yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-41022: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null) options WORD' command template.
Key phrases: stack-based buffer overflow, stack based buffer overflow, arbitrary commands, arbitrary command execution
CVE-2022-41023: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off)' command template.
Key phrases: stack-based buffer overflow, stack based buffer overflow, arbitrary commands, arbitrary command execution
CVE-2022-41024: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off)' command template.
Key phrases: stack-based buffer overflow, stack based buffer overflow, arbitrary commands, arbitrary command execution
CVE-2022-41025: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off) options WORD' command template.
Key phrases: stack-based buffer overflow, stack based buffer overflow, arbitrary commands, arbitrary command execution
CVE-2022-41026: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off) options WORD' command template.
Key phrases: stack-based buffer overflow, stack based buffer overflow, arbitrary commands, arbitrary command execution
CVE-2022-41027: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null)' command template.
Key phrases: stack-based buffer overflow, arbitrary command execution, stack based buffer overflow, arbitrary commands
CVE-2022-41028: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null)' command template.
Key phrases: stack-based buffer overflow, arbitrary command execution, stack based buffer overflow, arbitrary commands
CVE-2022-41029: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'wlan filter mac address WORD descript WORD' command template.
Key phrases: stack-based buffer overflow, arbitrary command execution, stack based buffer overflow, arbitrary commands
CVE-2022-4103: The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. This could allow any authenticated users, such as subscriber to create a post (as well as any post type) with an arbitrary title
Key phrases: create a post (as well as any
CVE-2022-41030: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no wlan filter mac address WORD descript WORD' command template.
Key phrases: stack-based buffer overflow, arbitrary command execution, stack based buffer overflow, arbitrary commands
CVE-2022-41031: Microsoft Word Remote Code Execution Vulnerability
Key phrases: microsoft word remote code execution
CVE-2022-41032: NuGet Client Elevation of Privilege Vulnerability
Key phrases: nuget client elevation of privilege
CVE-2022-41033: Windows COM+ Event System Service Elevation of Privilege Vulnerability
Key phrases: windows com+ event system service elevation of privilege
CVE-2022-41034: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2022-41035: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Key phrases: spoofing
CVE-2022-41036: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41037: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41038: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41039: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: windows point-to-point tunneling protocol remote code execution
CVE-2022-4104: A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service.
Key phrases: unreachable exit condition, denial-of-service, denial of service
CVE-2022-41040: Microsoft Exchange Server Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41042: Visual Studio Code Information Disclosure Vulnerability
Key phrases: visual studio code information disclosure
CVE-2022-41043: Microsoft Office Information Disclosure Vulnerability
Key phrases: microsoft office information disclosure
CVE-2022-41044: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: windows point-to-point tunneling protocol remote code execution
CVE-2022-41045: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Key phrases: windows advanced local procedure call (alpc) elevation of privilege
CVE-2022-41047: Microsoft ODBC Driver Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41048: Microsoft ODBC Driver Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41049: Windows Mark of the Web Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows mark of the web security feature bypass
CVE-2022-4105: A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
Key phrases: stored xss, html injection, ui redressing, disables the use of the history page
CVE-2022-41050: Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Key phrases: windows extensible file allocation table elevation of privilege
CVE-2022-41051: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41052: Windows Graphics Component Remote Code Execution Vulnerability
Key phrases: windows graphics component remote code execution
CVE-2022-41053: Windows Kerberos Denial of Service Vulnerability
Key phrases: denial of service
CVE-2022-41054: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41055: Windows Human Interface Device Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-41056: Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
Key phrases: denial of service
CVE-2022-41057: Windows HTTP.sys Elevation of Privilege Vulnerability
Key phrases: windows http.sys elevation of privilege
CVE-2022-41058: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Key phrases: windows network address translation (nat), denial of service
CVE-2022-4106: The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.
Key phrases: download arbitrary file, download arbitrary file from the server, authorisation check
CVE-2022-41060: Microsoft Word Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-41061: Microsoft Word Remote Code Execution Vulnerability
Key phrases: microsoft word remote code execution
CVE-2022-41062: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41063: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2022-41064: .NET Framework Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-41066: Microsoft Business Central Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-4107: The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not validate the file to be downloaded, allowing any authenticated users, such as subscriber to download arbitrary file from the server
Key phrases: download arbitrary file, download arbitrary file from the server
CVE-2022-41073: Windows Print Spooler Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41074: Windows Graphics Component Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-41076: PowerShell Remote Code Execution Vulnerability
Key phrases: powershell remote code execution
CVE-2022-41077: Windows Fax Compose Form Elevation of Privilege Vulnerability
Key phrases: windows fax compose form elevation of privilege
CVE-2022-41078: Microsoft Exchange Server Spoofing Vulnerability
Key phrases: microsoft exchange server spoofing
CVE-2022-41079: Microsoft Exchange Server Spoofing Vulnerability
Key phrases: microsoft exchange server spoofing
CVE-2022-4108: The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system path, allowing high privilege users such as admin to download arbitrary file from the server even when they should not be able to (for example in multisite)
Key phrases: download arbitrary file, download arbitrary file from the server even when, user input
CVE-2022-41080: Microsoft Exchange Server Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: windows point-to-point tunneling protocol remote code execution
CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41083: Visual Studio Code Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41085: Azure CycleCloud Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41086: Windows Group Policy Elevation of Privilege Vulnerability
Key phrases: windows group policy elevation of privilege
CVE-2022-41088: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: windows point-to-point tunneling protocol remote code execution
CVE-2022-41089: .NET Framework Remote Code Execution Vulnerability
Key phrases: .net framework remote code execution
CVE-2022-4109: The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users such as admin to download arbitrary logs from the server even when they should not be able to (for example in multisite)
Key phrases: download arbitrary logs, download arbitrary logs from the server even when, path traversal
CVE-2022-41090: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Key phrases: windows point-to-point tunneling protocol, denial of service
CVE-2022-41091: Windows Mark of the Web Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows mark of the web security feature bypass
CVE-2022-41092: Windows Win32k Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41093: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Key phrases: windows advanced local procedure call (alpc) elevation of privilege
CVE-2022-41094: Windows Hyper-V Elevation of Privilege Vulnerability
Key phrases: windows hyper-v elevation of privilege
CVE-2022-41095: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41096: Microsoft DWM Core Library Elevation of Privilege Vulnerability
Key phrases: microsoft dwm core library elevation of privilege
CVE-2022-41097: Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
Key phrases: radius protocol information disclosure
CVE-2022-41098: Windows GDI+ Information Disclosure Vulnerability
Key phrases: windows gdi+ information disclosure
CVE-2022-41099: BitLocker Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, bitlocker security feature bypass
CVE-2022-4110: The Eventify WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-41100: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Key phrases: windows advanced local procedure call (alpc) elevation of privilege
CVE-2022-41101: Windows Overlay Filter Elevation of Privilege Vulnerability
Key phrases: windows overlay filter elevation of privilege
CVE-2022-41102: Windows Overlay Filter Elevation of Privilege Vulnerability
Key phrases: windows overlay filter elevation of privilege
CVE-2022-41103: Microsoft Word Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-41104: Microsoft Excel Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, microsoft excel security feature bypass
CVE-2022-41105: Microsoft Excel Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-41106: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2022-41107: Microsoft Office Graphics Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41109: Windows Win32k Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-4111: Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.
Key phrases: upload profile pictures over 2MB, unrestricted file size limit, dos
CVE-2022-41113: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41114: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Key phrases: windows bind filter driver elevation of privilege
CVE-2022-41115: Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Key phrases: update elevation of privilege
CVE-2022-41116: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Key phrases: windows point-to-point tunneling protocol, denial of service
CVE-2022-41118: Windows Scripting Languages Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41119: Visual Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-4112: The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-41120: Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41121: Windows Graphics Component Elevation of Privilege Vulnerability
Key phrases: windows graphics component elevation of privilege
CVE-2022-41122: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2022-41123: Microsoft Exchange Server Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-41125: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Key phrases: windows cng key isolation service elevation of privilege
CVE-2022-41127: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41128: Windows Scripting Languages Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-41131: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Provider is installed (Hive Provider 4.1.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the HIve Provider version 4.1.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Hive Provider installed).
Key phrases: execute arbtrary commands in the task execution context, os command injection
CVE-2022-41132: Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress.
Key phrases: stored xss
CVE-2022-41133: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.
Key phrases: inject arbitrary SQL queries, sql injection, arbitrary sql queries
CVE-2022-41134: Cross-Site Request Forgery (CSRF) inOptinlyHQ Optinly  Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin <=1.0.15 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2022-41135: Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.
Key phrases: plugin settings change
CVE-2022-41136: Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugin <= 5.12.0 on WordPress.
Key phrases: cross-site request forgery (csrf), stored cross-site scripting (xss)
CVE-2022-41138: In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.
Key phrases: achieve arbitrary code execution, decrqss
CVE-2022-41139: MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.
Key phrases: execution of arbitrary commands on agents, stored xss
CVE-2022-4114: The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks.
Key phrases: perform Cross-Site Scripting attacks, cross-site scripting
CVE-2022-41140: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lighttpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13796.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of multiple, execute code
CVE-2022-41141: This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-16859.
Key phrases: execute arbitrary code, obtain the ability to execute low-privileged, escalate privileges on affected installations of Windscribe
CVE-2022-41142: This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-18304.
Key phrases: escalate privileges on affected installations of Centreon
CVE-2022-41143: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18225.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41144: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18282.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41145: This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18283.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of PDF
CVE-2022-41146: This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18284.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of PDF
CVE-2022-41147: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18286.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41148: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18338.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41149: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18339.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-4115: The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability targeting higher privileged users.
Key phrases: inject arbitrary web scripts, inject arbitrary web scripts in the plugin admin, stored cross-site scripting
CVE-2022-41150: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18340.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41151: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18341.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41152: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18342.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of PDF, execute code
CVE-2022-41153: This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18343.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of PDF
CVE-2022-41154: A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary file deletion. An attacker can send a network request to trigger this vulnerability.
Key phrases: directory traversal, arbitrary file deletion
CVE-2022-41155: Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Key phrases: Block BYPASS, block bypass
CVE-2022-41156: Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attacker could exploit the vulnerability to cause remote code execution by causing an arbitrary user to download and execute malicious code.
Key phrases: remote code execution
CVE-2022-41157: A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands.
Key phrases: leak or steal sensitive information or execute malicious
CVE-2022-41158: Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.
Key phrases: remote code execution
CVE-2022-4116: A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution.
Key phrases: drive-by localhost, remote code execution
CVE-2022-41166: Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: wavefront object, crash, temporarily unavailable, application crash
CVE-2022-41167: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41168: Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41169: Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-4117: The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.
Key phrases: unauthenticated sql injection
CVE-2022-41170: Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41171: Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41172: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41173: Due to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: memory management, crash, temporarily unavailable, application crash
CVE-2022-41174: Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material (.rhm, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41175: Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41176: Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41177: Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41178: Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: temporarily unavailable, application crash
CVE-2022-41179: Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-4118: The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users
Key phrases: sql injection
CVE-2022-41180: Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41181: Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41182: Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: memory management, crash, temporarily unavailable, application crash
CVE-2022-41183: Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: windows cursor file, crash, temporarily unavailable, application crash
CVE-2022-41184: Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41185: Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41186: Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, a Remote Code Execution can be triggered when payload forces a stack-based overflow and or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41187: Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41188: Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: wavefront object, crash, temporarily unavailable, application crash
CVE-2022-41189: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-4119: The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-41190: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41191: Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41192: Due to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41193: Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41194: Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41195: Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41196: Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow
CVE-2022-41197: Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Key phrases: crash, temporarily unavailable, application crash
CVE-2022-41198: Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Key phrases: remote code execution, stack-based overflow, dangling pointer, stack based overflow