rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10847 
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:33:39.000Z
CVE-2019-10848 
Computrols CBAS 18.0.0 allows Username Enumeration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:29:08.000Z
CVE-2019-10849 
Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T19:05:01.000Z
CVE-2019-10850 
Computrols CBAS 18.0.0 has Default Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T19:03:11.000Z
CVE-2019-10851 
Computrols CBAS 18.0.0 has hard-coded encryption keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:58:23.000Z
CVE-2019-10852 
Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:56:52.000Z
CVE-2019-10853 
Computrols CBAS 18.0.0 allows Authentication Bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:53:14.000Z
CVE-2019-10854 
Computrols CBAS 18.0.0 allows Authenticated Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:45:13.000Z
CVE-2019-10855 
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:43:28.000Z
CVE-2019-10856 
In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T15:48:33.000Z
CVE-2019-10863 
A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T17:07:13.000Z
CVE-2019-10864 
The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T17:42:48.000Z
CVE-2019-10866 
In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin/models/Submissions_fm.php with a crafted value of the /models/Submissioc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:34:28.000Z
CVE-2019-10867 
An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bundles/AdminBundle/Controller/Admin/DataObject/ClassController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T17:51:16.000Z
CVE-2019-10868 
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T00:25:41.000Z
CVE-2019-10869 
Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T17:07:57.000Z
CVE-2019-10871 
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T03:16:23.000Z
CVE-2019-10872 
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T03:16:40.000Z
CVE-2019-10873 
An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T03:17:06.000Z
CVE-2019-10874 
Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T04:42:32.000Z
CVE-2019-10875 
A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T12:36:49.000Z
CVE-2019-10876 
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated user may prevent Neutron from being able to configure networks on any compute nodes where those security groups are present, because of an Open vSwitch (OVS) firewall KeyError. All Neutron deployments utilizing neutron-openvswitch-agent are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T04:01:40.000Z
CVE-2019-10877 
In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T04:31:14.000Z
CVE-2019-10878 
In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T04:31:38.000Z
CVE-2019-10879 
In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T04:31:49.000Z
CVE-2019-10880 
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: XEROX
product: AltaLink B8045/B8055/B8065/B8075/B8090
vendor: XEROX
product: AltaLink C8030/C8035/C8045/C8055/C8070
vendor: XEROX
product: WorkCentre 3655
vendor: XEROX
product: WorkCentre 5845/5855/5865/5875/5890
vendor: XEROX
product: WorkCentre 5945/5955
vendor: XEROX
product: WorkCentre 6655
vendor: XEROX
product: WorkCentre 7220/7225
vendor: XEROX
product: WorkCentre 7830/7835/7845/7855
vendor: XEROX
product: WorkCentre 7970
vendor: XEROX
product: WorkCentre EC7836/EC7856
vendor: XEROX
product: ColorQube 9301/9302/9303
vendor: XEROX
product: ColorQube 8700/8900
vendor: XEROX
product: WorkCentre 6400
vendor: XEROX
product: Phaser 6700
vendor: XEROX
product: Phaser 7800
vendor: XEROX
product: WorkCentre 5735/5740/5745/5755/5765/5775/5790
vendor: XEROX
product: WorkCentre 7525/7530/7535/7545/7556
vendor: XEROX
product: WorkCentre 7755/7765/7775
Credits: lang: en
value: RaphaÃ«l Rigo from the Airbus Security Lab
Published: 2019-04-12T17:37:54.000Z
CVE-2019-10881 Default hidden Privileged Account Vulnerability in multiple XEROX devices
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
Problem types: cwe_id: CWE-259
description: CWE-259 Use of Hard-coded Password
Affected products: vendor: XEROX
product: AltaLink B8045/B8055/B8065/B8075/B8090
vendor: XEROX
product: AltaLink C8030/C8035/C8045/C8055/C8070
vendor: XEROX
product: WorkCentre 3655
vendor: XEROX
product: WorkCentre 5845/5855/5865/5875/5890
vendor: XEROX
product: WorkCentre 5945/5955
vendor: XEROX
product: WorkCentre 6655
vendor: XEROX
product: WorkCentre 7220/7225
vendor: XEROX
product: WorkCentre 7830/7835/7845/7855
vendor: XEROX
product: WorkCentre 7970
vendor: XEROX
product: WorkCentre EC7836/EC7856
vendor: XEROX
product: ColorQube 9301/9302/9303
vendor: XEROX
product: ColorQube 8700/8900
vendor: XEROX
product: WorkCentre 6400
vendor: XEROX
product: Phaser 6700
vendor: XEROX
product: Phaser 7800
vendor: XEROX
product: WorkCentre 5735/5740/5745/5755/5765/5775/5790
vendor: XEROX
product: WorkCentre 7525/7530/7535/7545/7556
vendor: XEROX
product: WorkCentre 7755/7765/7775
Credits: lang: en
value: Raphaël Rigo from the Airbus Security Lab
Published: 2021-04-13T20:58:01.000Z
CVE-2019-10882 Netskope client buffer overflow vulnerability
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: Netskope
product: Netskope client
Credits: lang: en
value: Julien Lenoit, Benoit Camredon, Mouad Abouhali from Airbus Security Lab.
Published: 2019-09-26T15:16:09.626Z
CVE-2019-10883 
Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T20:37:36.000Z
CVE-2019-10884 
Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and create a sense of false security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T16:45:27.000Z
CVE-2019-10885 
An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed session can bypass Workspace Control security features configured for this session by resetting the session context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T16:57:14.000Z
CVE-2019-10886 
An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T17:51:49.000Z
CVE-2019-10887 
A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attackers to inject arbitrary HTML elements via a /DataLog.csv?log= or /AlarmLog.csv?log= or /waitlog.cgi?name= or /chart.shtml?data= or /createlog.cgi?name= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T17:26:00.000Z
CVE-2019-10888 
A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-05T17:35:01.000Z
CVE-2019-10891 
An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T19:34:44.000Z
CVE-2019-10892 
An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users. And it finally leads to a stack-based buffer overflow via a special HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T19:58:12.000Z
CVE-2019-10893 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings > "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload will execute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T19:50:16.000Z
CVE-2019-10894 
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:50:22.000Z
CVE-2019-10895 
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:50:45.000Z
CVE-2019-10896 
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:50:58.000Z
CVE-2019-10897 
In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:52:14.000Z
CVE-2019-10898 
In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:52:25.000Z
CVE-2019-10899 
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:52:41.000Z
CVE-2019-10900 
In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:52:55.000Z
CVE-2019-10901 
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:53:11.000Z
CVE-2019-10902 
In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:53:25.000Z
CVE-2019-10903 
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T03:53:43.000Z
CVE-2019-10904 
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-06T19:40:05.000Z
CVE-2019-10905 
Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected page) executes the contents of any element with a specific class. This occurs because spaces are permitted in code block infostrings, which interferes with the intended behavior of a single class name beginning with the language- substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-06T19:59:55.000Z
CVE-2019-10906 
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-06T23:17:03.000Z
CVE-2019-10907 
Airsonic 10.2.1 uses Spring's default remember-me mechanism based on MD5, with a fixed key of airsonic in GlobalSecurityConfig.java. An attacker able to capture cookies might be able to trivially bruteforce offline the passwords of associated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-07T13:32:37.000Z
CVE-2019-10908 
In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which uses java.util.Random internally. This PRNG has a 48-bit seed that can easily be bruteforced, leading to trivial privilege escalation attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-07T13:32:58.000Z
CVE-2019-10909 
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T21:36:10.000Z
CVE-2019-10910 
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T21:31:41.000Z
CVE-2019-10911 
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T21:29:34.000Z
CVE-2019-10912 
In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has access to. This is related to symfony/cache and symfony/phpunit-bridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T21:20:12.000Z
CVE-2019-10913 
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T21:15:04.000Z
CVE-2019-10914 
pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-08T13:31:01.000Z
CVE-2019-10915 
A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Siemens AG
product: TIA Administrator
Published: 2019-07-11T21:17:46.000Z