rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11744 
Some HTML elements, such as &lt;title&gt; and &lt;textarea&gt;, can contain literal angle brackets without treating them as markup. It is possible to pass a literal closing tag to .innerHTML on these elements, and subsequent content after that will be parsed as if it were outside the tag. This can lead to XSS if a site does not filter user input as strictly for these elements as it does for other elements. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
Problem types: description: XSS by breaking out of title and textarea elements using innerHTML
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:17:13.000Z
CVE-2019-11745 
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Out of bounds write in NSS when encrypting with a block cipher
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T19:22:00.000Z
CVE-2019-11746 
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
Problem types: description: Use-after-free while manipulating video
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:16:39.000Z
CVE-2019-11747 
The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes removing any HTTP Strict Transport Security (HSTS) settings received from sites that use it. Due to a bug, sites on the pre-load list also have their HSTS setting removed. On the next visit to that site if the user specifies an http: URL rather than secure https: they will not be protected by the pre-loaded HSTS setting. After that visit the site's HSTS setting will be restored. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
Problem types: description: 'Forget about this site' removes sites from pre-loaded HSTS list
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:16:08.000Z
CVE-2019-11748 
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the possibility of trusted WebRTC resources being invisibly embedded in web content and abusing permissions previously given by users. Users will now be prompted for permissions on each use. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
Problem types: description: Persistence of WebRTC permissions in a third party context
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:15:45.000Z
CVE-2019-11749 
A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
Problem types: description: Camera information available without prompting using getUserMedia
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:15:23.000Z
CVE-2019-11750 
A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
Problem types: description: Type confusion in Spidermonkey
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:14:59.000Z
CVE-2019-11751 
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. <br>*Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
Problem types: description: Malicious code execution through command line parameters
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:14:37.000Z
CVE-2019-11752 
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
Problem types: description: Use-after-free while extracting a key value in IndexedDB
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:14:08.000Z
CVE-2019-11753 
The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the unprotected location has been altered, the altered maintenance service can run with elevated privileges during the update process due to a lack of integrity checks. This allows for privilege escalation if the executable has been replaced locally. <br>*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69, Firefox ESR < 60.9, and Firefox ESR < 68.1.
Problem types: description: Privilege escalation with Mozilla Maintenance Service in custom Firefox installation location
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-09-27T17:13:06.000Z
CVE-2019-11754 
When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.
Problem types: description: Pointer Lock is enabled with no user notification
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-09-27T17:27:33.000Z
CVE-2019-11755 
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted message. Previous versions had only suppressed showing a digital signature for messages with an outer multipart/signed layer. This vulnerability affects Thunderbird < 68.1.1.
Problem types: description: Spoofing a message author via a crafted S/MIME message
Affected products: vendor: Mozilla
product: Thunderbird
Published: 2019-09-27T17:10:44.000Z
CVE-2019-11756 
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox < 71.
Problem types: description: Use-after-free of SFTKSession object
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T19:23:29.000Z
CVE-2019-11757 
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Use-after-free when creating index updates in IndexedDB
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:26:23.000Z
CVE-2019-11758 
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. This bug showed evidence of memory corruption in the accessibility engine and we presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox < 69, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Potentially exploitable crash due to 360 Total Security
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:28:31.000Z
CVE-2019-11759 
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Stack buffer overflow in HKDF output
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:48:07.000Z
CVE-2019-11760 
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Stack buffer overflow in WebRTC networking
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:51:19.000Z
CVE-2019-11761 
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Unintended access to a privileged JSONView object
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:52:08.000Z
CVE-2019-11762 
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: document.domain-based origin isolation has same-origin-property violation
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:53:09.000Z
CVE-2019-11763 
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML comment text being treated as HTML which could have led to XSS in a web application under certain conditions. It could have also led to HTML entities being masked from filters - enabling the use of entities to mask the actual characters of interest from filters. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Incorrect HTML parsing results in XSS bypass technique
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T19:59:44.000Z
CVE-2019-11764 
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Problem types: description: Memory safety bugs fixed in Thunderbird 68.2
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2020-01-08T20:02:22.000Z
CVE-2019-11765 
A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to lack of validation from the parent process, if the user accepted the permission request an attacker-controlled permission would be granted rather than the 'Click to Play' permission. This vulnerability affects Firefox < 70.
Problem types: description: Incorrect permissions could be granted to a website
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T20:03:57.000Z
CVE-2019-11766 
dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-05T05:18:14.000Z
CVE-2019-11767 
Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-05T05:29:08.000Z
CVE-2019-11768 
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T04:25:10.000Z
CVE-2019-11769 
An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. Subsequently, these credentials are processed in Teamviewer.exe, which allows any application running in the same non-administrative user context to intercept them in cleartext within process memory. By using this technique, a local attacker is able to obtain administrative credentials in order to elevate privileges. This vulnerability can be exploited by injecting code into Teamviewer.exe which intercepts calls to GetWindowTextW and logs the processed credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T19:44:17.000Z
CVE-2019-11770 
In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. Any of these artifacts could have been MITM to maliciously compromise them and infect the build artifacts that were produced. Additionally, if any of these JARs or other dependencies were compromised, any developers using these could continue to be infected past updating to fix this.
Problem types: cwe_id: CWE-829
description: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Affected products: vendor: The Eclipse Foundation
product: Eclipse Buildship
Published: 2019-06-14T13:53:59.000Z
CVE-2019-11771 
AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-07-17T20:17:07.000Z
CVE-2019-11772 
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-07-17T20:17:27.000Z
CVE-2019-11773 
Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users.
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: The Eclipse Foundation
product: Eclipse OMR
Published: 2019-09-12T17:25:54.000Z
CVE-2019-11774 
Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.
Problem types: cwe_id: CWE-367
description: CWE-367
Affected products: vendor: The Eclipse Foundation
product: Eclipse OMR
Published: 2019-09-12T17:25:54.000Z
CVE-2019-11775 
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.
Problem types: cwe_id: CWE-367
description: CWE-367
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-07-30T13:45:38.000Z
CVE-2019-11776 
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation
Affected products: vendor: The Eclipse Foundation
product: Eclipse BIRT
Published: 2019-08-09T18:41:16.000Z
CVE-2019-11777 
In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information.
Problem types: cwe_id: CWE-346
description: CWE-346: Origin Validation Error
Affected products: vendor: The Eclipse Foundation
product: Eclipse Paho
Published: 2019-09-11T17:55:21.000Z
CVE-2019-11778 
If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2019-09-18T22:25:53.000Z
CVE-2019-11779 
In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters, i.e. the topic hierarchy separator, then a stack overflow will occur.
Problem types: cwe_id: CWE-754
description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2019-09-19T13:30:43.000Z
CVE-2019-11780 
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Swapnesh Shah
Published: 2019-12-19T15:50:12.000Z
CVE-2019-11781 
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
Credits: lang: en
value: "iamsushi"
Published: 2020-12-22T16:25:35.000Z
CVE-2019-11782 
Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
Credits: lang: en
value: Damien LESCOS
Published: 2020-12-22T16:25:36.000Z
CVE-2019-11783 
Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to subscribe to arbitrary mail channels uninvited.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
Credits: lang: en
value: Nils Hamerlinck (Trobz)
lang: en
value: Christopher Riis Bubeck Eriksen
lang: en
value: Alexandre Diaz
lang: en
value: "Raspina Net Pars Group"
Published: 2020-12-22T16:25:36.000Z
CVE-2019-11784 
Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
Published: 2020-12-22T16:25:37.000Z
CVE-2019-11785 
Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain access to messages posted on business records there were not given access to, and subscribe to receive future messages.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
Credits: lang: en
value: Nils Hamerlinck (Trobz)
Published: 2020-12-22T16:25:38.000Z
CVE-2019-11786 
Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
vendor: Odoo
product: Odoo Enterprise
Credits: lang: en
value: Martin Trigaux
lang: en
value: Alexandre Diaz
Published: 2020-12-22T16:25:38.000Z