Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34825 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:23:44.096Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Uncontrolled Search Path Element Description: Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jp
ute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jpn.nec.com/security-info/secinfo/nv22-014_en.html
CVE ID: CVE-2022-34826 State: PUBLISHED Published: 2022-07-15T11:29:46 Last Updated: 2024-08-03T09:22:10.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs. Additional Analyst Notes: - CVE Program Container: References: - https://www.couchbase.com/alerts
CVE ID: CVE-2022-34827 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T19:15:27.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Carel Boss Mini 1.5.0 has Improper Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mandiant/Vulnerability-Disclosures - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0040/MNDT-2022-0040.md
CVE ID: CVE-2022-34829 State: PUBLISHED Published: 2022-07-04T19:25:01 Last Updated: 2024-08-03T09:22:10.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload to the Mobile App Deployment API. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-34829.html
CVE ID: CVE-2022-34830 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T20:15:01.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2022-34831 State: PUBLISHED Published: 2022-09-14T02:58:52 Last Updated: 2024-08-03T09:22:10.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization. During the ACME enrollment process, an order is submitted containing an identifier for one or multiple dnsNames. These are validated properly in the ACME challenge. However, if the validation passes, a non-compliant client can include additional dnsNames the CSR sent to the finalize endpoint, resulting in EJBCA issuing a cer
compliant client can include additional dnsNames the CSR sent to the finalize endpoint, resulting in EJBCA issuing a certificate including the identifiers that were not validated. This occurs even if the certificate profile is configured to not allow a DN override by the CSR. Additional Analyst Notes: - CVE Program Container: References: - https://www.primekey.com/products/ejbca-enterprise/ - https://support.keyfactor.com/s/detail/a6x1Q000000CwC5QAK
CVE ID: CVE-2022-34832 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-09T16:06:38.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vermeg.com/agile-reporter/ - https://crashpark.weebly.com/blog/xxe-in-agilereporter-213-by-vermeg
CVE ID: CVE-2022-34833 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-17T13:24:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vermeg.com/agile-reporter/ - https://crashpark.weebly.com/blog/1-stored-xss-in-agilereporter-213-by-vermeg
CVE ID: CVE-2022-34834 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T20:38:04.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vermeg.com/agile-reporter/ - https://crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg
CVE ID: CVE-2022-34835 State: PUBLISHED Published: 2022-06-29T23:48:51.000Z Last Updated: 2025-11-03T19:27:09.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. Additional Analyst Notes: - CVE Program Container: References: - https://lists.denx.de/pipermail/u-boot/2022-June/486113.html - https://github.com/u-boot/u-boot/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409 - https://source.denx.de/u-boot/u-boot/-/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409
CVE ID: CVE-2022-34836 State: PUBLISHED Published: 2022-08-24T15:15:00.271508Z Last Updated: 2024-09-17T02:26:50.116Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: ABB Products: ABB Zenon Problem Types: CWE-23 Description: Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/
ty and the last error code etc. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-34837 State: PUBLISHED Published: 2022-08-24T15:14:33.829175Z Last Updated: 2024-09-17T04:04:24.349Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: ABB Products: ABB Zenon Problem Types: CWE-257 Description: Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-34838 State: PUBLISHED Published: 2022-08-24T15:15:26.256751Z Last Updated: 2024-09-17T02:53:31.652Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ABB Zenon Problem Types: CWE-257 Description: Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&Documen
gram Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-34839 State: PUBLISHED Published: 2022-07-22T16:44:40.359Z Last Updated: 2025-02-20T20:16:05.116Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CodexShaper Products: WP OAuth2 Server (WordPress plugin) Problem Types: Bypass Description: Authentication Bypass vulnerability in CodexShaper's WP OAuth2 Server plugin <= 1.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/oauth2-server/#description - https://patchstack.com/database/vulnerability/oauth2-server/wordpress-wp-oauth2-server-plugin-1-0-1-authentication-bypass-vulnerability
CVE ID: CVE-2022-34840 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T16:10:12.366Z Vendors: BUFFALO INC. Products: Buffalo network devices Problem Types: Use of hard-coded credentials Description: Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, W
ware Ver. 1.15 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, and WZR-D1100H firmware Ver. 2.00 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20221003-01.html - https://jvn.jp/en/vu/JVNVU92805279/index.html
CVE ID: CVE-2022-34841 State: PUBLISHED Published: 2023-02-16T20:00:15.646Z Last Updated: 2025-01-27T18:16:59.625Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Media SDK software Problem Types: escalation of privilege Description: Improper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html
CVE ID: CVE-2022-34842 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:03.084Z Description: No description available.
CVE ID: CVE-2022-34843 State: PUBLISHED Published: 2023-02-16T20:00:18.697Z Last Updated: 2025-01-27T18:16:03.025Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege Description: Integer overflow in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html
CVE ID: CVE-2022-34844 State: PUBLISHED Published: 2022-08-04T17:47:44.666161Z Last Updated: 2024-09-16T20:58:07.964Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IQ Centralized Management Problem Types: CWE-20 Description: In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Successful exploitation relies on conditions outside of the attacker's control.
nagement Microkernel (TMM) to terminate. Successful exploitation relies on conditions outside of the attacker's control. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K34511555
CVE ID: CVE-2022-34845 State: PUBLISHED Published: 2022-10-25T16:33:59.090Z Last Updated: 2025-04-15T18:45:18.216Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-345 Description: A firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network packet can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1580
CVE ID: CVE-2022-34846 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:04.414Z Description: No description available.
CVE ID: CVE-2022-34848 State: PUBLISHED Published: 2023-05-10T13:16:58.587Z Last Updated: 2025-01-27T18:05:14.787Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.html
CVE ID: CVE-2022-34849 State: PUBLISHED Published: 2023-02-16T20:00:08.528Z Last Updated: 2025-01-27T18:19:28.501Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Iris(R) Xe MAX drivers for Windows Problem Types: denial of service Description: Uncaught exception in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1436(v2) may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html
CVE ID: CVE-2022-34850 State: PUBLISHED Published: 2022-10-25T16:34:00.059Z Last Updated: 2025-04-15T18:45:11.487Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TA
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1578
CVE ID: CVE-2022-34851 State: PUBLISHED Published: 2022-08-04T17:47:58.281530Z Last Updated: 2024-09-17T01:10:55.231Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: F5 Products: BIG-IP, BIG-IQ Centralized Management Problem Types: CWE-20 Description: In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ Centralized Management all versions of 8.x, an authenticated attacker may cause iControl SOAP to become unavailable through undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst N
ests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K50310001
CVE ID: CVE-2022-34852 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:05.803Z Description: No description available.
CVE ID: CVE-2022-34853 State: PUBLISHED Published: 2022-07-22T16:49:34.810Z Last Updated: 2025-02-20T20:15:42.907Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: wpWax Products: Team (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (contributor or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/adl-team/#description - https://patchstack.com/database/vulnerability/adl-team/wordpress-team-plugin-1-2-6-multiple-authenticated-persistent-cross-site-s
atchstack.com/database/vulnerability/adl-team/wordpress-team-plugin-1-2-6-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2022-34854 State: PUBLISHED Published: 2023-02-16T20:00:12.038Z Last Updated: 2025-01-27T18:18:17.289Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) SUR software Problem Types: escalation of privilege Description: Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html
CVE ID: CVE-2022-34855 State: PUBLISHED Published: 2023-05-10T13:16:59.153Z Last Updated: 2025-01-27T18:05:00.690Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite Problem Types: escalation of privilege, CWE-22 Description: Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.html
CVE ID: CVE-2022-34856 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:07.093Z Description: No description available.
CVE ID: CVE-2022-34857 State: PUBLISHED Published: 2022-08-22T14:50:45.034Z Last Updated: 2025-02-20T20:12:32.515Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: smartypants Products: SP Project & Document Manager (WordPress plugin) Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) vulnerability in smartypants SP Project & Document Manager plugin <= 4.59 at WordPress Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-plugin-4-59-reflected-cross-site-scripting-xss-vulnerability - https://w
t-manager/wordpress-sp-project-document-manager-plugin-4-59-reflected-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/sp-client-document-manager/#developers
CVE ID: CVE-2022-34858 State: PUBLISHED Published: 2022-08-22T14:49:22.422Z Last Updated: 2025-02-20T20:12:56.324Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: miniOrange Products: OAuth 2.0 client for SSO (WordPress plugin) Problem Types: CWE-306 Description: Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin <= 1.11.3 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/oauth-client/wordpress-oauth-2-0-client-for-sso-plugin-1-11-3-authentication-bypass-vulnerability?_s_id=cve - https://lana.codes/lanavdb/df23b19f-4134-41d3-8c
t-for-sso-plugin-1-11-3-authentication-bypass-vulnerability?_s_id=cve - https://lana.codes/lanavdb/df23b19f-4134-41d3-8cb3-9d44189b461b?_s_id=cve
CVE ID: CVE-2022-34859 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:12.725Z Description: No description available.
CVE ID: CVE-2022-34860 State: REJECTED Published: N/A Last Updated: 2025-05-28T17:22:13.740Z Description: No description available.
CVE ID: CVE-2022-34861 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:08.397Z Description: No description available.
CVE ID: CVE-2022-34862 State: PUBLISHED Published: 2022-08-04T17:48:11.835796Z Last Updated: 2024-09-17T02:37:29.850Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-835 Description: In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f
cal Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K66510514
CVE ID: CVE-2022-34863 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:09.701Z Description: No description available.
CVE ID: CVE-2022-34864 State: PUBLISHED Published: 2023-02-16T20:00:19.848Z Last Updated: 2025-01-27T18:15:40.489Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege Description: Out-of-bounds read in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html
CVE ID: CVE-2022-34865 State: PUBLISHED Published: 2022-08-04T17:48:25.490474Z Last Updated: 2024-09-16T16:52:55.307Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-295 Description: In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K25046752
CVE ID: CVE-2022-34866 State: PUBLISHED Published: 2022-07-20T06:15:28 Last Updated: 2024-08-03T09:22:10.623Z Vendors: Yokogawa Rental & Lease Corporation Products: Passage Drive Problem Types: Improper Input Validation Description: Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running. Additional Analyst Notes: - CVE Program Container: References: - https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html - https://jvn.jp/en/j
- CVE Program Container: References: - https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html - https://jvn.jp/en/jp/JVN23766146/index.html