Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46568 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:38:47.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/B1SZP0aIo - https://hackmd.io/%400dayResearch/SetSysEmailSettings
CVE ID: CVE-2022-46569 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:35:47.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/r1R6sWRUs - https://hackmd.io/%400dayResearch/SetWLanRadioSecurity
CVE ID: CVE-2022-46570 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:34:15.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/r1zsTSmDs - https://hackmd.io/%400dayResearch/SetWan3Settings_l2tp - https://hackmd.io/%400dayResearch/SetWan3Settings_pppoe - https://hackmd.io/%400dayResearch/SetWan3Settings_pptp
CVE ID: CVE-2022-46580 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T22:40:50.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul6-TEW755-bof-wifi_captive_portal-d2b3d37344564ed4b3948a471d1eeb11
CVE ID: CVE-2022-46581 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T22:38:22.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul5-TEW755-bof-tools_nslookup-c83bac14fe0f4f729535053459479fd1
CVE ID: CVE-2022-46582 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T22:36:51.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (sub_4061E0) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul1-TEW755-bof-do_graph_auth-06984af9eb224f7fbcd27dbb6d7d2a2d
CVE ID: CVE-2022-46583 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T16:36:14.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul2-TEW755-bof-wizard_ipv6-7ed96443609f4640b5f0f3bd6ce23b83
CVE ID: CVE-2022-46584 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:10:40.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_deny (sub_415D7C) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul4-TEW755-bof-kick_ban_wifi_mac_deny-a6801904571848d9a313c35b081e0793
CVE ID: CVE-2022-46585 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:01:08.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul7-TEW755-bof-create_folder-8676782581de4b1e9d2aee28386bdc04
CVE ID: CVE-2022-46586 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:00:26.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul3-TEW755-bof-kick_ban_wifi_mac_allow-4624d89edfc54084ada1f4c8dbfa452d
CVE ID: CVE-2022-46588 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:59:47.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul7-TEW755-bof-setup_wizard_mydlink-7bb35b55f74a4d57bc5bc5d411ef8831
CVE ID: CVE-2022-46589 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:59:05.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (sub_41E730) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul3-TEW755-bof-tools_netstat-30ffd80903384bc5bbadae07ff6612f1
CVE ID: CVE-2022-46590 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:58:23.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul4-TEW755-bof-tools_netstat-2804b2eab6e14846af539fce8d90b564
CVE ID: CVE-2022-46591 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:10:00.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul2-TEW755-bof-reject-0ed4829f416d4d2b86a3bce6792cab95
CVE ID: CVE-2022-46592 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:08:17.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_5g function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul8-TEW755-bof-set_sta_enrollee_pin_5g-60fb8f382256478dbe8d4c9c35e8dd60
CVE ID: CVE-2022-46593 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:06:53.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul6-TEW755-bof-do_sta_enrollee_wifi-11ba97191f944eeb88f495091926b7a9
CVE ID: CVE-2022-46594 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:04:11.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul1-TEW755-bof-auto_up_fw-1359a9e4b8ee4ad6b8632cc4a3e6eec1
CVE ID: CVE-2022-46596 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T16:35:29.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul6-TEW755-bof-icp_delete_img-ed2df4b6b4f74520bda8adead2d0d651
CVE ID: CVE-2022-46597 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T16:34:43.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul1-TEW755-command-injection-setup_wizard_mydlink-dccea20f75e04110878213126612feba
CVE ID: CVE-2022-46598 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T16:33:55.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_5g function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul3-TEW755-injection-set_sta_enrollee_pin_5g-b903e73d59b940c8a79bf4425dfdf992
CVE ID: CVE-2022-46599 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T16:33:07.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul5-TEW755-bof-icp_setlogo_img-692484d9166046e481afc08a8f50e757
CVE ID: CVE-2022-46600 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-14T18:27:23.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul4-TEW755-injection-set_sta_enrollee_pin_24g-f91b4c03489146af804fe59a3f44d0d3
CVE ID: CVE-2022-46601 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:21:08.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul7-TEW755-bof-icp_setbg_img-455dda602d934577a16fbed88251ab26
CVE ID: CVE-2022-46603 State: PUBLISHED Published: 2023-01-09T00:00:00.000Z Last Updated: 2025-04-09T14:17:45.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/10cks/inkdropPoc
CVE ID: CVE-2022-46604 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-27T14:04:06.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40_sadshade/file-extention-bypass-in-responsive-filemanager-9-5-5-leading-to-rce-authenticated-3290eddc54e7 - https://github.com/trippo/ResponsiveFilemanager/blob/v9.9.5/filemanager/execute.php - https://github.com/trippo/Resp
7 - https://github.com/trippo/ResponsiveFilemanager/blob/v9.9.5/filemanager/execute.php - https://github.com/trippo/ResponsiveFilemanager/blob/v9.9.6/changelog.txt - http://packetstormsecurity.com/files/171720/Responsive-FileManager-9.9.5-Remote-Shell-Upload.html
CVE ID: CVE-2022-46609 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:09:37.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mirrors.neusoft.edu.cn/pypi/web/simple/request/ - https://github.com/herry-zhang/Python3-RESTfulAPI/ - http
s: - https://mirrors.neusoft.edu.cn/pypi/web/simple/request/ - https://github.com/herry-zhang/Python3-RESTfulAPI/ - https://github.com/herry-zhang/Python3-RESTfulAPI/blob/1c2081dca357685b3180b9baeb7e761e9a10ca99/SECURITY.md - https://github.com/herry-zhang/Python3-RESTfulAPI/commit/1c2081dca357685b3180b9baeb7e761e9a10ca99
CVE ID: CVE-2022-46610 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-09T15:41:48.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: 72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/72wukong/72crm-9.0-PHP/issues/36
CVE ID: CVE-2022-46620 State: REJECTED Published: N/A Last Updated: 2023-02-07T00:00:00 Description: No description available.
CVE ID: CVE-2022-46621 State: REJECTED Published: N/A Last Updated: 2023-02-07T00:00:00 Description: No description available.
CVE ID: CVE-2022-46622 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:28:59.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sudoninja-noob/CVE-2022-46622/blob/main/CVE-2022-46622
CVE ID: CVE-2022-46623 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:27:28.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sudoninja-noob/CVE-2022-46623/blob/main/CVE-2022-46623
CVE ID: CVE-2022-46624 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:20:36.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15904/online-graduate-tracer-system-college-ict-alumni.html - https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46624
CVE ID: CVE-2022-46631 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:29:12.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiSignalCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/6
CVE ID: CVE-2022-46634 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:27:51.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/7
CVE ID: CVE-2022-46637 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-14T18:26:05.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers/ - https://prolink2u.com/product/prs1841/ - https://packetstormsecurity.com/files/170342/ProLink-PRS1841-Backdoor-Account.html
CVE ID: CVE-2022-46639 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-03T14:23:55.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ia-informatica.com/it/CVE-2022-46639
CVE ID: CVE-2022-46640 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-02-06T15:15:57.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nanoleaf.com - https://pwning.tech/cve-2022-46640/
CVE ID: CVE-2022-46641 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:31:09.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindSettings function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetIpMacBindSettings%20Command%20Injection%20Vulnerability.md
CVE ID: CVE-2022-46642 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:29:08.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetAutoUpgradeInfo%20command%20injection%20vulnerability.md
CVE ID: CVE-2022-46645 State: PUBLISHED Published: 2023-05-10T13:16:40.849Z Last Updated: 2025-01-27T18:11:08.098Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Smart Campus Android application Problem Types: denial of service, CWE-400 Description: Uncontrolled resource consumption in the Intel(R) Smart Campus Android application before version 9.9 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00815.html
CVE ID: CVE-2022-46646 State: PUBLISHED Published: 2023-11-14T19:04:36.776Z Last Updated: 2024-08-30T16:03:29.578Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel Unison software Problem Types: information disclosure, CWE-200 Description: Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2022-46647 State: PUBLISHED Published: 2023-11-14T19:04:35.648Z Last Updated: 2024-08-30T16:06:42.568Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel Unison software Problem Types: information disclosure, CWE-532 Description: Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2022-46648 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T18:52:30.835Z Vendors: ruby-git Products: ruby-git Problem Types: Code injection Description: ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ruby-git/ruby-git - https://github.com/ruby-git/ruby-git/pull/602 - https://jvn.jp/en/jp/JVN16765254/index.html - https://lists.debian.org/de
ttps://github.com/ruby-git/ruby-git/pull/602 - https://jvn.jp/en/jp/JVN16765254/index.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html
CVE ID: CVE-2022-46649 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T16:05:39.446Z Vendors: n/a Products: ALEOS Problem Types: CWE-78 Description: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-001/ - https://www.otorio.com/blog/airlink-acemanager-vulnerabilities/ - https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-04