Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-26989 State: PUBLISHED Published: 2021-01-12T20:18:34 Last Updated: 2024-08-04T16:03:23.242Z Vendors: Siemens Products: JT2Go, Solid Edge SE2020, Solid Edge SE2021, Teamcenter Visualization Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current
tack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11892) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-050/ - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
CVE ID: CVE-2020-26990 State: PUBLISHED Published: 2021-01-12T20:18:34 Last Updated: 2024-08-04T16:03:23.263Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-843 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing ASM files. A crafted ASM file could trigger a type confusion condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11897) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/pro
ss. (ZDI-CAN-11897) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-055/ - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
CVE ID: CVE-2020-26991 State: PUBLISHED Published: 2021-01-12T20:18:34 Last Updated: 2024-08-04T16:03:23.176Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-822 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing ASM files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11899) Additional Analyst Notes: - CVE Program Container: References: - https://cert-
t of the current process. (ZDI-CAN-11899) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-053/ - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdf
CVE ID: CVE-2020-26992 State: PUBLISHED Published: 2021-01-12T20:18:35 Last Updated: 2024-08-04T16:03:23.189Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during font string handling. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https
ecute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE ID: CVE-2020-26993 State: PUBLISHED Published: 2021-01-12T20:18:35 Last Updated: 2024-08-04T16:03:23.242Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer in the font index handling function. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References:
ty to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE ID: CVE-2020-26994 State: PUBLISHED Published: 2021-01-12T20:18:35 Last Updated: 2024-08-04T16:03:23.262Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-122 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE ID: CVE-2020-26995 State: PUBLISHED Published: 2021-01-12T20:18:35 Last Updated: 2024-08-04T16:03:23.202Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11992) Additional Analyst Notes: - CVE Program Container: References: - https
e context of the current process. (ZDI-CAN-11992) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-060/ - https://www.zerodayinitiative.com/advisories/ZDI-21-241/ - https://www.zerodayinitiative.com/advisories/ZDI-21-242/
CVE ID: CVE-2020-26996 State: PUBLISHED Published: 2021-01-12T20:18:35 Last Updated: 2024-08-04T16:03:23.189Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of CG4 files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12027) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.sie
urrent process. (ZDI-CAN-12027) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-062/
CVE ID: CVE-2020-26997 State: PUBLISHED Published: 2021-04-22T20:42:19 Last Updated: 2024-08-04T16:03:23.217Z Vendors: Siemens Products: Solid Edge SE2020, Solid Edge SE2021 Problem Types: CWE-822 Description: A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11919) Additional Analyst N
leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11919) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06
CVE ID: CVE-2020-26998 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.196Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information. (ZDI-CAN-12040) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-6
) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-238/ - https://www.zerodayinitiative.com/advisories/ZDI-21-857/
CVE ID: CVE-2020-26999 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.220Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information. (ZDI-CAN-12042) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-6
) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-239/ - https://www.zerodayinitiative.com/advisories/ZDI-21-860/
CVE ID: CVE-2020-27000 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.207Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-119 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing BMP files. This can result in a memory corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12018) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pd
N-12018) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-237/
CVE ID: CVE-2020-27001 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.299Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12041) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productce
DI-CAN-12041) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-227/
CVE ID: CVE-2020-27002 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.180Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12043) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.
e current process. (ZDI-CAN-12043) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-228/
CVE ID: CVE-2020-27003 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.193Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-822 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing TIFF files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12158) Additional Analyst Notes: - CVE Program Container: References: - https://cert
xt of the current process. (ZDI-CAN-12158) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-229/
CVE ID: CVE-2020-27004 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.193Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of CGM files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12163) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.
e current process. (ZDI-CAN-12163) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-230/
CVE ID: CVE-2020-27005 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.173Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12178) Additional Analyst Notes: - CVE Program Container: References: - https://c
ntext of the current process. (ZDI-CAN-12178) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-231/
CVE ID: CVE-2020-27006 State: PUBLISHED Published: 2021-02-09T15:38:19 Last Updated: 2024-08-04T16:03:23.193Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-119 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PCT files. This could result in a memory corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12182) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productce
DI-CAN-12182) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-232/
CVE ID: CVE-2020-27007 State: PUBLISHED Published: 2021-02-09T15:38:20 Last Updated: 2024-08-04T16:03:23.190Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of HPG files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12207) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.
e current process. (ZDI-CAN-12207) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-234/ - https://www.zerodayinitiative.com/advisories/ZDI-21-233/
CVE ID: CVE-2020-27008 State: PUBLISHED Published: 2021-02-09T15:38:20 Last Updated: 2024-08-04T16:03:23.179Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PLT files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12209) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.
e current process. (ZDI-CAN-12209) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-235/
CVE ID: CVE-2020-27009 State: PUBLISHED Published: 2021-04-22T20:42:19 Last Updated: 2024-08-04T16:03:23.236Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: APOGEE PXC Compact (BACnet), APOGEE PXC Compact (P2 Ethernet), APOGEE PXC Modular (BACnet), APOGEE PXC Modular (P2 Ethernet), Nucleus NET, Nucleus Source Code, TALON TC Compact (BACnet), TALON TC Modular (BACnet) Problem Types: CWE-823 Description: A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Et
t (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions < V5.2), Nucleus Source Code (Versions including affected DNS modules), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current proc
privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf
CVE ID: CVE-2020-27010 State: PUBLISHED Published: 2020-12-17T21:05:44 Last Updated: 2024-08-04T16:03:23.183Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: XSS Description: A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077
CVE ID: CVE-2020-27013 State: PUBLISHED Published: 2020-10-14T15:10:23 Last Updated: 2024-08-04T16:03:23.260Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac (Consumer) Problem Types: Improper Access Control Information Disclosure Description: Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: -
to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09950 - https://www.zerodayinitiative.com/advisories/ZDI-20-1243/
CVE ID: CVE-2020-27014 State: PUBLISHED Published: 2020-10-29T23:45:23 Last Updated: 2024-08-04T16:03:23.197Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac (Consumer) Problem Types: Race Condition Description: Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-099
dditional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09974 - https://www.zerodayinitiative.com/advisories/ZDI-20-1285/
CVE ID: CVE-2020-27015 State: PUBLISHED Published: 2020-10-29T23:45:23 Last Updated: 2024-08-04T16:03:23.262Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac (Consumer) Problem Types: Information Disclosure Description: Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09975 - https://ww
st Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09975 - https://www.zerodayinitiative.com/advisories/ZDI-20-1286/