Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.se.com/ww/en/download/document/SEVD-2022-284-01/
CVE ID: CVE-2022-41672 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:49:43.427Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-613 Description: In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/airflow/pull/26635 - https://lists.apache.org/thread/ohf3pvd3dftb8zb01yngbn1jtkq5m08y
CVE ID: CVE-2022-41674 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T14:26:34.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1203770 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/net/mac80211/scan.c - http://www.openwall.com/lists/oss-security/2022/10/13/2 - https://www.openwall.com/lists/oss-secur
net/mac80211/scan.c - http://www.openwall.com/lists/oss-security/2022/10/13/2 - https://www.openwall.com/lists/oss-security/2022/10/13/5 - https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=aebe9f4639b13a1f4e9a6b42cdd2e38c617b442d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ - https://www.debian.org/security/2022/d
ge-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ - https://www.debian.org/security/2022/dsa-5257 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html - http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html
CVE ID: CVE-2022-41675 State: PUBLISHED Published: 2022-11-29T03:30:28.553Z Last Updated: 2025-04-25T14:42:38.600Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TEAM JOHNLONG SOFTWARE CO., LTD. Products: MAILD Mail Server Problem Types: CWE-1236 Description: A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
on the user side. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html
CVE ID: CVE-2022-41676 State: PUBLISHED Published: 2022-11-29T03:30:29.550Z Last Updated: 2025-04-24T18:47:54.040Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: TEAM JOHNLONG SOFTWARE CO., LTD. Products: MAILD Mail Server Problem Types: CWE-85 Description: Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS (Reflected Cross-Site Scripting) attack to the mail recipient. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.
pient. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6743-0a2c4-1.html
CVE ID: CVE-2022-41677 State: PUBLISHED Published: 2023-12-18T13:02:08.943Z Last Updated: 2024-11-27T20:36:39.862Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Bosch Products: Camera Firmware Problem Types: CWE-284 Description: An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/bosch-sa-839739-BT.html
CVE ID: CVE-2022-41678 State: PUBLISHED Published: 2023-11-28T15:08:38.338Z Last Updated: 2025-11-03T21:46:33.574Z Vendors: Apache Software Foundation Products: Apache ActiveMQ Problem Types: CWE-287 Description: Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandler#handlePostRequest is able to create JmxRequest through JSONObject. And calls to org.jolokia.http.HttpRequestHandler#executeRequest. Into deeper calling stacks, org.jolokia.handler.ExecHandler#doHandleRequest can be invoked through refecti
ecuteRequest. Into deeper calling stacks, org.jolokia.handler.ExecHandler#doHandleRequest can be invoked through refection. This could lead to RCE through via various mbeans. One example is unrestricted deserialization in jdk.management.jfr.FlightRecorderMXBeanImpl which exists on Java version above 11. 1 Call newRecording. 2 Call setConfiguration. And a webshell data hides in it. 3 Call startRecording. 4 Call copyTo method. The webshell will be written to a .jsp file. The mitigation is to restrict (by default) the actions authorized on Jolokia, or disable Jolokia. A more restrictive Jolokia configuration has been defined in default ActiveMQ distribution. We encourage users to upgrade to Act
estrictive Jolokia configuration has been defined in default ActiveMQ distribution. We encourage users to upgrade to ActiveMQ distributions version including updated Jolokia configuration: 5.16.6, 5.17.4, 5.18.0, 6.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://activemq.apache.org/security-advisories.data/CVE-2022-41678-announcement.txt - https://lists.apache.org/thread/7g17kwbtjl011mm4tr8bn1vnoq9wh4sl - https://www.openwall.com/lists/oss-security/2023/11/28/1 - https://security.netapp.com/advisory/ntap-20240216-0004/
CVE ID: CVE-2022-41679 State: PUBLISHED Published: 2022-10-31T19:59:49.293Z Last Updated: 2025-05-02T19:57:29.942Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Forma Products: Forma LMS Problem Types: CWE-79 Description: Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the “back_url” parameter in appLms/index.php?modname=faq&op=play function. The exploitation of this vulnerability could allow an attacker to steal the user´s cookies in order to log in to the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
n order to log in to the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE ID: CVE-2022-41680 State: PUBLISHED Published: 2022-10-31T19:59:00.280Z Last Updated: 2025-05-06T19:45:16.319Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Forma Products: Forma LMS Problem Types: CWE-89 Description: Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'search[value] parameter in the appLms/ajax.server.php?r=mycertificate/getMyCertificates' function in order to dump the entire database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
ion in order to dump the entire database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE ID: CVE-2022-41681 State: PUBLISHED Published: 2022-10-31T19:59:17.538Z Last Updated: 2025-05-06T19:46:26.630Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Forma Products: Forma LMS Problem Types: CWE-434 Description: There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in order to upload a Zip file through the SCORM importer feature. The exploitation of this vulnerability could lead to a remote code injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/secur
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE ID: CVE-2022-41684 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-15T14:29:08.754Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-125 Description: A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
o trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1632 - https://www.debian.org/security/2023/dsa-5384 - https://security.gentoo.org/glsa/202305-33 - https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html
CVE ID: CVE-2022-41685 State: PUBLISHED Published: 2022-11-18T22:18:33.936Z Last Updated: 2025-02-20T19:50:35.488Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Viszt Péter Products: Integration for Szamlazz.hu & WooCommerce (WordPress plugin), Csomagpontok és szállítási címkék WooCommerce-hez (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
in <= 1.9.0.2 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/integration-for-szamlazzhu-woocommerce/wordpress-integration-for-szamlazz-hu-woocommerce-plugin-5-6-3-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve - https://patchstack.com/database/vulnerability/hungarian-pickup-points-for-woocommerce/wordpress-csomagpontok-es-szallitasi-cimkek-woocommerce-hez-plugin-1-9-0-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve - https://wordpress.org/plugins/hungarian-pickup-points-for-woocommerce/#developers - https://wordpress.org/plugins/integration-for-sza
ress.org/plugins/hungarian-pickup-points-for-woocommerce/#developers - https://wordpress.org/plugins/integration-for-szamlazzhu-woocommerce/#developers
CVE ID: CVE-2022-41686 State: PUBLISHED Published: 2022-10-14T14:40:04.568Z Last Updated: 2025-05-14T15:16:13.328Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The processes with system user UID run on the device would be able to write out-of-bound memory which co
ion disclosure. The processes with system user UID run on the device would be able to write out-of-bound memory which could lead to unspecified memory corruption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md
CVE ID: CVE-2022-41687 State: PUBLISHED Published: 2023-05-10T13:16:39.089Z Last Updated: 2025-01-27T18:11:40.333Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC P14E Laptop Element software for Windows 10 Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/sec
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00802.html
CVE ID: CVE-2022-41688 State: PUBLISHED Published: 2022-10-31T19:38:21.943Z Last Updated: 2025-04-16T16:06:36.155Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-306 Description: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups. An attacker could provide malicious serialized objects that could run these functions without authentication to create a new user and add them to the administrator group. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
to the administrator group. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-41689 State: PUBLISHED Published: 2023-11-14T19:04:25.455Z Last Updated: 2024-08-03T12:49:43.907Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel In-Band Manageability software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel In-Band Manageability software before version 3.0.14 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00968.html
CVE ID: CVE-2022-41690 State: PUBLISHED Published: 2023-05-10T13:17:00.283Z Last Updated: 2025-01-27T18:04:36.789Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Retail Edge Mobile iOS application Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html
CVE ID: CVE-2022-41691 State: PUBLISHED Published: 2022-10-19T21:19:45.651Z Last Updated: 2025-05-08T18:13:02.493Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Advanced WAF & ASM Problem Types: CWE-763 Description: When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K02694732
CVE ID: CVE-2022-41692 State: PUBLISHED Published: 2022-11-18T18:54:29.858Z Last Updated: 2025-02-20T19:52:33.427Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: Appointment Hour Booking (WordPress plugin) Problem Types: CWE-862 Description: Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/appointment-hour-booking/wordpress-appointment-hour-booking-plugin-1-3-71-missing-authorization-vulnerability?_s_id=cve
CVE ID: CVE-2022-41693 State: PUBLISHED Published: 2023-05-10T13:17:22.891Z Last Updated: 2025-01-27T17:58:51.634Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro edition software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00799.html
CVE ID: CVE-2022-41694 State: PUBLISHED Published: 2022-10-19T21:20:06.272Z Last Updated: 2025-05-08T18:12:35.198Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IQ Problem Types: CWE-20 Description: In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ versions 8.x before 8.2.0.1 and all versions of 7.x, when an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed input can cause MCPD to terminate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/csp/article/K64829234
CVE ID: CVE-2022-41695 State: PUBLISHED Published: 2024-01-17T17:09:02.699Z Last Updated: 2025-06-17T14:18:32.381Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SedLex Products: Traffic Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/traffic-manager/wordpress-traffic-manager-plugin-1-4-5-multiple-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-41696 State: PUBLISHED Published: 2023-03-21T22:19:30.671Z Last Updated: 2025-01-17T22:07:09.782Z Vendors: VISAM Products: VBASE Problem Types: CWE-611 Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05
CVE ID: CVE-2022-41697 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-14T18:07:42.762Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Ghost Foundation Products: Ghost Problem Types: CWE-204 Description: A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625
CVE ID: CVE-2022-41698 State: PUBLISHED Published: 2024-04-17T10:13:13.715Z Last Updated: 2024-08-03T12:49:43.970Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Layered Products: If Menu Problem Types: CWE-862 Description: Missing Authorization vulnerability in Layered If Menu.This issue affects If Menu: from n/a through 0.16.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/if-menu/wordpress-if-menu-visibility-control-for-menus-plugin-0-16-3-broken-access-control?_s_id=cve
CVE ID: CVE-2022-41699 State: PUBLISHED Published: 2023-05-10T13:17:16.651Z Last Updated: 2025-01-24T17:37:49.035Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT drivers for Windows Problem Types: escalation of privilege, CWE-732 Description: Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00778.html
CVE ID: CVE-2022-41700 State: PUBLISHED Published: 2023-11-14T19:04:45.324Z Last Updated: 2024-08-14T20:42:27.256Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite installation software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-s
ntainer: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2022-41701 State: PUBLISHED Published: 2022-10-27T20:15:38.365Z Last Updated: 2025-04-16T17:45:23.534Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-79 Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2022-41702 State: PUBLISHED Published: 2022-10-27T20:15:39.344Z Last Updated: 2025-04-16T17:44:33.826Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-79 Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06