Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-25962 State: PUBLISHED Published: 2023-01-25T05:00:04.278Z Last Updated: 2025-04-01T14:13:35.542Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: vagrant.js Problem Types: CWE-78 Description: All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-VAGRANTJS-3175614
CVE ID: CVE-2022-25966 State: PUBLISHED Published: 2022-08-18T19:47:09.000Z Last Updated: 2025-05-05T16:23:05.655Z Vendors: n/a Products: Intel(R) Edge Insights for Industrial software Problem Types: escalation of privilege Description: Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE ID: CVE-2022-25967 State: PUBLISHED Published: 2023-01-30T05:00:01.228Z Last Updated: 2025-03-27T20:15:37.734Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: eta Problem Types: CWE-94 Description: Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. **Note:** This is exploitable only for users who are rendering templates with user-defined data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-ETA-2936803 - https://git
rogram Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-ETA-2936803 - https://github.com/eta-dev/eta/blob/9c8e4263d3a559444a3881a85c1607bf344d0b28/src/file-handlers.ts%23L182 - https://github.com/eta-dev/eta/blob/9c8e4263d3a559444a3881a85c1607bf344d0b28/src/compile-string.ts%23L21 - https://github.com/eta-dev/eta/commit/5651392462ee0ff19d77c8481081a99e5b9138dd
CVE ID: CVE-2022-25968 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:19:57.388Z Description: No description available.
CVE ID: CVE-2022-25969 State: PUBLISHED Published: 2022-03-17T17:15:38 Last Updated: 2024-08-03T04:56:36.775Z Vendors: KINGSOFT JAPAN, INC. Products: The installer of WPS Office Problem Types: CWE-427 Description: The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. Additional Analyst Notes: - CVE Program Container: References: - https://support.kingsoft.jp/support-info/weakness.html - https://jvn.jp/en/jp/JVN21234459/
CVE ID: CVE-2022-25972 State: PUBLISHED Published: 2022-08-22T18:21:13.690025Z Last Updated: 2024-09-17T03:48:38.559Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HDF5 Group Products: libhdf5 Problem Types: CWE-787 Description: An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1485
CVE ID: CVE-2022-25973 State: PUBLISHED Published: 2022-08-10T05:00:18.312453Z Last Updated: 2024-09-16T22:45:27.520Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: mc-kill-port Problem Types: Arbitrary Command Execution Description: All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070 - https://www.npmjs.com/package/mc-kill-port
CVE ID: CVE-2022-25976 State: PUBLISHED Published: 2023-05-10T13:16:52.224Z Last Updated: 2025-01-27T18:07:24.552Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) VROC software Problem Types: denial of service, CWE-20 Description: Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00692.html
CVE ID: CVE-2022-25978 State: PUBLISHED Published: 2023-02-15T05:00:01.227Z Last Updated: 2025-03-18T15:45:00.654Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P) Vendors: n/a Products: github.com/usememos/memos/server Problem Types: CWE-79 Description: All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUSEMEMOSMEMOSSERVER-3319070 - https
A ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUSEMEMOSMEMOSSERVER-3319070 - https://github.com/usememos/memos/commit/b11d2130a084385eb65c3761a3c841ebe9f81ae8 - https://github.com/usememos/memos/issues/1026
CVE ID: CVE-2022-25979 State: PUBLISHED Published: 2023-01-31T05:00:02.448Z Last Updated: 2025-03-27T17:14:44.327Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P) Vendors: n/a Products: jsuites, org.webjars.npm:jsuites Problem Types: CWE-79 Description: Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-JSUITES-3226764 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331 - https://github.com/jsuites/jsuites/issues/134 - htt
64 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331 - https://github.com/jsuites/jsuites/issues/134 - https://github.com/jsuites/jsuites/commit/b31770d5fe91684a00177f629aab933139c32d9f
CVE ID: CVE-2022-25980 State: PUBLISHED Published: 2022-03-29T16:37:03.370Z Last Updated: 2025-04-16T16:37:32.829Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-25986 State: PUBLISHED Published: 2022-08-18T07:10:27 Last Updated: 2024-08-03T04:56:36.890Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007584.html - https://jvn.jp/en/jp/JVN20573662/index.html
CVE ID: CVE-2022-25987 State: PUBLISHED Published: 2023-02-16T19:59:43.645Z Last Updated: 2025-01-27T18:25:48.544Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) C++ Compiler Classic Problem Types: escalation of privilege Description: Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version 2021.6 for Intel(R) oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/se
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-25989 State: PUBLISHED Published: 2022-05-05T17:35:09.869Z Last Updated: 2025-04-15T19:04:26.742Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Anker Products: Eufy Homebase 2 Problem Types: CWE-290 Description: An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479
CVE ID: CVE-2022-25990 State: PUBLISHED Published: 2022-05-05T16:22:13.962548Z Last Updated: 2024-09-17T00:46:36.502Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: F5 Products: F5OS-A Problem Types: CWE-200 Description: On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K44233515
CVE ID: CVE-2022-25992 State: PUBLISHED Published: 2023-02-16T19:59:44.883Z Last Updated: 2025-01-27T18:25:26.732Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkits oneapi-cli Problem Types: escalation of privilege Description: Insecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html
CVE ID: CVE-2022-25995 State: PUBLISHED Published: 2022-05-12T17:01:36.120Z Last Updated: 2025-04-15T19:03:12.842Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-489 Description: A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA
Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1477
CVE ID: CVE-2022-25996 State: PUBLISHED Published: 2022-08-05T21:17:52.741Z Last Updated: 2025-04-15T18:54:22.144Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1482
CVE ID: CVE-2022-25997 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:22:28.030Z Description: No description available.
CVE ID: CVE-2022-25999 State: PUBLISHED Published: 2022-08-18T19:56:15.000Z Last Updated: 2025-05-05T16:22:56.847Z Vendors: n/a Products: version Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00672.html
CVE ID: CVE-2022-26002 State: PUBLISHED Published: 2022-05-12T17:01:37.845Z Last Updated: 2025-04-15T19:03:05.849Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of malicious packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1476
CVE ID: CVE-2022-26006 State: PUBLISHED Published: 2022-11-11T15:49:10.339Z Last Updated: 2025-02-05T15:07:26.963Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html
CVE ID: CVE-2022-26007 State: PUBLISHED Published: 2022-05-12T17:01:39.208Z Last Updated: 2025-04-15T19:02:58.390Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-77 Description: An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-
iner: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1475
CVE ID: CVE-2022-26009 State: PUBLISHED Published: 2022-08-05T21:18:08.938Z Last Updated: 2025-04-15T18:54:15.204Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1483
CVE ID: CVE-2022-26013 State: PUBLISHED Published: 2022-03-29T16:37:07.369Z Last Updated: 2025-04-16T16:36:34.814Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26017 State: PUBLISHED Published: 2022-08-18T19:57:44.000Z Last Updated: 2025-05-05T16:22:48.071Z Vendors: n/a Products: Intel(R) DSA software for Problem Types: escalation of privilege Description: Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00679.html
CVE ID: CVE-2022-26019 State: PUBLISHED Published: 2022-03-31T07:21:31 Last Updated: 2024-08-03T04:56:37.518Z Vendors: pfSense Products: pfSense CE and pfSense Plus Problem Types: Improper Access Control Description: Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87751554/index.html - https://docs.netgate.com/downloads/pfSens
Program Container: References: - https://jvn.jp/en/jp/JVN87751554/index.html - https://docs.netgate.com/downloads/pfSense-SA-22_01.webgui.asc
CVE ID: CVE-2022-26020 State: PUBLISHED Published: 2022-05-12T17:01:40.860Z Last Updated: 2025-04-15T19:02:52.021Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-321 Description: An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-
ram Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1474
CVE ID: CVE-2022-26022 State: PUBLISHED Published: 2022-04-01T22:17:55.227Z Last Updated: 2025-04-16T17:57:23.967Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Omron Products: CX-Position Problem Types: CWE-787 Description: Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-02 - https://www.zerodayinitiative.com/advisories/ZDI-22-581/
CVE ID: CVE-2022-26023 State: PUBLISHED Published: 2022-11-09T17:35:36.028Z Last Updated: 2025-04-15T18:41:10.624Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-489 Description: A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security features. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://inhandnetworks.com/upload/attachment/202210/25/In
CVE Program Container: - CISA ADP Vulnrichment: References: - https://inhandnetworks.com/upload/attachment/202210/25/InHand-PSA-2022-02.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1520
CVE ID: CVE-2022-26024 State: PUBLISHED Published: 2022-11-11T15:49:14.302Z Last Updated: 2025-01-29T20:45:50.692Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN Problem Types: escalation of privilege Description: Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/secu
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00689.html
CVE ID: CVE-2022-26026 State: PUBLISHED Published: 2022-05-25T20:15:19.304Z Last Updated: 2025-04-15T19:01:28.799Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-306 Description: A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to loss of communications. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1491
CVE ID: CVE-2022-26027 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:23:10.359Z Description: No description available.
CVE ID: CVE-2022-26028 State: PUBLISHED Published: 2022-11-11T15:49:15.914Z Last Updated: 2025-01-29T20:43:45.423Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VTune(TM) Profiler software Problem Types: escalation of privilege Description: Uncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00676.html
CVE ID: CVE-2022-26031 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:23:20.051Z Description: No description available.
CVE ID: CVE-2022-26032 State: PUBLISHED Published: 2023-02-16T19:59:49.508Z Last Updated: 2025-01-27T18:24:09.235Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Distribution for Python programming language for Intel(R) oneAPI Toolkits Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) Distribution for Python programming language before version 2022.1 for Intel(R) oneAPI Toolkits may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/co
ccess. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html