rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-13014 
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.
Problem types: cwe_id: CWE-264
description: CWE-264: Permissions, Privileges, and Access Controls
Affected products: vendor: n/a
product: Little Snitch
Published: 2019-08-23T16:55:55.000Z
CVE-2019-13020 
The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted URL could be used in a phishing attack to hijack the trust the user and the browser have with the website and could serve malicious content from a third-party attacker-controlled system. Second, arguably more severe, is the potential for an attacker to circumvent firewall controls, by proxying traffic, unauthenticated, into the internal network from the internet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:11:57.000Z
CVE-2019-13021 
The administrative passwords for all versions of Bond JetSelect are stored within an unprotected file on the filesystem, rather than encrypted within the MySQL database. This backup copy of the passwords is made as part of the installation script, after the administrator has generated a password using ENCtool.jar (see CVE-2019-13022). This allows any low-privilege user who can read this file to trivially obtain the passwords for the administrative accounts of the JetSelect application. The path to the file containing the encoded password hash is /opt/JetSelect/SFC/resources/sfc-general-properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-14T16:16:04.000Z
CVE-2019-13022 
Bond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding password generation algorithm (used to set initial passwords upon first installation). It XORs the plaintext into the 'encrypted' password that is then stored within the database. These steps are able to be trivially reversed, allowing for escalation of privilege within the JetSelect application through obtaining the passwords of JetSelect administrators. JetSelect administrators have the ability to modify and delete all networking configuration across a vessel, as well as altering network configuration of all managed network devices (switches, routers).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-14T16:18:16.000Z
CVE-2019-13023 
An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-14T16:20:27.000Z
CVE-2019-13024 
Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "init_script"-"Monitoring Engine Binary" in main.get.php to insert a arbitrary command into the database, and execute it by calling the vulnerable page www/include/configuration/configGenerate/xml/generateFiles.php (which passes the inserted value to the database to shell_exec without sanitizing it, allowing one to execute system arbitrary commands).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:17:05.000Z
CVE-2019-13025 
Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-02T14:54:46.000Z
CVE-2019-13026 
OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T19:39:25.000Z
CVE-2019-13027 
Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-12T14:03:01.000Z
CVE-2019-13028 
An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or delete arbitrary files via a crafted HTML page. This is a product from the Ministry of Interior of the Slovak Republic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T21:23:46.000Z
CVE-2019-13029 
Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T18:52:33.000Z
CVE-2019-13030 
eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a missing check in rc.d/97NeoServer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T20:17:35.000Z
CVE-2019-13031 
LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server. By default, the notification server is not enabled and has a "deny all" rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T22:42:10.000Z
CVE-2019-13032 
An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed to xc::XMLUri::isValidURI(). This affects third-party software (not Sigil) that uses FlightCrew as a library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T22:56:58.000Z
CVE-2019-13033 
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T17:30:46.000Z
CVE-2019-13035 
Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS (the current directory) as NT AUTHORITY\SYSTEM upon web requests to the portal. This will effectively allow non-privileged users to escalate privileges to NT AUTHORITY\SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T12:51:33.000Z
CVE-2019-13038 
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T00:00:00.000Z
CVE-2019-13045 
Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T13:58:05.000Z
CVE-2019-13046 
linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T14:50:21.000Z
CVE-2019-13047 
kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T14:50:33.000Z
CVE-2019-13048 
kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk allocation patterns (involving PAGE_SIZE, and a value less than PAGE_SIZE).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T14:50:42.000Z
CVE-2019-13049 
An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T14:50:53.000Z
CVE-2019-13050 
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T16:07:13.000Z
CVE-2019-13051 
Pi-Hole 4.3 allows Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T11:49:52.000Z
CVE-2019-13052 
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T19:05:31.000Z
CVE-2019-13053 
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T19:06:37.000Z
CVE-2019-13054 
The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T19:06:58.000Z
CVE-2019-13055 
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T19:07:20.000Z
CVE-2019-13056 
An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-mail and password because of the lack of CSRF protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T15:18:53.000Z
CVE-2019-13057 
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T12:19:25.000Z
CVE-2019-13063 
Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. This will result in file disclosure (i.e., being able to pull any file from the remote victim application). This can be used to steal and obtain sensitive config and other files. This can result in complete compromise of the application. The script parameter is vulnerable to directory traversal and both local and remote file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-23T14:56:59.000Z
CVE-2019-13066 
Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, by updating a script's Script Name, Suite Name, Base URL, Android, iOS, Scripts Run, Origin Machine, or Comment field. The sql parameter can be used to trigger reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T17:06:36.000Z
CVE-2019-13067 
njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T23:29:57.000Z
CVE-2019-13068 
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-29T00:00:00.000Z
CVE-2019-13069 
extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-17T16:36:14.000Z
CVE-2019-13070 
A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Upon visiting the /agent/action_recipient Event Action/Recipient page, the embedded code will be executed in the browser of the victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T18:05:57.000Z
CVE-2019-13071 
CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T13:46:43.000Z
CVE-2019-13072 
Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T01:03:51.000Z
CVE-2019-13074 
A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T20:07:27.000Z
CVE-2019-13075 
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T13:47:08.000Z
CVE-2019-13076 
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:49:36.000Z
CVE-2019-13077 
Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a malicious link in order to attack authenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:50:54.000Z
CVE-2019-13078 
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:52:01.000Z
CVE-2019-13079 
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/history_log.php. The affected parameter is TYPE_NAME.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:53:02.000Z
CVE-2019-13080 
Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary JavaScript in an administrator's browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:53:54.000Z
CVE-2019-13081 
Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:55:00.000Z
CVE-2019-13082 
Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking its content, and once it has been extracted, does not check files in a recursive way. This means that by putting a .php file in a folder and then this folder in a ZIP archive, the server will accept this file without any checks. Because one can access this file from the website, it is remote code execution. This is related to a scorm imsmanifest.xml file, the import_package function, and extraction in $courseSysDir.$newDir.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T15:07:27.000Z
CVE-2019-13083 
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T15:44:52.000Z
CVE-2019-13084 
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T15:45:02.000Z
CVE-2019-13085 
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T15:45:09.000Z
CVE-2019-13086 
core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T16:16:02.000Z
CVE-2019-13096 
TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/<wallet-name>.xml to gain unauthorized access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T16:14:26.000Z
CVE-2019-13097 
The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T16:01:46.000Z
CVE-2019-13098 
The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T15:52:59.000Z
CVE-2019-13099 
The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T15:40:32.000Z
CVE-2019-13100 
The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T15:28:10.000Z
CVE-2019-13101 
An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T12:29:17.000Z
CVE-2019-13103 
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-29T14:52:02.000Z
CVE-2019-13104 
In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T19:00:41.000Z
CVE-2019-13105 
Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T19:02:40.000Z