deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-36665
Published: 2022-07-12
Description: An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: http://druva.com; https://docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_before; https://imhotepisinvisible.com/druva-lpe/
CVE: CVE-2021-36666
Published: 2022-07-12
Description: An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://druva.com; https://docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_before; https://imhotepisinvisible.com/druva-lpe/
CVE: CVE-2021-36667
Published: 2022-07-12
Description: Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the local HTTP server due to un-sanitized call to the python os.system library.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://druva.com; https://docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_before; https://imhotepisinvisible.com/druva-lpe/
CVE: CVE-2021-36668
Published: 2022-07-12
Description: URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: http://druva.com; https://docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_before; https://imhotepisinvisible.com/druva-lpe/
CVE: CVE-2021-38289
Published: 2022-07-12
Description: An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts. NOTE: As of April 2026, the vendor has officially decommissioned the affected legacy endpoints and associated services. The vulnerability is mitigated as the functional logic is no longer operational and the URLs have been removed from production.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/viperbluff/Novastar-VNNOX-iCare-Privilege-Escalation; https://security.novaicare.com/advisory-cve-2021-38289.html; https://twitter.com/viperbluff/status/[PII_REDACTED]44230150?s=20&t=iPSn8eNxaxUKis5OKSQJRQ
CVE: CVE-2021-39999
Published: 2022-07-12
Description: There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a specific message to the target device due to insufficient validation of packets. Successful exploit could cause a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211201-01-buffer-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211201-01-buffer-en
CVE: CVE-2021-40012
Published: 2022-07-12
Description: Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/7/; https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]
CVE: CVE-2021-40013
Published: 2022-07-12
Description: Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.
CVSS Score: 6.5 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2022/7/; https://consumer.huawei.com/en/support/bulletin/2022/7/
CVE: CVE-2021-40016
Published: 2022-07-12
Description: Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.
CVSS Score: 6.5 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2022/7/; https://consumer.huawei.com/en/support/bulletin/2022/7/
CVE: CVE-2021-41396
Published: 2022-07-12
Description: Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.live555.com/pipermail/live-devel/2021-September/021994.html; http://www.live555.com/liveMedia/public/changelog.txt; http://lists.live555.com/pipermail/live-devel/2021-September/021994.html
CVE: CVE-2021-46741
Published: 2022-07-12
Description: The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/7/; https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202207-[PII_REDACTED]
CVE: CVE-2022-2366
Published: 2022-07-12
Description: Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2022-30750
Published: 2022-07-12
Description: Improper access control vulnerability in updateLastConnectedClientInfo function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30751
Published: 2022-07-12
Description: Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFI_AP_STA_DHCPACK_EVENT action.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30752
Published: 2022-07-12
Description: Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFI_AP_STA_STATE_CHANGED action.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30753
Published: 2022-07-12
Description: Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30754
Published: 2022-07-12
Description: Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30755
Published: 2022-07-12
Description: Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30756
Published: 2022-07-12
Description: Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30757
Published: 2022-07-12
Description: Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FINE_LOCATION permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-30758
Published: 2022-07-12
Description: Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected information with privilege of Finder.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-31904
Published: 2022-07-12
Description: EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Online_Update.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://egt-kommunikationstechnik.com; http://mediacenter.com; https://uberrider.de/?page_id=247
CVE: CVE-2022-32951
Published: 2022-07-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-33173
Published: 2022-07-12
Description: An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead.
CVSS Score: 7.5 (HIGH)
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts
CVE: CVE-2022-33685
Published: 2022-07-12
Description: Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-561
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33686
Published: 2022-07-12
Description: Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.
CVSS Score: 2.3 (LOW)
CWE: CWE-200, CWE-552
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33687
Published: 2022-07-12
Description: Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33688
Published: 2022-07-12
Description: Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33689
Published: 2022-07-12
Description: Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33690
Published: 2022-07-12
Description: Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20, CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33691
Published: 2022-07-12
Description: A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33692
Published: 2022-07-12
Description: Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-213, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33693
Published: 2022-07-12
Description: Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.
CVSS Score: 2.0 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33694
Published: 2022-07-12
Description: Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-213, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33695
Published: 2022-07-12
Description: Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33696
Published: 2022-07-12
Description: Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-213, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33697
Published: 2022-07-12
Description: Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33698
Published: 2022-07-12
Description: Exposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows local attackers to access ICCID via log.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33699
Published: 2022-07-12
Description: Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log.
CVSS Score: 2.0 (LOW)
CWE: CWE-200, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33700
Published: 2022-07-12
Description: Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log.
CVSS Score: 2.0 (LOW)
CWE: CWE-200, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33701
Published: 2022-07-12
Description: Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is protected by system permission by sending braodcast intent.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33702
Published: 2022-07-12
Description: Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33703
Published: 2022-07-12
Description: Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33704
Published: 2022-07-12
Description: Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7
CVE: CVE-2022-33705
Published: 2022-07-12
Description: Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33706
Published: 2022-07-12
Description: Improper access control vulnerability in Samsung Gallery prior to version 13.1.05.8 allows physical attackers to access the pictures using S Pen air gesture.
CVSS Score: 2.4 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33707
Published: 2022-07-12
Description: Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-334, CWE-330
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33708
Published: 2022-07-12
Description: Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33709
Published: 2022-07-12
Description: Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33710
Published: 2022-07-12
Description: Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33711
Published: 2022-07-12
Description: Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-354, CWE-354
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33712
Published: 2022-07-12
Description: Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-601
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33713
Published: 2022-07-12
Description: Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
CVE: CVE-2022-33911
Published: 2022-07-12
Description: An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts
CVE: CVE-2022-34735
Published: 2022-07-12
Description: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202207-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/7/
CVE: CVE-2022-34736
Published: 2022-07-12
Description: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202207-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/7/