rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-23826 
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.
Problem types: cwe_id: CWE-367
description: CWE-367  Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ VII
default_status: affected
vendor: AMD
product: AMD Radeon™ RX Vega Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Product
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO VII
default_status: affected
vendor: AMD
product: AMD Instinct™ MI250
default_status: affected
vendor: AMD
product: AMD Instinct™ MI210
default_status: affected
vendor: AMD
product: AMD Radeon™ Instinct™ MI25
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
Published: 2026-05-15T02:30:16.389Z
CVE-2022-23829 
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
Affected products: vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series
default_status: affected
vendor: AMD
product: AMD Ryzen™ 6000 Series Mobile Processors and Workstations
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processor / 2nd Gen AMD Ryzen™ Mobile Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO Processor
default_status: affected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: affected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: affected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 3000
default_status: affected
vendor: AMD
product: AMD EPYC (TM) Embedded 7002
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded R1000
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded R2000
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded 5000
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded V1000
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded V2000
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded V3000
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2024-06-18T19:01:24.315Z
CVE-2022-23830 
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 4th Gen AMD EPY™ Processors
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 1.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Published: 2023-11-14T18:53:28.408Z
CVE-2022-23831 
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD μProf
Published: 2022-11-09T20:45:40.420Z
CVE-2022-23833 
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T00:00:00.000Z
CVE-2022-23835 
The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and reads an IMAP credentialing message that is (by design) not displayed to the victim within the AOSP SMS/MMS messaging application. (Often, the IMAP credentials are usable to listen to voice mail messages sent before the vulnerability was exploited, in addition to new ones.) NOTE: some vendors characterize this as not a "concrete and exploitable risk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T03:31:02.000Z
CVE-2022-23837 
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T00:00:00.000Z
CVE-2022-23848 
In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-20T18:09:57.000Z
CVE-2022-23849 
The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-03T02:07:47.000Z
CVE-2022-23850 
xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-23T06:47:45.000Z
CVE-2022-23851 
Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-17T00:00:00.000Z
CVE-2022-23852 
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T01:06:50.000Z
CVE-2022-23853 
The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T00:00:00.000Z
CVE-2022-23854 
AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.
Problem types: cwe_id: CWE-23
description: CWE-23 Relative Path Traversal
Affected products: vendor: AVEVA
product: InTouch Access Anywhere
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Jens Regel
lang: en
value: CRISEC
Published: 2022-12-23T20:50:24.757Z
CVE-2022-23855 
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to reset passwords and login as any local account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T01:43:48.000Z
CVE-2022-23856 
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T01:43:34.000Z
CVE-2022-23857 
model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table (which contains sensitive information such as the users' encrypted passwords).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T01:56:34.000Z
CVE-2022-23858 
A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T02:01:52.000Z
CVE-2022-23861 
Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be leveraged to perform XSS attacks on legitimate users accessing the SafeQ web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-22T00:00:00.000Z
CVE-2022-23862 
A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT Authority\System" user, an attacker is able to use the vulnerability to execute arbitrary code and elevate to the system user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-22T00:00:00.000Z
CVE-2022-23863 
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T15:33:26.000Z
CVE-2022-23865 
Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx. To exploit this vulnerability, an attacker must inject '"> on the thes1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T15:28:40.000Z
CVE-2022-23868 
RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-30T10:14:16.000Z
CVE-2022-23869 
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-30T10:15:55.000Z
CVE-2022-23871 
Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T02:05:27.000Z
CVE-2022-23872 
Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T21:26:53.000Z
CVE-2022-23873 
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user_firstname' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T02:43:53.000Z
CVE-2022-23878 
seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T18:40:25.000Z
CVE-2022-23880 
An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T20:09:38.000Z
CVE-2022-23881 
ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_template.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T20:09:40.000Z
CVE-2022-23882 
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T11:50:22.000Z
CVE-2022-23884 
Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T12:08:40.000Z
CVE-2022-23887 
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T20:44:58.000Z
CVE-2022-23888 
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T20:44:59.000Z
CVE-2022-23889 
The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T20:45:01.000Z
CVE-2022-23896 
Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T12:11:53.000Z
CVE-2022-23898 
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-03T18:01:34.000Z
CVE-2022-23899 
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-03T18:01:34.000Z
CVE-2022-23900 
A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-07T10:19:14.000Z
CVE-2022-23901 
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T11:12:41.000Z
CVE-2022-23902 
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:18:15.000Z
CVE-2022-23903 
A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T11:55:17.000Z
CVE-2022-23904 
Rainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack that allows an authenticated user to upgrade his account to admin and gain access to the auctionworx admin control panel. This vulnerability affects AuctionWorx Enterprise and AuctionWorx: Events Edition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T10:30:29.000Z
CVE-2022-23906 
CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T22:55:14.000Z
CVE-2022-23907 
CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T22:55:15.000Z
CVE-2022-23909 
There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T05:49:17.000Z
CVE-2022-23911 AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection
The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL statement when retrieving a testimonial to edit, leading to a SQL Injection
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Testimonial WordPress Plugin – AP Custom Testimonial
Credits: lang: en
value: Rafael Castilho
Published: 2022-02-28T09:06:57.000Z
CVE-2022-23912 AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Testimonial WordPress Plugin – AP Custom Testimonial
Credits: lang: en
value: Rafael Castilho
Published: 2022-02-28T09:06:59.000Z
CVE-2022-23913 Apache ActiveMQ Artemis DoS
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.
Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: Apache Software Foundation
product: Apache ActiveMQ Artemis
Published: 2022-02-04T22:33:01.000Z
CVE-2022-23915 Remote Code Execution (RCE)
The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when using git or mercurial repositories. Authenticated users, can change the behavior of the application in an unintended way, leading to command execution.
Problem types: description: Remote Code Execution (RCE)
Affected products: vendor: n/a
product: Weblate
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Alessio Della Libera of Snyk Research Team
Published: 2022-03-04T20:00:13.383Z
CVE-2022-23916 
Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-24374.
Problem types: description: Cross-site scripting
Affected products: vendor: appleple inc.
product: a-blog cms
Published: 2022-02-24T09:50:30.000Z
CVE-2022-23918 
A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the ethAddr field within the protobuf message to cause a buffer overflow.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: TCL
product: LinkHub Mesh Wifi
Published: 2022-08-05T21:12:34.519Z
CVE-2022-23919 
A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the name field within the protobuf message to cause a buffer overflow.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: TCL
product: LinkHub Mesh Wifi
Published: 2022-08-05T21:12:49.739Z