.714Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. The issue results from the lack of validating the existence of an object prior to performing operati
rsing of IFC files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16390. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-613/
CVE ID: CVE-2022-28642 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T20:08:54.886Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can
rsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16424. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-608/ - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0004
CVE ID: CVE-2022-28643 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T20:08:09.910Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can
rsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16468. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-609/
CVE ID: CVE-2022-28644 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T20:07:41.488Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can
rsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16469. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-611/
CVE ID: CVE-2022-28645 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T20:07:19.348Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a read past the end of an allocated buffer. An attacke
the parsing of DGN files. Crafted data in a DGN file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16470. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-610/
CVE ID: CVE-2022-28646 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T20:07:00.821Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can
rsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16570. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-616/