deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-17
Description: Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-213, CWE-200
References: https://forge.univention.org/bugzilla/show_bug.cgi?id=48427; https://github.com/univention/univention-corporate-server/commit/a28053045bd2e778c50ed1acaf4e52e1e34f6e34; https://forge.univention.org/bugzilla/show_bug.cgi?id=48427
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-17
Description: Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sourceforge.net/p/tsheetx/code/497/tree/branches/legacy/login.php#l40; https://sourceforge.net/p/tsheetx/discussion/779083/thread/7fcb52f696/; https://sourceforge.net/p/tsheetx/code/497/tree/branches/legacy/login.php#l40
CVE: CVE-2019-11771
Published: 2019-07-17
Description: AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-264
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=548055; https://bugs.eclipse.org/bugs/show_bug.cgi?id=548055
CVE: CVE-2019-11772
Published: 2019-07-17
Description: In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://access.redhat.com/errata/RHSA-2019:2585; https://access.redhat.com/errata/RHSA-2019:2590; https://access.redhat.com/errata/RHSA-2019:2592
CVE: CVE-2019-12911
Published: 2019-07-17
Description: Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/; https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE: CVE-2019-12912
Published: 2019-07-17
Description: Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-426
References: https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/; https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE: CVE-2019-12913
Published: 2019-07-17
Description: Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
CVSS Score: 5.5 (MEDIUM)
References: https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/; https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE: CVE-2019-12914
Published: 2019-07-17
Description: Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/; https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE: CVE-2019-13636
Published: 2019-07-17
Description: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-59
References: http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html; https://git.savannah.gnu.org/cgit/patch.git/commit/?id=dce4683cbbe107a95f1f0d45fabc304acfb5d71a; https://github.com/irsl/gnu-patch-vulnerabilities
CVE: CVE-2019-13637
Published: 2019-07-17
Description: In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user if the attacker can place a crafted library in a directory that is accessible to the vulnerable system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: https://github.com/active-labs/Advisories/blob/master/ACTIVE-2019-009.md; https://github.com/active-labs/Advisories/blob/master/ACTIVE-2019-009.md
CVE: CVE-2019-1917
Published: 2019-07-17
Description: A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to execute arbitrary actions through the REST API with administrative privileges on the affected system. The REST API is enabled by default and cannot be disabled.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/109301; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cvdsd-wmauth; http://www.securityfocus.com/bid/109301
CVE: CVE-2019-1919
Published: 2019-07-17
Description: A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account with static credentials in the underlying Linux operating system. An attacker could exploit this vulnerability by logging in to the command line of the affected VM with the static account. A successful exploit could allow the attacker to log in with root-level privileges. This vulnerability affects only Cisco FindIT Network Manager and Cisco FindIT Network Probe Release 1.1.4 if these products are using Cisco-supplied VM images. No other releases or deployment models are known to be vulnerable.
CVSS Score: 8.4 (HIGH)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/109305; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cfnm-statcred; http://www.securityfocus.com/bid/109305
CVE: CVE-2019-1920
Published: 2019-07-17
Description: A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/109312; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-aironet-dos; http://www.securityfocus.com/bid/109312
CVE: CVE-2019-1923
Published: 2019-07-17
Description: A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input validation in the device configuration interface. An attacker could exploit this vulnerability by accessing the configuration interface, which may require a password, and then accessing the device's physical interface and inserting a USB storage device. A successful exploit could allow the attacker to execute arbitrary commands on the device in an elevated security context. At the time of publication, this vulnerability affected Cisco Small Business SPA500 Series IP Phones firmware releases 7.6.2SR5 and prior.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-77, CWE-20
References: http://www.securityfocus.com/bid/109294; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-spa500-command; http://www.securityfocus.com/bid/109294
CVE: CVE-2019-1940
Published: 2019-07-17
Description: A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The vulnerability is due to insufficient X.509 certificate validation when establishing a WSMA connection. An attacker could exploit this vulnerability by supplying a crafted X.509 certificate during the WSMA connection setup phase. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on WSMA connections to the affected software. At the time of publication, this vulnerability affected Cisco IND Software releases prior to 1.7.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310, CWE-295
References: http://www.securityfocus.com/bid/109296; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-wsma-info; http://www.securityfocus.com/bid/109296
CVE: CVE-2019-1941
Published: 2019-07-17
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. At the time of publication, this vulnerability affected Cisco ISE running software releases prior to 2.4.0 Patch 9 and 2.6.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/109297; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-ise-xss; http://www.securityfocus.com/bid/109297
CVE: CVE-2019-1942
Published: 2019-07-17
Description: A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that includes SQL statements to an affected system. A successful exploit could allow the attacker to modify entries in some database tables, affecting the integrity of the data. At the time of publication, this vulnerability affected Cisco ISE running software releases 2.6.0 and prior.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/109283; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-ise-sql-inject; http://www.securityfocus.com/bid/109283
CVE: CVE-2019-1943
Published: 2019-07-17
Description: A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://www.securityfocus.com/bid/109288; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirect; http://www.securityfocus.com/bid/109288
CVE: CVE-2019-3969
Published: 2019-07-17
Description: Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgent such as writing to the registry with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
References: https://www.tenable.com/security/research/tra-2019-34; https://www.tenable.com/security/research/tra-2019-34
CVE: CVE-2019-3970
Published: 2019-07-17
Description: Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: https://www.tenable.com/security/research/tra-2019-34; https://www.tenable.com/security/research/tra-2019-34
CVE: CVE-2019-3971
Published: 2019-07-17
Description: Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.
CVSS Score: 5.5 (MEDIUM)
References: https://www.tenable.com/security/research/tra-2019-34; https://www.tenable.com/security/research/tra-2019-34
CVE: CVE-2019-3972
Published: 2019-07-17
Description: Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>_CisSharedMemBuff". This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.tenable.com/security/research/tra-2019-34; https://www.tenable.com/security/research/tra-2019-34
CVE: CVE-2019-3973
Published: 2019-07-17
Description: Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port "cmdServicePort". A low privileged process can crash CmdVirth.exe to decrease the port's connection count followed by process hollowing a CmdVirth.exe instance with malicious code to obtain a handle to "cmdServicePort". Once this occurs, a specially crafted message can be sent to "cmdServicePort" using "FilterSendMessage" API. This can trigger an out-of-bounds write if lpOutBuffer parameter in FilterSendMessage API is near the end of specified buffer bounds. The crash occurs when the driver performs a memset operation which uses a size beyond the size of buffer specified, causing kernel crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.tenable.com/security/research/tra-2019-34; https://www.tenable.com/security/research/tra-2019-34
CVE: CVE-2019-8931
Published: 2019-07-17
Description: Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
CVSS Score: 7.5 (HIGH)
References: https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/; https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE: CVE-2019-8932
Published: 2019-07-17
Description: Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/; https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE: CVE-2019-13640
Published: 2019-07-17
Description: In qBittorrent before 4.1.7, the function Application::runExternalProgram() located in app/application.cpp allows command injection via shell metacharacters in the torrent name parameter or current tracker parameter, as demonstrated by remote command execution via a crafted name within an RSS feed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00080.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00085.html; https://github.com/qbittorrent/qBittorrent/issues/10925
CVE: CVE-2019-5222
Published: 2019-07-17
Description: There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful exploit could result in information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190717-01-input-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190717-01-input-en
CVE: CVE-2019-13643
Published: 2019-07-18
Description: Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The attack begins by storing a new stream message containing an XSS payload. The stored payload can then be triggered by clicking a malicious link on the Notifications page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/espocrm/espocrm/issues/1349; https://github.com/espocrm/espocrm/milestone/64?closed=1; https://github.com/espocrm/espocrm/issues/1349
CVE: CVE-2019-13644
Published: 2019-07-18
Description: Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tag_number$ tag summary page. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/compare/76aa8ac...45b8c36; https://github.com/firefly-iii/firefly-iii/issues/2335; https://github.com/firefly-iii/firefly-iii/compare/76aa8ac...45b8c36
CVE: CVE-2019-13645
Published: 2019-07-18
Description: Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$file_id$ attachment editing. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa; https://github.com/firefly-iii/firefly-iii/issues/2337; https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa
CVE: CVE-2019-13646
Published: 2019-07-18
Description: Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa; https://github.com/firefly-iii/firefly-iii/issues/2339; https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa
CVE: CVE-2019-13647
Published: 2019-07-18
Description: Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$file_id$ attachment viewing. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa; https://github.com/firefly-iii/firefly-iii/issues/2338; https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa
CVE: CVE-2016-10762
Published: 2019-07-18
Description: The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://hackerone.com/reports/151516; https://wordpress.org/plugins/camptix/#developers; https://hackerone.com/reports/151516
CVE: CVE-2016-10763
Published: 2019-07-18
Description: The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://hackerone.com/reports/152958; https://wordpress.org/plugins/camptix/#developers; https://hackerone.com/reports/152958
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-18
Description: Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF; https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-18
Description: domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/domainmod/domainmod/issues/65; https://github.com/domainmod/domainmod/issues/65
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-18
Description: DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: admin/users/add.php. The attack vector is: After the administrator logged in, open the html page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/domainmod/domainmod/issues/65; https://github.com/domainmod/domainmod/issues/65
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-18
Description: DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/domainmod/domainmod/issues/65; https://github.com/domainmod/domainmod/issues/65