deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-46464
Published: 2022-12-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2021-39434
Published: 2022-12-06
Description: A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521, CWE-521
References: https://www.cnvd.org.cn/flaw/show/CNVD-2018-26041; https://www.cnvd.org.cn/flaw/show/CNVD-2018-26041
CVE: CVE-2022-38336
Published: 2022-12-06
Description: An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html; https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html
CVE: CVE-2022-38337
Published: 2022-12-06
Description: When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial of Service (DoS) for the user if services like fail2ban are used.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38337.html; https://mobaxterm.mobatek.net/download-home-edition.html; https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38337.html
CVE: CVE-2022-40918
Published: 2022-12-06
Description: Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://1af95112-6fd8-4c8f-8bd6-c47f8ef7b77a.filesusr.com/ugd/c1f861_51eb0d33d5764efc93e9d5f19c306950.pdf; https://medium.com/%40meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368; https://1af95112-6fd8-4c8f-8bd6-c47f8ef7b77a.filesusr.com/ugd/c1f861_51eb0d33d5764efc93e9d5f19c306950.pdf
CVE: CVE-2022-44009
Published: 2022-12-06
Description: Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://stackstorm.com/2022/12/v3-8-0-released/; https://stackstorm.com/2022/12/v3-8-0-released/
CVE: CVE-2022-45283
Published: 2022-12-06
Description: GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/gpac/gpac/issues/2295; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2295
CVE: CVE-2022-4173
Published: 2022-12-06
Description: A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

CVSS Score: 7.3 (HIGH)
CWE: CWE-269, CWE-269
References: https://support.norton.com/sp/static/external/tools/security-advisories.html; https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE: CVE-2022-46151
Published: 2022-12-06
Description: Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field of the auth callback url in `querybook/server/app/auth/oauth_auth.py` and `querybook/server/app/auth/okta_auth.py`. This may allow attackers to perform reflected cross site scripting (XSS) if Content Security Policy (CSP) is not enabled or `unsafe-inline` is allowed. Users are advised to upgrade to the latest, patched version of querybook (version 3.14.2 or greater). Users unable to upgrade may enable CSP and not allow unsafe-inline or manually escape query parameters in a reverse proxy.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/pinterest/querybook/commit/88a7f10495bf5ed1a556ade51a2f2794e403c063; https://github.com/pinterest/querybook/security/advisories/GHSA-mrrw-9wf7-xq6w; https://github.com/pinterest/querybook/commit/88a7f10495bf5ed1a556ade51a2f2794e403c063
CVE: CVE-2022-34881
Published: 2022-12-06
Description: Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information.

This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.
CVSS Score: 3.3 (LOW)
CWE: CWE-209, CWE-209
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html
CVE: CVE-2022-40603
Published: 2022-12-06
Description: A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victim’s browser.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-in-firewalls; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-in-firewalls
CVE: CVE-2022-24439
Published: 2022-12-06
Description: All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://github.com/gitpython-developers/GitPython/blob/bec61576ae75803bc4e60d8de7a629c194313d1c/git/repo/base.py%23L1249; https://lists.debian.org/debian-lts-announce/2023/07/msg00024.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV5DV7GBLMOZT7U3Q4TDOJO5R6G3V6GH/
CVE: CVE-2022-25912
Published: 2022-12-06
Description: The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport protocol, which makes it exploitable via clone() method. This vulnerability exists due to an incomplete fix of [CVE-2022-24066](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2434306).
CVSS Score: 8.1 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/steveukx/git-js/blob/main/docs/PLUGIN-UNSAFE-ACTIONS.md%23overriding-allowed-protocols; https://github.com/steveukx/git-js/commit/774648049eb3e628379e292ea172dccaba610504; https://github.com/steveukx/git-js/releases/tag/simple-git%403.15.0
CVE: CVE-2022-39090
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39091
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39092
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39093
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39094
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39095
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39096
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39097
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39098
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39099
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39100
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39101
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39102
Published: 2022-12-06
Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]91336001
CVE: CVE-2022-39106
Published: 2022-12-06
Description: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39129
Published: 2022-12-06
Description: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39130
Published: 2022-12-06
Description: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39131
Published: 2022-12-06
Description: In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-667
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39132
Published: 2022-12-06
Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39133
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-39134
Published: 2022-12-06
Description: In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-362
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42754
Published: 2022-12-06
Description: In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416, CWE-416
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42755
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42756
Published: 2022-12-06
Description: In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42757
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 3.3 (LOW)
CWE: CWE-126, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42758
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 3.3 (LOW)
CWE: CWE-126, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42759
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42760
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42761
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42762
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42763
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42764
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42765
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42766
Published: 2022-12-06
Description: In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42767
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42768
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-126, CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42769
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42770
Published: 2022-12-06
Description: In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-362
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42771
Published: 2022-12-06
Description: In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-362
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42772
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42773
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006
CVE: CVE-2022-42774
Published: 2022-12-06
Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]88411006