rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11867 
Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user space, which the driver assumes has a size greater than zero bytes. To exploit this vulnerability, an attacker must send an IRP with a system buffer size of 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T17:25:20.000Z
CVE-2019-11868 
See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-29T16:28:32.000Z
CVE-2019-11869 
The Yuzo Related Posts plugin 5.12.94 for WordPress has XSS because it mistakenly expects that is_admin() verifies that the request comes from an admin user (it actually only verifies that the request is for an admin page). An unauthenticated attacker can inject a payload into the plugin settings, such as the yuzo_related_post_css_and_style setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-09T21:24:59.000Z
CVE-2019-11870 
Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-09T21:25:09.000Z
CVE-2019-11871 
The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T02:58:09.000Z
CVE-2019-11872 
The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window. Successful exploitation grants an attacker with a right to execute malicious code on the administrator's computer through Excel functions as the plugin does not sanitize the user's input and allows insertion of any text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T18:15:52.000Z
CVE-2019-11873 
wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length, total extensions length, PSK extension length, total identity length, and identity length contain their maximum value which is 2^16. The identity data field of the PSK extension of the packet contains the attack data, to be stored in the undefined memory (RAM) of the server. The size of the data is about 65 kB. Possibly the attacker can perform a remote code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T12:54:46.000Z
CVE-2019-11875 
In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user account to connect to the Blue Prism server, but the roles associated to this account are not required to have any permissions. First of all, the application files are modified to grant full permissions on the client side. In a test environment (or his own instance of the software) an attacker is able to grant himself full privileges also on the server side. He can then, for instance, create a process with malicious behavior and export it to disk. With the modified client, it is possible to import the exported file as a release and overwrite any existing process in the database. Eventually, the bots execute the malicious process. The server does not check the user's permissions for the aforementioned actions, such that a modification of the client software enables this kind of attack. Possible scenarios may involve changing bank accounts or setting passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T15:55:31.000Z
CVE-2019-11876 
In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T15:48:30.000Z
CVE-2019-11877 
XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T16:27:31.000Z
CVE-2019-11878 
An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T14:24:36.000Z
CVE-2019-11879 
The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory. NOTE: The vendor states that this is analogous to Options FollowSymlinks in the Apache HTTP Server, and therefore it is "not a problem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T16:00:31.000Z
CVE-2019-11880 
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T15:47:20.000Z
CVE-2019-11881 
A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T19:35:43.000Z
CVE-2019-11884 
The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T21:53:01.000Z
CVE-2019-11885 
eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-12T13:55:14.000Z
CVE-2019-11886 
The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T04:03:16.000Z
CVE-2019-11887 
SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T16:53:10.000Z
CVE-2019-11888 
Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T04:30:21.000Z
CVE-2019-11889 
Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T12:36:01.000Z
CVE-2019-11890 
Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi LAN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T12:42:13.000Z
CVE-2019-11891 Incorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)
A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the SHC during the attack.
Problem types: cwe_id: CWE-266
description: CWE-266 Incorrect Privilege Assignment
Affected products: vendor: Bosch
product: Smart Home Controller
Credits: lang: en
value: Philip Kazmeier
Published: 2019-05-29T19:40:01.253Z
CVE-2019-11892 Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Bosch
product: Smart Home Controller
Credits: lang: en
value: Philip Kazmeier
Published: 2019-05-29T19:55:13.289Z
CVE-2019-11893 Incorrect privilege assignment in the app permission update API of the Bosch Smart Home Controller (SHC)
A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app with restricted permissions, which required user interaction.
Problem types: cwe_id: CWE-266
description: CWE-266 Incorrect Privilege Assignment
Affected products: vendor: Bosch
product: Smart Home Controller
Credits: lang: en
value: Philip Kazmeier
Published: 2019-05-29T19:58:04.150Z
CVE-2019-11894 Improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC)
A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to download the backup directly after a backup triggered by a legitimate user has been completed.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Bosch
product: Smart Home Controller
Credits: lang: en
value: Philip Kazmeier
Published: 2019-05-29T20:03:48.103Z
CVE-2019-11895 Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Bosch
product: Smart Home Controller
Credits: lang: en
value: Philip Kazmeier
Published: 2019-05-29T20:07:39.228Z
CVE-2019-11896 Incorrect pviilege assignment in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC)
A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Bosch
product: Smart Home Controller
Credits: lang: en
value: Philip Kazmeier
Published: 2019-05-29T20:11:00.829Z
CVE-2019-11897 Server-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software
A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: Bosch
product: IoT Gateway Software
vendor: ProSyst
product: mBS SDK
Credits: lang: en
value: Philip Kazmeier
Published: 2019-08-21T17:09:52.545Z
CVE-2019-11898 
Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition (APE) 3.8.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: Bosch
product: Access Professional Edition
Credits: lang: en
value: Oleksii Orekhov
Published: 2019-09-12T18:23:21.989Z
CVE-2019-11899 
An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition (APE) 3.8, client installations need to be authorized by the APE administrator.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Bosch
product: Access Professional Edition
Credits: lang: en
value: Oleksii Orekhov
Published: 2019-09-12T18:30:58.728Z
CVE-2019-11921 
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.
Problem types: description: Out-of-bounds Write (CWE-ID 787)
Affected products: vendor: Facebook
product: Proxygen
Published: 2019-07-25T20:38:43.000Z
CVE-2019-11922 
A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.
Problem types: description: Out-of-bounds Write (CWE-ID 787)
Affected products: vendor: Facebook
product: Zstandard
Published: 2019-07-25T20:32:44.000Z
CVE-2019-11923 
In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
Problem types: description: Allocation of Resources Without Limits or Throttling (CWE-ID 770)
Affected products: vendor: Facebook
product: Mcrouter
Published: 2019-12-04T16:00:21.000Z
CVE-2019-11924 
A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.
Problem types: description: Uncontrolled Resource Consumption (CWE-ID 400)
Affected products: vendor: Facebook
product: fizz
Published: 2019-08-20T19:32:10.000Z
CVE-2019-11925 
Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Facebook
product: HHVM
Published: 2019-09-06T18:46:54.000Z
CVE-2019-11926 
Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Facebook
product: HHVM
Published: 2019-09-06T18:46:54.000Z
CVE-2019-11927 
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.
Problem types: cwe_id: CWE-190
description: Integer Overflow or Wraparound (CWE-190)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp for iOS
Published: 2019-09-27T20:14:48.000Z
CVE-2019-11928 
An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
Affected products: vendor: Facebook
product: WhatsApp Desktop
Published: 2020-09-03T21:10:17.000Z
CVE-2019-11929 
Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Facebook
product: HHVM
Published: 2019-10-02T19:07:18.000Z
CVE-2019-11930 
An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1.
Problem types: cwe_id: CWE-763
description: CWE-763: Release of Invalid Pointer or Reference
Affected products: vendor: Facebook
product: HHVM
Published: 2019-12-04T16:25:19.000Z
CVE-2019-11931 
A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.
Problem types: cwe_id: CWE-121
description: Stack-based Buffer Overflow (CWE-121)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp for iOS
vendor: Facebook
product: WhatsApp for Windows Phone
vendor: Facebook
product: WhatsApp Enterprise Client
vendor: Facebook
product: WhatsApp Business for Android
vendor: Facebook
product: WhatsApp Business for iOS
Published: 2019-11-14T22:55:52.000Z
CVE-2019-11932 
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.
Problem types: cwe_id: CWE-415
description: Double free (CWE-415)
Affected products: vendor: koral--
product: android-gif-drawable
Published: 2019-10-03T21:13:47.000Z
CVE-2019-11933 
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service.
Problem types: cwe_id: CWE-119
description: Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
Affected products: vendor: Facebook
product: WhatsApp for Android
Published: 2019-10-23T15:40:10.000Z
CVE-2019-11934 
Improper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00.
Problem types: description: Out-of-bounds Read (CWE-ID 125)
Affected products: vendor: Facebook
product: folly
Published: 2019-12-04T16:25:20.000Z
CVE-2019-11935 
Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Facebook
product: HHVM
Published: 2019-12-04T16:25:20.000Z
CVE-2019-11936 
Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1.
Problem types: cwe_id: CWE-626
description: CWE-626: Null Byte Interaction Error (Poison Null Byte)
Affected products: vendor: Facebook
product: HHVM
Published: 2019-12-04T16:25:20.000Z
CVE-2019-11937 
In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service.
Problem types: description: Uncontrolled Resource Consumption (CWE-ID 400)
Affected products: vendor: Facebook
product: Mcrouter
Published: 2019-12-04T16:00:22.000Z
CVE-2019-11938 
Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.12.09.00.
Problem types: cwe_id: CWE-770
description: Allocation of Resources Without Limits or Throttling (CWE-770)
Affected products: vendor: Facebook
product: Facebook Thrift
Published: 2020-03-10T20:30:20.000Z
CVE-2019-11939 
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.
Problem types: cwe_id: CWE-770
description: Allocation of Resources Without Limits or Throttling (CWE-770)
Affected products: vendor: Facebook
product: Facebook Thrift
Published: 2020-03-18T00:40:12.000Z