exploitintel/cve-cwe-consensus huggingface dataset:
user: Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

assistant: CWE-416
user: Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

assistant: CWE-668
user: Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

assistant: CWE-824
user: FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

assistant: CWE-125
user: Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

assistant: CWE-119, CWE-125
user: Memory corruption in Trusted Execution Environment while calling service API with invalid address.

assistant: CWE-20
user: Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

assistant: CWE-415
user: Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

assistant: CWE-191
user: Memory corruption in Automotive GPU while querying a gsl memory node.

assistant: CWE-119, CWE-787
user: Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

assistant: CWE-119
user: Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

assistant: CWE-119
user: Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

assistant: CWE-120
user: Memory Corruption due to improper validation of array index in Linux while updating adn record.

assistant: CWE-129
user: Memory corruption in Linux while calling system configuration APIs.

assistant: CWE-119
user: Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

assistant: CWE-704
user: Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

assistant: CWE-120
user: Memory corruption due to untrusted pointer dereference in automotive during system call.

assistant: CWE-119
user: Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.

assistant: CWE-190
user: Transient DOS in Modem while processing invalid System Information Block 1.

assistant: CWE-617
user: Memory corruption in RIL while trying to send apdu packet.

assistant: CWE-190
user: Memory corruption in WLAN while running doDriverCmd for an unspecific command.

assistant: CWE-120
user: Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

assistant: CWE-129
user: Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

assistant: CWE-704
user: Transient DOS in Modem while processing RRC reconfiguration message.

assistant: CWE-617
user: Memory corruption in Audio during playback session with audio effects enabled.

assistant: CWE-119
user: Memory corruption in Audio while validating and mapping metadata.

assistant: CWE-190
user: Memoru corruption in Audio when ADSP sends input during record use case.

assistant: CWE-20
user: Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

assistant: CWE-119, CWE-125
user: Memory corruption in Core Platform while printing the response buffer in log.

assistant: CWE-120
user: Memory Corruption while accessing metadata in Display.

assistant: CWE-119
user: Memory Corruption in Core Platform while printing the response buffer in log.

assistant: CWE-120
user: Memory corruption in Graphics while importing a file.

assistant: CWE-704
user: Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

assistant: CWE-401
user: Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

assistant: CWE-119, CWE-125
user: Memory Corruption in Core during syscall for Sectools Fuse comparison feature.

assistant: CWE-20
user: Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

assistant: CWE-416
user: Windows Kernel Elevation of Privilege Vulnerability

assistant: CWE-843
user: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

assistant: CWE-191
user: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

assistant: CWE-191
user: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

assistant: CWE-20
user: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

assistant: CWE-190
user: NT OS Kernel Elevation of Privilege Vulnerability

assistant: CWE-416
user: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

assistant: CWE-125
user: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

assistant: CWE-190
user: Microsoft SQL Server Remote Code Execution Vulnerability

assistant: CWE-798
user: Microsoft SQL Server Remote Code Execution Vulnerability

assistant: CWE-502
user: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

assistant: CWE-191
user: Microsoft ODBC Driver Remote Code Execution Vulnerability

assistant: CWE-119, CWE-787
user: Windows Bind Filter Driver Elevation of Privilege Vulnerability

assistant: CWE-119, CWE-787
user: Windows Bluetooth Driver Elevation of Privilege Vulnerability

assistant: CWE-667
user: Windows Kernel Elevation of Privilege Vulnerability

assistant: CWE-416
user: Windows Kernel Elevation of Privilege Vulnerability

assistant: CWE-190
user: Windows Kernel Elevation of Privilege Vulnerability

assistant: CWE-125
user: Windows Kernel Information Disclosure Vulnerability

assistant: CWE-125
user: Microsoft ODBC Driver Remote Code Execution Vulnerability

assistant: CWE-190
user: Microsoft ODBC Driver Remote Code Execution Vulnerability

assistant: CWE-125
user: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

assistant: CWE-119, CWE-787
user: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

assistant: CWE-91
user: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue does not require user interaction.

assistant: CWE-863
user: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.

assistant: CWE-863
user: Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

assistant: CWE-601
user: Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to already have in possession this encrypted secret.

assistant: CWE-522
user: Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction.

assistant: CWE-611
user: Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.

assistant: CWE-362
user: On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-908
user: On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-427
user: Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access.

assistant: CWE-755
user: An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

assistant: CWE-404
user: Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions.

assistant: CWE-732
user: Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

assistant: CWE-125
user: Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

assistant: CWE-119
user: The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an 

arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.

assistant: CWE-20
user: In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to the BIG-IP system can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-772
user: Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.

assistant: CWE-190
user: An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.

assistant: CWE-77
user: An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

assistant: CWE-191
user: Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.

assistant: CWE-79
user: Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.

assistant: CWE-362
user: Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.

assistant: CWE-667
user: In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-770
user: A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

assistant: CWE-835
user: In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell (tmsh) dig command which may allow an authenticated attacker with resource administrator or administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-732
user: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.

assistant: CWE-20
user: Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

assistant: CWE-908
user: Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access.

assistant: CWE-20
user: On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-476
user: On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate:

  *  An OAuth Server that references an OAuth Provider
  *  An OAuth profile with the Authorization Endpoint set to '/'
  *  An access profile that references the above OAuth profile and is associated with an HTTPS virtual server 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-476
user: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

assistant: CWE-427
user: Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

assistant: CWE-665
user: In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-427
user: User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.

assistant: CWE-203
user: An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.

assistant: CWE-77
user: A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.
 Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

assistant: CWE-134
user: A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application.

Authenticated users may be able to extract arbitrary information from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability.

assistant: CWE-89
user: Weak configuration in Automotive while VM is processing a listener request from TEE.

assistant: CWE-20
user: Memory Corruption in camera while installing a fd for a particular DMA buffer.

assistant: CWE-416
user: Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

assistant: CWE-120
user: Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

assistant: CWE-120
user: Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

assistant: CWE-119
user: Memory Corruption in Multi-mode Call Processor while processing bit mask API.

assistant: CWE-119
user: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Backup Settings, which could be read by any user accessing the file.

assistant: CWE-522
user: A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue used for other high-priority traffic such as BGP, PIM, ICMP, ICMPV6 ND and ISAKMP. Due to this misclassification of traffic, receipt of a high rate of these specific packets will cause delays in the processing of other traffic, leading to a Denial of Service (DoS). Continued receipt of this amount of traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on ACX2K Series: All versions prior to 19.4R3-S9; All 20.2 versions; 20.3 versions prior to 20.3R3-S6 on ACX2K Series; 20.4 versions prior to 20.4R3-S4 on ACX2K Series; All 21.1 versions; 21.2 versions prior to 21.2R3-S3 on ACX2K Series. Note: This issues affects legacy ACX2K Series PPC-based devices. This platform reached Last Supported Version (LSV) as of the Junos OS 21.2 Release.

assistant: CWE-755
user: A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).

PTX3000, PTX5000, QFX10000, PTX1000, PTX10002, and PTX10004, PTX10008 and PTX10016 with LC110x FPCs do not support certain flow-routes. Once a flow-route is received over an established BGP session and an attempt is made to install the resulting filter into the PFE, FPC heap memory is leaked. The FPC heap memory can be monitored using the CLI command "show chassis fpc".

The following syslog messages can be observed if the respective filter derived from a flow-route cannot be installed.

expr_dfw_sfm_range_add:661 SFM packet-length Unable to get a sfm entry for updating the hw
expr_dfw_hw_sfm_add:750 Unable to add the filter secondarymatch to the hardware
expr_dfw_base_hw_add:52 Failed to add h/w sfm data.
expr_dfw_base_hw_create:114 Failed to add h/w data.
expr_dfw_base_pfe_inst_create:241 Failed to create base inst for sfilter 0 on PFE 0 for __flowspec_default_inet__
expr_dfw_flt_inst_change:1368 Failed to create __flowspec_default_inet__ on PFE 0
expr_dfw_hw_pgm_fnum:465 dfw_pfe_inst_old not found for pfe_index 0!
expr_dfw_bp_pgm_flt_num:548 Failed to pgm bind-point in hw: generic failure
expr_dfw_bp_topo_handler:1102 Failed to program fnum.
expr_dfw_entry_process_change:679 Failed to change instance for filter __flowspec_default_inet__.
This issue affects Juniper Networks Junos OS:

on PTX1000, PTX10002, and PTX10004, PTX10008 and PTX10016 with LC110x FPCs:



  *  All versions prior to 20.4R3-S5;
  *  21.1 versions prior to 21.1R3-S4;
  *  21.2 versions prior to 21.2R3-S2;
  *  21.3 versions prior to 21.3R3;
  *  21.4 versions prior to 21.4R2-S2, 21.4R3;
  *  22.1 versions prior to 22.1R1-S2, 22.1R2.




on PTX3000, PTX5000, QFX10000:



  *  All versions prior to 20.4R3-S8;
  *  21.1 version 21.1R1 and later versions;
  *  21.2 versions prior to 21.2R3-S6;
  *  21.3 versions prior to 21.3R3-S5;
  *  21.4 versions prior to 21.4R3-S4;
  *  22.1 versions prior to 22.1R3-S3
  *  22.2 versions prior to 22.2R3-S1
  *  22.3 versions prior to 22.3R2-S2, 22.3R3
  *  22.4 versions prior to 22.4R2.

assistant: CWE-401
user: A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In an MPLS scenario specific packets destined to an Integrated Routing and Bridging (irb) interface of the device will cause a buffer (mbuf) to leak. Continued receipt of these specific packets will eventually cause a loss of connectivity to and from the device, and requires a reboot to recover. These mbufs can be monitored by using the CLI command 'show system buffers': user@host> show system buffers 783/1497/2280 mbufs in use (current/cache/total) user@host> show system buffers 793/1487/2280 mbufs in use (current/cache/total) <<<<<< mbuf usage increased This issue affects Juniper Networks Junos OS: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2.

assistant: CWE-401