rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-15127 
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:14:38.000Z
CVE-2019-15128 
iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T21:15:07.000Z
CVE-2019-15129 
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitment_online/upload/user/[user_id]/photo/[file_name] URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T16:22:26.000Z
CVE-2019-15130 
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitment_online/personalData/act_personaltab.cfm multiple-part POST request with a predictable WRC01_USERID parameter. Moreover, the attacker can upload executable content (e.g., asp or aspx) for executing OS commands on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T16:23:04.000Z
CVE-2019-15131 
In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T11:54:29.000Z
CVE-2019-15132 
Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses (e.g., the "Login name or password is incorrect" and "No permissions for system access" messages, or just blocking for a number of seconds). This affects both api_jsonrpc.php and index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-17T00:00:00.000Z
CVE-2019-15133 
In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-17T00:00:00.000Z
CVE-2019-15134 
RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to _receive in sys/net/gnrc/transport_layer/tcp/gnrc_tcp_eventloop.c upon receiving an ACK before a SYN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-17T17:54:54.000Z
CVE-2019-15135 
The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the capabilities of a participant (including capabilities inapplicable to the current session), which makes it easier for attackers to discover potentially sensitive reachability information on a Data Distribution Service (DDS) network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T15:43:21.000Z
CVE-2019-15136 
The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service (DDS) partition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T15:43:46.000Z
CVE-2019-15137 
The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T15:44:12.000Z
CVE-2019-15138 
The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T19:13:13.000Z
CVE-2019-15139 
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:31:18.000Z
CVE-2019-15140 
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:31:06.000Z
CVE-2019-15141 
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:30:56.000Z
CVE-2019-15142 
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:30:43.000Z
CVE-2019-15143 
In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:30:29.000Z
CVE-2019-15144 
In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:30:18.000Z
CVE-2019-15145 
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:30:05.000Z
CVE-2019-15146 
GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:29:43.000Z
CVE-2019-15147 
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:29:33.000Z
CVE-2019-15148 
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T18:29:22.000Z
CVE-2019-15149 
core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetical other factors, i.e., an affected use case within a library caller, and a bug in the message receiver policy code that led to reliance on this extra protection mechanism
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T19:56:18.000Z
CVE-2019-15150 
In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T03:41:04.000Z
CVE-2019-15151 
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-18T20:19:36.000Z
CVE-2019-15160 
The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T05:40:00.000Z
CVE-2019-15161 
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T18:24:25.000Z
CVE-2019-15162 
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T18:32:05.000Z
CVE-2019-15163 
rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T18:34:30.000Z
CVE-2019-15164 
rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T18:36:12.000Z
CVE-2019-15165 
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T18:38:07.000Z
CVE-2019-15166 lmp_print in tcpdump lacks certain boundary checks
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: LOW
baseScore: 1.6
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2019-10-03T16:01:34.000Z
CVE-2019-15167 
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-27T05:47:36.000Z
CVE-2019-15211 
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:47:36.000Z
CVE-2019-15212 
An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:47:18.000Z
CVE-2019-15213 
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:47:09.000Z
CVE-2019-15214 
An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:46:57.000Z
CVE-2019-15215 
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:46:38.000Z
CVE-2019-15216 
An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:46:27.000Z
CVE-2019-15217 
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:46:17.000Z
CVE-2019-15218 
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:46:07.000Z
CVE-2019-15219 
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:45:57.000Z
CVE-2019-15220 
An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:45:47.000Z
CVE-2019-15221 
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:45:38.000Z
CVE-2019-15222 
An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:45:29.000Z
CVE-2019-15223 
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T21:45:20.000Z
CVE-2019-15224 
The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T22:24:13.000Z
CVE-2019-15225 
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T22:57:58.000Z
CVE-2019-15226 
Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit. The implementation in versions 1.10.0 through 1.11.1 for HTTP/1.x traffic and all versions of Envoy for HTTP/2 traffic had O(n^2) performance characteristics. A remote attacker may craft a request that stays below the maximum request header size but consists of many thousands of small headers to consume CPU and result in a denial-of-service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:25:02.000Z
CVE-2019-15227 
FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T04:09:23.000Z
CVE-2019-15228 
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T23:28:53.000Z
CVE-2019-15229 
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T23:29:04.000Z
CVE-2019-15230 
LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T16:32:12.000Z
CVE-2019-15232 
Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T23:57:37.000Z
CVE-2019-15233 
The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T13:28:24.000Z
CVE-2019-15234 
SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-27T16:13:10.000Z
CVE-2019-15235 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/[USERNAME]/tmp/session/sess_xxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to gain access to the victim's password (for the OS and phpMyAdmin) via an attacker account. This is different from CVE-2019-14782.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T15:20:18.000Z
CVE-2019-15237 
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T00:39:53.000Z
CVE-2019-15238 
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:54:59.000Z
CVE-2019-15239 
In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T07:25:56.000Z
CVE-2019-15240 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: Cisco
product: Cisco SPA112 2-Port Phone Adapter
Published: 2019-10-16T18:36:30.976Z
CVE-2019-15241 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: Cisco
product: Cisco SPA112 2-Port Phone Adapter
Published: 2019-10-16T18:36:31.414Z
CVE-2019-15242 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: Cisco
product: Cisco SPA112 2-Port Phone Adapter
Published: 2019-10-16T18:36:31.850Z