rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-46632 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15462.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:04.000Z
CVE-2021-46633 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15463.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:06.000Z
CVE-2021-46634 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15464.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:07.000Z
CVE-2021-46635 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15507.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:09.000Z
CVE-2021-46636 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15508.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:10.000Z
CVE-2021-46637 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15509.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:12.000Z
CVE-2021-46638 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15510.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:13.000Z
CVE-2021-46639 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15511.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:15.000Z
CVE-2021-46640 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15512.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:16.000Z
CVE-2021-46641 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN file. Crafted data in a DNG file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15513.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:18.000Z
CVE-2021-46642 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15514.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:19.000Z
CVE-2021-46643 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15515.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:20.000Z
CVE-2021-46644 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15530.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:22.000Z
CVE-2021-46645 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. Crafted data in a BMP image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15531.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:23.000Z
CVE-2021-46646 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15532.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:25.000Z
CVE-2021-46647 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15533.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:26.000Z
CVE-2021-46648 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15534.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:28.000Z
CVE-2021-46649 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15535.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:29.000Z
CVE-2021-46650 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15536.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:31.000Z
CVE-2021-46651 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15537.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: MicroStation CONNECT
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:32.000Z
CVE-2021-46652 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15538.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:33.000Z
CVE-2021-46653 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15539.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:35.000Z
CVE-2021-46654 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15540.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:36.000Z
CVE-2021-46655 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15630.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:38.000Z
CVE-2021-46656 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15631.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Bentley
product: View
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2022-02-18T19:46:39.000Z
CVE-2021-46657 
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-29T22:34:28.000Z
CVE-2021-46658 
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-29T22:34:16.000Z
CVE-2021-46659 
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-29T22:34:03.000Z
CVE-2021-46660 
Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-29T23:10:32.000Z
CVE-2021-46661 
MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:48:27.000Z
CVE-2021-46662 
MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:47:53.000Z
CVE-2021-46663 
MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:47:40.000Z
CVE-2021-46664 
MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:47:27.000Z
CVE-2021-46665 
MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:47:15.000Z
CVE-2021-46666 
MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:47:03.000Z
CVE-2021-46667 
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:46:48.000Z
CVE-2021-46668 
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:46:34.000Z
CVE-2021-46669 
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-01T01:46:16.000Z
CVE-2021-46671 
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T20:13:47.000Z