Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9844 State: PUBLISHED Published: 2019-03-15T23:00:00 Last Updated: 2024-08-04T22:01:54.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Khan/simple-markdown/pull/63 - https://www.npmjs.com/package/simple-markdown/v/0.4.4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZG2I7VH7WLSEUQ77KYP5CRAVFT2RK2U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFLP3KJVSV5VWMNEBRXLGRVYFX
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFLP3KJVSV5VWMNEBRXLGRVYFXOV5KOG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5EFW655O3BXZYAPB65XEREXB2DSNSOT/
CVE ID: CVE-2019-9845 State: PUBLISHED Published: 2019-04-16T17:53:22 Last Updated: 2024-08-04T22:01:54.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension. Additional Analyst Notes: - CVE Program Container: References: - https://rastating.github.io/miniblog-remote-code-execution/ - https://github.com/madskristensen/Miniblog.Core/blob/master/src/Controllers/BlogController.cs#L142
CVE ID: CVE-2019-9846 State: PUBLISHED Published: 2019-03-16T12:00:00 Last Updated: 2024-08-04T22:01:55.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreestore method constructs a SQL WHERE clause unsafely by using the pidfields and idfields parameters, aka background SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97861
CVE ID: CVE-2019-9847 State: PUBLISHED Published: 2019-05-09T13:51:04.424723Z Last Updated: 2024-09-16T20:41:44.237Z Vendors: Document Foundation Products: LibreOffice Problem Types: Code Execution Vulnerability Description: A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable on the target users file system. If the hyperlink is activated by the victim the executable target is unconditionally launched. Under Windows and macOS when processing a hyperlink target explicitly activated by the user there was no judgment made on whether the target was an executable file, so such executable targe
activated by the user there was no judgment made on whether the target was an executable file, so such executable targets were launched unconditionally. This issue affects: All LibreOffice Windows and macOS versions prior to 6.1.6; LibreOffice Windows and macOS versions in the 6.2 series prior to 6.2.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/cve-2019-9847/
CVE ID: CVE-2019-9848 State: PUBLISHED Published: 2019-07-17T11:21:57.813188Z Last Updated: 2024-09-16T22:50:55.703Z Vendors: Document Foundation Products: LibreOffice Problem Types: LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which could be leveraged to by an attacker document to silently execute arbitrary python commands Description: LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrary python comma
LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrary python commands. By using the document event feature to trigger LibreLogo to execute python contained within a document a malicious document could be constructed which would execute arbitrary python commands silently without warning. In the fixed versions, LibreLogo cannot be called from a document event handler. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9848 - https://usn.ubuntu.com/4063-1/ - https://lists.fedoraproject.o
reoffice.org/about-us/security/advisories/CVE-2019-9848 - https://usn.ubuntu.com/4063-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPTZJCNN52VNGSVC5DFKVW3EDMRDWKMP/ - http://www.securityfocus.com/bid/109374 - https://security.gentoo.org/glsa/201908-13 - https://seclists.org/bugtraq/2019/Aug/28 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg000
nsuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html
CVE ID: CVE-2019-9849 State: PUBLISHED Published: 2019-07-17T11:26:03.387949Z Last Updated: 2024-09-17T00:06:18.219Z Vendors: Document Foundation Products: LibreOffice Problem Types: In 'stealth mode' where only trusted documents are allowed to download remote resources untrusted documents could download remote bullet graphics urls Description: LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection
ty to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9849 - https://usn.ubuntu.com/4063-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPTZJCNN52VNGSVC5DFKVW3EDMRDWKMP/ - http://www.securityfocus.com/bid/109374 - https://security.gentoo.org/glsa/201908-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
rity.gentoo.org/glsa/201908-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html
CVE ID: CVE-2019-9850 State: PUBLISHED Published: 2019-08-15T21:30:42.285992Z Last Updated: 2024-09-16T16:47:47.975Z Vendors: Document Foundation Products: LibreOffice Problem Types: Insufficient url validation Description: LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient u
ion was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850 - https://seclists.org/bugtraq/2019/Aug/28 - https://www.debian.org/security/2019/dsa-4501 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVSDPZJG3UA43X3JXRHJAWXLDZ
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVSDPZJG3UA43X3JXRHJAWXLDZEW77LM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ - https://usn.ubuntu.com/4102-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html
CVE ID: CVE-2019-9851 State: PUBLISHED Published: 2019-08-15T21:35:46.759573Z Last Updated: 2024-09-16T22:03:31.541Z Vendors: Document Foundation Products: LibreOffice Problem Types: arbitrary script execution Description: LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from document event script handers, e.g. mouse over. However LibreOffice also has a separate feature where documents can specify that pre-installed scripts can be executed on various global script events such as do
eature where documents can specify that pre-installed scripts can be executed on various global script events such as document-open, etc. In the fixed versions, global script event handlers are validated equivalently to document script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9851 - https://seclists.org/bugtraq/2019/Aug/28 - https://www.debian.org/security/2019/dsa-4501 - http://packetstormsecurity.com/files/154168/LibreOffice-Macro-Python-Code-Execution.html - https://lists.fedoraproject.org/archives/list/packa
rity.com/files/154168/LibreOffice-Macro-Python-Code-Execution.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ - https://usn.ubuntu.com/4102-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html
CVE ID: CVE-2019-9852 State: PUBLISHED Published: 2019-08-15T21:40:18.556261Z Last Updated: 2024-09-17T03:42:47.414Z Vendors: Document Foundation Products: LibreOffice Problem Types: CWE-116 Description: LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2018-16858, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed. However this new protection cou
versal attack where scripts in arbitrary locations on the file system could be executed. However this new protection could be bypassed by a URL encoding attack. In the fixed versions, the parsed url describing the script location is correctly encoded before further processing. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9852 - https://seclists.org/bugtraq/2019/Aug/28 - https://www.debian.org/security/2019/dsa-4501 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVX
1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ - https://usn.ubuntu.com/4102-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html - https://seclists.org/bugtraq/2019/Sep/17 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html
CVE ID: CVE-2019-9853 State: PUBLISHED Published: 2019-09-27T15:07:40.492574Z Last Updated: 2024-09-16T17:17:42.379Z Vendors: Document Foundation Products: LibreOffice Problem Types: CWE-116 Description: LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are blocked by default. A URL decoding flaw existed in how the urls to the macros within the document were processed and categorized, resulting in the possibility to construct a document where macro execution bypassed the security settings. The documents were correctly detected as containing macros, and prompted the user to their existence wit
urity settings. The documents were correctly detected as containing macros, and prompted the user to their existence within the documents, but macros within the document were subsequently not controlled by the security settings allowing arbitrary macro execution This issue affects: LibreOffice 6.2 series versions prior to 6.2.7; LibreOffice 6.3 series versions prior to 6.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9853/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQGBRSD73KTDZ2MP
html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQGBRSD73KTDZ2MPAOL7FBWO3SQVYE5B/ - https://lists.apache.org/thread.html/3a5570ca5cd14ad08e24684c71cfeff3a507f108fe3cf30ba4f58226%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/4ae0e6e52600f408d943ded079d314733ce188b04b04471464f89c4f%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/a540d1b6f9a7ebb206adba02839f654a6ee63a7b0976f559a847e49a%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org
540d1b6f9a7ebb206adba02839f654a6ee63a7b0976f559a847e49a%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/a5231ad45b030b54828c7b0b62a7e7d4b48481c7cb83ff628e07fa43%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/9dc85d9937ad7f101047c53f78c00e8ceb135eaeff7dcf4724b46f2c%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/70da9481dca267405e1d79e53942264765ef3f55c9a563c3737e3926%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/ca216900abd846f0220fe18b95f9f787bdbe0e87fa4eee822073cd69%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/27339e8a9a1e9bb47fbdb939b338256
e822073cd69%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/27339e8a9a1e9bb47fbdb939b338256d0356250a1974aaf4d774f683%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/19c917f7c8a0d8f62142046fabfe3e2c7d6091ef1f92b99c6e79e24e%40%3Ccommits.openoffice.apache.org%3E - https://lists.apache.org/thread.html/306a374361891eb17c6cffc99c3d7be1d3152a99c839d4231edc1631%40%3Ccommits.openoffice.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00040.html - http://seclists.org/fulldisclosure/2020/Feb/23 - http://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.html
CVE ID: CVE-2019-9854 State: PUBLISHED Published: 2019-09-06T18:30:08.910063Z Last Updated: 2024-09-16T19:24:19.650Z Vendors: Document Foundation Products: LibreOffice Problem Types: Unsafe URL assembly flaw in allowed script location check Description: LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system c
o address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CV
tional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9854/ - https://www.debian.org/security/2019/dsa-4519 - https://seclists.org/bugtraq/2019/Sep/17 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQKKOIY2DMZCXJINOLIQXD2NWISDKK3N/ - https://usn.ubuntu.com/4138-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html
CVE ID: CVE-2019-9855 State: PUBLISHED Published: 2019-09-06T18:40:17.271099Z Last Updated: 2024-09-16T18:49:33.756Z Vendors: Document Foundation Products: LibreOffice Problem Types: Windows 8.3 path equivalence handling flaw Description: LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalenc
r, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9855/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html
CVE ID: CVE-2019-9857 State: PUBLISHED Published: 2019-03-18T15:02:13 Last Updated: 2024-08-04T22:01:54.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a memory leak (aka refcount leak). Finally, this will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/patch/10836283/ - https://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs.git/commit/?h=fsnotify&id=62c9d2674b31d4c8a674bee86b7edc6da
ttps://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs.git/commit/?h=fsnotify&id=62c9d2674b31d4c8a674bee86b7edc6da2803aea - http://www.securityfocus.com/bid/107527 - https://security.netapp.com/advisory/ntap-20190404-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXLZ2V2ES37A3J7DMK4MZYIWV2LEZFLM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PPH3B7FJOMWD5JWUPZKB6T44KNT4PX2L/
CVE ID: CVE-2019-9858 State: PUBLISHED Published: 2019-05-29T16:26:06 Last Updated: 2024-08-04T22:01:55.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When the Horde_Form_Type_image method onSubmit() is called on uploads, it invokes the functions getImage() and _getUpload(), which uses unsanitized user input as a path to save the image. The unsanitized POST parameter object[photo][img][file] is saved in the $upload[img][file] PHP variable, allowing an attacker to manipulate the $tmp_file passed to move_uploaded
s saved in the $upload[img][file] PHP variable, allowing an attacker to manipulate the $tmp_file passed to move_uploaded_file() to save the uploaded file. By setting the parameter to (for example) ../usr/share/horde/static/bd.php, one can write a PHP backdoor inside the web root. The static/ destination folder is a good candidate to drop the backdoor because it is always writable in Horde installations. (The unsanitized POST parameter went probably unnoticed because it's never submitted by the forms, which default to securely using a random path.) Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/?p=3814&preview=true - http://packetstormsecurity.com/
- CVE Program Container: References: - https://ssd-disclosure.com/?p=3814&preview=true - http://packetstormsecurity.com/files/152476/Horde-Form-Shell-Upload.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00007.html - https://www.debian.org/security/2019/dsa-4468 - https://seclists.org/bugtraq/2019/Jun/31
CVE ID: CVE-2019-9859 State: PUBLISHED Published: 2020-03-10T12:34:32 Last Updated: 2024-08-04T22:01:54.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP
ut in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places. Additional Analyst Notes: - CVE Program Container: Refere
es this escapeshellarg function incorrectly in several places. Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/?p=3926