rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-41147 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18286.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: khangkito - Tran Van Khang (VinCSS)
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41148 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18338.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41149 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18339.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41150 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18340.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41151 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18341.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41152 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18342.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41153 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18343.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: PDF-XChange
product: PDF-XChange Editor
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2023-01-26T00:00:00.000Z
CVE-2022-41154 
A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary file deletion. An attacker can send a network request to trigger this vulnerability.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siretta
product: QUARTZ-GOLD
Published: 2023-01-26T21:24:36.469Z
CVE-2022-41155 WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Problem types: description: Bypass
Affected products: vendor: Pascal
product: iQ Block Country (WordPress)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Vulnerability discovered by Brandon Roldan (Patchstack Alliance)
Published: 2022-11-18T23:17:37.654Z
CVE-2022-41156 OndiskPlayer Remote Code Execution Vulnerability
Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attacker could exploit the vulnerability to cause remote code execution by causing an arbitrary user to download and execute malicious code.
Problem types: cwe_id: CWE-345
description: CWE-345 Insufficient Verification of Data Authenticity
Affected products: vendor: ETMS Co.,Ltd
product: OndiskPlayerAgent
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
Published: 2022-11-25T00:00:00.000Z
CVE-2022-41157 ERP solution Remote Code Execution Vulnerability
A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: Webcash Co.,Ltd
product: sERP Server 2.0
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2022-11-25T00:00:00.000Z
CVE-2022-41158 eyoom builder Remote Code Execution Vulnerability
Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: eyoom Co.,Ltd
product: eyoom builder
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
Published: 2022-11-25T00:00:00.000Z
CVE-2022-41166 
Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41167 
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41168 
Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41169 
Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41170 
Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41171 
Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41172 
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41173 
Due to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41174 
Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material (.rhm, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41175 
Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41176 
Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41177 
Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41178 
Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41179 
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41180 
Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41181 
Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41182 
Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41183 
Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41184 
Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41185 
Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Author
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41186 
Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, a Remote Code Execution can be triggered when payload forces a stack-based overflow and or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41187 
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41188 
Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41189 
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.


Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41190 
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z
CVE-2022-41191 
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.


Problem types: cwe_id: CWE-119
description: CWE-119
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
default_status: unaffected
Published: 2022-10-11T00:00:00.000Z