rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-0122 
Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
Problem types: description: Denial of Service, Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Software Guard Extensions SDK
Published: 2019-03-14T20:00:00.000Z
CVE-2019-0123 
Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) SGX and TXT
Published: 2019-11-14T19:07:45.000Z
CVE-2019-0124 
Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) SGX and TXT
Published: 2019-11-14T19:07:54.000Z
CVE-2019-0126 
Insufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
Problem types: description: Escalation of Privilege, Denial of Service
Affected products: vendor: n/a
product: Intel(R) Unified Extensible Firmware Interface (UEFI)
Published: 2019-05-17T15:41:38.000Z
CVE-2019-0127 
Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T17:00:00.000Z
CVE-2019-0128 
Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Chipset Device Software (INF Update Utility) Advisory
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0129 
Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) USB 3.0 Creator Utility
Published: 2019-03-14T20:00:00.000Z
CVE-2019-0130 
Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.
Problem types: description: Escalation of Privilege, Denial of Service
Affected products: vendor: n/a
product: Intel(R) Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise Advisory
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0131 
Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
Problem types: description: Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:08:32.000Z
CVE-2019-0132 
Data Corruption in Intel Unite(R) Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Intel Unite(R) Client
Published: 2019-05-17T15:41:37.000Z
CVE-2019-0134 
Improper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an authenticated user to potentially execute code at an elevated level of privilege.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Dynamic Platform and Thermal Framework
Published: 2019-12-16T19:13:46.000Z
CVE-2019-0135 
Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Accelerated Storage Manager in RSTe Advisory
Published: 2019-03-14T20:00:00.000Z
CVE-2019-0136 
Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Intel® PROSet/Wireless WiFi Software
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0138 
Improper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) ACU Wizard
Published: 2019-05-17T15:41:37.000Z
CVE-2019-0139 
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:21:50.000Z
CVE-2019-0140 
Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:20:37.000Z
CVE-2019-0142 
Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:21:32.000Z
CVE-2019-0143 
Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:22:23.000Z
CVE-2019-0144 
Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:22:49.000Z
CVE-2019-0145 
Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:21:07.000Z
CVE-2019-0146 
Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:23:11.000Z
CVE-2019-0147 
Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:23:26.000Z
CVE-2019-0148 
Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:23:44.000Z
CVE-2019-0149 
Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:24:03.000Z
CVE-2019-0150 
Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers
Published: 2019-11-14T18:24:21.000Z
CVE-2019-0151 
Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Processor Security
Published: 2019-11-14T19:07:09.000Z
CVE-2019-0152 
Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Processor Security
Published: 2019-11-14T19:06:54.000Z
CVE-2019-0153 
Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Converged Security & Management Engine (CSME)
Published: 2019-05-17T15:41:38.000Z
CVE-2019-0154 
Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Processor Graphics Update
Published: 2019-11-14T18:19:54.000Z
CVE-2019-0155 
Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
Published: 2019-11-14T18:42:54.000Z
CVE-2019-0157 
Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Intel(R) SGX for Linux
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0158 
Insufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Graphics Performance Analyzer for Linux Advisory
Published: 2019-04-17T17:02:11.000Z
CVE-2019-0159 
Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Linux Administrative Tools for Intel(R) Network Adapters
Published: 2019-12-16T19:13:35.000Z
CVE-2019-0160 
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
Problem types: description: Escalation of Privilege and/or Denial of Service
cwe_id: CWE-120
description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: n/a
product: Extensible Firmware Interface Development Kit (EDK II)
default_status: unaffected
Published: 2019-03-27T19:20:26.000Z
CVE-2019-0161 
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Extensible Firmware Interface Development Kit (EDK II)
product: Extensible Firmware Interface Development Kit (EDK II)
Published: 2019-03-27T19:23:44.000Z
CVE-2019-0162 
Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Microprocessor Memory Mapping Advisory
Published: 2019-04-17T17:03:09.000Z
CVE-2019-0163 
Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Advisory
Published: 2019-04-17T17:03:36.000Z
CVE-2019-0164 
Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Turbo Boost Max Technology 3.0
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0165 
Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Intel(R) CSME
Published: 2019-12-18T21:08:44.000Z
CVE-2019-0166 
Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:08:50.000Z
CVE-2019-0168 
Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME, Intel(R) TXE
Published: 2019-12-18T21:08:56.000Z
CVE-2019-0169 
Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) TXE
Published: 2019-12-18T21:07:38.000Z
CVE-2019-0170 
Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Dynamic Application Loader (DAL)
Published: 2019-05-17T15:41:38.000Z
CVE-2019-0171 
Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Quartus(R)
Published: 2019-05-17T15:41:37.000Z
CVE-2019-0172 
A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel Unite(R) Client for Android
Published: 2019-05-17T15:41:37.000Z
CVE-2019-0173 
Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Intel(R) RAID Web Console 2 Advisory
Published: 2019-08-19T16:13:58.000Z
CVE-2019-0174 
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Central Processing Units (CPUs)
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0175 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0177 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0178 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0179 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0180 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0181 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0182 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0183 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-0184 
Insufficient access control in protected memory subsystem for Intel(R) TXT for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 Families; Intel(R) Xeon(R) E-2100 and E-2200 Processor Families with Intel(R) Processor Graphics and Intel(R) TXT may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) TXT
Published: 2019-11-14T19:09:12.000Z
CVE-2019-0185 
Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 families; Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Processor Graphics SMM
Published: 2019-11-14T18:40:34.000Z
CVE-2019-0186 
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file
Problem types: description: Cross-Site Scripting
Affected products: vendor: Apache Software Foundation
product: Apache Pluto
Published: 2019-04-26T15:56:48.000Z
CVE-2019-0187 
Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-server using RemoteJMeterEngine and proceed with an attack using untrusted data deserialization. This only affect tests running in Distributed mode. Note that versions before 4.0 are not able to encrypt traffic between the nodes, nor authenticate the participating nodes so upgrade to JMeter 5.1 is also advised.
Problem types: description: Unauthenticated RCE
Affected products: vendor: Apache Software Foundation
product: Apache JMeter
Published: 2019-03-06T17:00:00.000Z