rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-23301 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extension
vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2022-03-09T17:07:26.000Z
CVE-2022-23302 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName configuration causing JMSSink to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-4104. Note this issue only affects Log4j 1.x when specifically configured to use JMSSink, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Log4j 1.x
Credits: lang: en
value: Eduardo' Vela, Maksim Shudrak and Jacob Butler from Google.
Published: 2022-01-18T15:25:20.000Z
CVE-2022-23303 
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-17T00:00:00.000Z
CVE-2022-23304 
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-17T00:00:00.000Z
CVE-2022-23305 SQL injection in JDBC Appender in Apache Log4j V1
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Apache Software Foundation
product: Apache Log4j 1.x
Credits: lang: en
value: Daniel Martin of NCC Group
Published: 2022-01-18T15:25:22.000Z
CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Log4j 1.x
Credits: lang: en
value: @kingkk
Published: 2022-01-18T15:25:23.000Z
CVE-2022-23308 
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-26T00:00:00.000Z
CVE-2022-23312 
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: Spectrum Power 4
Published: 2022-02-09T15:17:30.000Z
CVE-2022-23314 
MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T23:40:37.000Z
CVE-2022-23315 
MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T23:40:37.000Z
CVE-2022-23316 
An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T11:24:13.000Z
CVE-2022-23317 
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T12:53:17.000Z
CVE-2022-23318 
A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-17T12:44:33.000Z
CVE-2022-23319 
A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-17T13:44:29.000Z
CVE-2022-23320 
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-07T10:47:33.000Z
CVE-2022-23321 
A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-10T18:11:16.000Z
CVE-2022-23327 
A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T11:24:13.000Z
CVE-2022-23328 
A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T11:24:22.000Z
CVE-2022-23329 
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T21:03:52.000Z
CVE-2022-23330 
A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T21:03:55.000Z
CVE-2022-23331 
In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T12:29:28.000Z
CVE-2022-23332 
Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-09T13:37:24.000Z
CVE-2022-23334 
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-30T00:00:00.000Z
CVE-2022-23335 
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:18:11.000Z
CVE-2022-23336 
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:18:13.000Z
CVE-2022-23337 
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:18:14.000Z
CVE-2022-23340 
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T13:20:31.000Z
CVE-2022-23342 
The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login request to the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint. This can lead to user enumeration against the underlying Active Directory integrated systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T13:29:21.000Z
CVE-2022-23345 
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:42:29.000Z
CVE-2022-23346 
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:39:32.000Z
CVE-2022-23347 
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:23:37.000Z
CVE-2022-23348 
BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:33:00.000Z
CVE-2022-23349 
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:26:28.000Z
CVE-2022-23350 
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:29:34.000Z
CVE-2022-23352 
An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:35:48.000Z
CVE-2022-23357 
mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T02:38:41.000Z
CVE-2022-23358 
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T12:01:24.000Z
CVE-2022-23363 
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T22:08:43.000Z
CVE-2022-23364 
HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T22:08:44.000Z
CVE-2022-23365 
HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T22:08:46.000Z
CVE-2022-23366 
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T22:08:47.000Z
CVE-2022-23367 
Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T17:45:45.000Z
CVE-2022-23375 
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-19T15:43:09.000Z
CVE-2022-23376 
WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-19T15:42:29.000Z
CVE-2022-23377 
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-01T12:44:19.000Z
CVE-2022-23378 
A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-09T12:16:57.000Z
CVE-2022-23379 
Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T22:19:22.000Z
CVE-2022-23380 
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-01T13:12:07.000Z
CVE-2022-23382 
Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:A/A:H/C:N/I:H/PR:N/S:U/UI:N
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2023-09-11T00:00:00.000Z
CVE-2022-23383 
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-07T15:15:58.000Z
CVE-2022-23384 
YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T12:04:48.000Z
CVE-2022-23387 
An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-01T16:42:36.000Z
CVE-2022-23389 
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:48:05.000Z
CVE-2022-23390 
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:48:06.000Z
CVE-2022-23391 
A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:48:08.000Z
CVE-2022-23395 
jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T11:16:55.000Z
CVE-2022-23397 
The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no clear steps of reproduction."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T00:00:00.000Z
CVE-2022-23399 
A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: TCL
product: LinkHub Mesh Wifi
Published: 2022-08-05T21:12:20.382Z
CVE-2022-23400 
A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
Problem types: cwe_id: CWE-193
description: CWE-193: Off-by-one Error
Affected products: vendor: Accusoft
product: ImageGear
Published: 2022-05-03T16:05:21.667Z
CVE-2022-23401 
The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Yokogawa Electric Corporation
product: CENTUM CS 3000
vendor: Yokogawa Electric Corporation
product: CENTUM VP
vendor: Yokogawa Electric Corporation
product: Exaopc
Published: 2022-03-11T09:10:51.000Z
CVE-2022-23402 
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00
Problem types: cwe_id: CWE-798
description: CWE-798: Use of Hard-coded Credentials
Affected products: vendor: Yokogawa Electric Corporation
product: CENTUM VP
vendor: Yokogawa Electric Corporation
product: Exaopc
Published: 2022-03-11T09:10:53.000Z
CVE-2022-23403 
Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access.
Problem types: description: denial of service
Affected products: vendor: n/a
product: Intel(R) Data Center Manager software
Published: 2022-08-18T19:55:40.000Z
CVE-2022-23408 
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-18T20:20:15.000Z
CVE-2022-23409 
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T07:04:50.000Z
CVE-2022-23410 
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.
Problem types: cwe_id: CWE-427
description: CWE-427 Uncontrolled Search Path Element
Affected products: vendor: Axis Communications AB
product: AXIS IP Utility
default_status: unaffected
Published: 2022-02-14T21:04:28.000Z
CVE-2022-23425 
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Samsung Mobile
product: Samsung Mobile Devices
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
version: 3.1
Published: 2022-02-11T17:40:09.000Z
CVE-2022-23426 
A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Samsung Mobile
product: Samsung Mobile Devices
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
version: 3.1
Published: 2022-02-11T17:40:09.000Z