Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eferences: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41193 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.521Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa8
ce in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41194 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.617Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119 Description: Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.suppor
References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41195 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.589Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022
ten space in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41196 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.566Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-
CVE ID: CVE-2022-41197 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.594Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119 Description: Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/
: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41198 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.684Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e
ry. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41199 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-15T14:06:39.309Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.
ce in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41200 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:35:49.555Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic (.svg, svg.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa8
CVE ID: CVE-2022-41201 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-06-05T14:34:52.076Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.s
space in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3245928
CVE ID: CVE-2022-41202 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T13:48:23.717Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-119, CWE-787 Description: Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sa
CVE ID: CVE-2022-41203 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T17:49:02.423Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad) Problem Types: CWE-502 Description: In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted data vulnerability. This could highly compromise the
ous serialized object, which leads to deserialization of untrusted data vulnerability. This could highly compromise the Confidentiality, Integrity, and Availability of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3243924
CVE ID: CVE-2022-41204 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T15:07:49.563Z Vendors: SAP SE Products: SAP Commerce Problem Types: CWE-601 Description: An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack accounts. A successful attack could compromise the Confidentiality, Integrity, and Availability of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap
of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3239152
CVE ID: CVE-2022-41205 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-02T18:31:24.608Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: SAP SE Products: SAP GUI for Windows Problem Types: CWE-94 Description: SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attacker can gain access to registries which can cause a limited impact on confidentiality and high impact on availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - ht
ISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3237251
CVE ID: CVE-2022-41206 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T15:02:04.060Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) Problem Types: CWE-79 Description: SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430, allows an authenticated attacker to send user-controlled inputs when OLAP connections are created and edited in the Central Management Console. On successful exploitation, there could be a limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sa
he application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3229425
CVE ID: CVE-2022-41207 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T14:49:50.788Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP Biller Direct Problem Types: CWE-601 Description: SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect the victim to a malicious site of the attacker's choosing which can result in disclosure or modification of the victim's information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3238042
CVE ID: CVE-2022-41208 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-08T16:02:41.066Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP Financial Consolidation Problem Types: CWE-79 Description: Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to alter current user session. On successful exploitation, the attacker can view or modify information, causing a limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap
e application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3260708
CVE ID: CVE-2022-41209 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T15:00:36.753Z Vendors: SAP SE Products: SAP Customer Data Cloud (Gigya) Problem Types: CWE-326 Description: SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method which lacks proper diffusion and does not hide the patterns well. This can lead to information disclosure. In certain scenarios, application might also be susceptible to replay attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/note
tps://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3248970
CVE ID: CVE-2022-41210 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T13:46:16.227Z Vendors: SAP SE Products: SAP Customer Data Cloud (Gigya) Problem Types: CWE-338 Description: SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3248384
CVE ID: CVE-2022-41211 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T13:57:21.947Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SAP SE Products: SAP 3D Visual Enterprise Author, SAP 3D Visual Enterprise Viewer Problem Types: CWE-787, CWE-119 Description: Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer, Arbitrary Code Execution can be triggered when payload forces:Re-use of dangling pointer which refers to overwritten space in memory. The accessed memory must be filled with code to execute the atta
ng pointer which refers to overwritten space in memory. The accessed memory must be filled with code to execute the attack. Therefore, repeated success is unlikely.Stack-based buffer overflow. Since the memory overwritten is random, based on access rights of the memory, repeated success is not assured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3263436
CVE ID: CVE-2022-41212 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-02T18:04:34.316Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP SE Products: SAP NetWeaver Application Server ABAP and ABAP Platform Problem Types: CWE-22 Description: Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the confidentiality of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
mpromise the confidentiality of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3256571
CVE ID: CVE-2022-41214 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:22:17.382Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver Application Server ABAP and ABAP Platform Problem Types: CWE-20 Description: Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA AD
mpromise the integrity and availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3256571
CVE ID: CVE-2022-41215 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-04-30T13:59:19.624Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: SAP SE Products: SAP NetWeaver ABAP Server and ABAP Platform Problem Types: CWE-601 Description: SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https
ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3251202
CVE ID: CVE-2022-41216 State: PUBLISHED Published: 2023-02-22T14:42:30.373Z Last Updated: 2025-03-11T13:39:42.430Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Hybrid Software Products: Cloudflow Problem Types: CWE-829 Description: Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system. Additional Analyst Notes: - CVE Program Container: References: - https://csirt.divd.nl/CVE-2022-41216 - https://csirt.divd.nl/DIVD-2022-00052
CVE ID: CVE-2022-41217 State: PUBLISHED Published: 2023-02-22T14:42:25.592Z Last Updated: 2025-04-01T04:48:09.968Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hybrid Software Products: Cloudflow Problem Types: CWE-434 Description: Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2022-41217 - https://csirt.divd.nl/DIVD-2022-00052
CVE ID: CVE-2022-41218 State: PUBLISHED Published: 2022-09-21T00:00:00.000Z Last Updated: 2025-05-28T15:28:47.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/20220908132754.30532-1-tiwai%40suse.de/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/dvb-core/dmxdev.c - http://www.openwall.com/lists/oss-security/2022/09/23/4 - http://www.openwall.com/lists/
ivers/media/dvb-core/dmxdev.c - http://www.openwall.com/lists/oss-security/2022/09/23/4 - http://www.openwall.com/lists/oss-security/2022/09/24/2 - http://www.openwall.com/lists/oss-security/2022/09/24/1 - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fd3d91ab1c6ab0628fe642dd570b56302c30a792
CVE ID: CVE-2022-41220 State: PUBLISHED Published: 2022-09-21T06:57:44.000Z Last Updated: 2025-04-09T18:22:48.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nereusx/md2roff/issues/5
CVE ID: CVE-2022-41221 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-17T15:18:30.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenText Archive Center Administration client (Versions 16.2.3, 21.2, and older versions) could upload XML files to the application that it did not sufficiently validate. As a result, attackers could craft XML files that, when processed by the application, would cause a negative security impact such as data exfiltration or localized denial of service against the application instance and system of the user running i
ch as data exfiltration or localized denial of service against the application instance and system of the user running it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.withsecure.com/advisories/opentext-archive-center-administration-client-xxe-vulnerability
CVE ID: CVE-2022-41222 State: PUBLISHED Published: 2022-09-21T00:00:00.000Z Last Updated: 2025-05-28T15:28:00.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2347 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2 - http://packetstormsecurity.com/files/168466/Linux-Stab