rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11940 
In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until v2017.04.03.00.
Problem types: cwe_id: CWE-416
description: Use After Free (CWE-416)
Affected products: vendor: Facebook
product: Proxygen
Published: 2019-12-04T16:30:17.000Z
CVE-2019-11941 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:56:42.000Z
CVE-2019-11942 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:57:03.000Z
CVE-2019-11943 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:57:32.000Z
CVE-2019-11944 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:57:53.000Z
CVE-2019-11945 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:58:16.000Z
CVE-2019-11946 
A remote credential disclosure vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: credential disclosure
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:58:45.000Z
CVE-2019-11947 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:59:09.000Z
CVE-2019-11948 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:59:35.000Z
CVE-2019-11949 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:05:35.000Z
CVE-2019-11950 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:05:57.000Z
CVE-2019-11951 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:06:28.000Z
CVE-2019-11952 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:07:02.000Z
CVE-2019-11953 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:07:28.000Z
CVE-2019-11954 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:07:58.000Z
CVE-2019-11955 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:08:33.000Z
CVE-2019-11956 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:08:57.000Z
CVE-2019-11957 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:09:26.000Z
CVE-2019-11958 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:09:50.000Z
CVE-2019-11959 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:13:14.000Z
CVE-2019-11960 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:13:40.000Z
CVE-2019-11961 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:14:05.000Z
CVE-2019-11962 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:14:28.000Z
CVE-2019-11963 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:14:49.000Z
CVE-2019-11964 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:19:19.000Z
CVE-2019-11965 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:19:53.000Z
CVE-2019-11966 
A remote privilege escalation vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote privilege escalation
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:20:21.000Z
CVE-2019-11967 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:22:26.000Z
CVE-2019-11968 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:22:52.000Z
CVE-2019-11969 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:23:25.000Z
CVE-2019-11970 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:23:54.000Z
CVE-2019-11971 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:24:16.000Z
CVE-2019-11972 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:24:36.000Z
CVE-2019-11973 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:24:59.000Z
CVE-2019-11974 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:25:41.000Z
CVE-2019-11975 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:26:05.000Z
CVE-2019-11976 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:26:28.000Z
CVE-2019-11977 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:26:50.000Z
CVE-2019-11978 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:27:18.000Z
CVE-2019-11979 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:27:50.000Z
CVE-2019-11980 
A remote code exection vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: input validation remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:28:13.000Z
CVE-2019-11982 
A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
Problem types: description: cross site scripting
Affected products: vendor: n/a
product: HPE iLO4 and HPE iLO5
Published: 2019-06-05T16:35:10.000Z
CVE-2019-11983 
A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
Problem types: description: remote buffer overflow
Affected products: vendor: n/a
product: HPE iLO4 and HPE iLO5
Published: 2019-06-05T16:36:07.000Z
CVE-2019-11984 
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: sql injection code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:28:37.000Z
CVE-2019-11985 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:21:08.000Z
CVE-2019-11986 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T15:20:44.000Z
CVE-2019-11987 
A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.
Problem types: description: Local Unauthorized Elevation of Privilege
Affected products: vendor: n/a
product: HPE Smart Update Manager
Published: 2019-06-05T17:52:32.000Z
CVE-2019-11988 
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5.
Problem types: description: Remote Unauthorized Access
Affected products: vendor: n/a
product: HPE Smart Update Manager
Published: 2019-06-05T17:58:37.000Z
CVE-2019-11989 
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7.
Problem types: description: remote Denial of Service (DoS)
Affected products: vendor: n/a
product: IceWall SSO Agent Option; HPE IceWall MFA 4.0EE MFA. Server LTU; HPE IceWall.MFA4.0SE MFA. Server LTU
Published: 2019-07-19T21:21:22.000Z
CVE-2019-11990 
Security vulnerabilities in HPE UIoT versions 1.6, 1.5, 1.4.2, 1.4.1, 1.4.0, and 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT: * For customers with release UIoT 1.6, fixes are made available with 1.6 RP603 * For customers with release UIoT 1.5, fixes are made available with 1.5 RP503 HF3 * For customers with release older than 1.5, such as 1.4.0, 1.4.1, 1.4.2 and 1.2.4.2, the resolution will be to upgrade to 1.5 RP503 HF3 or 1.6 RP603 Customers are requested to upgrade to the updated versions or contact HPE support for further assistance.
Problem types: description: remote Unauthorized Data Access
Affected products: vendor: n/a
product: HPE IOT and GCP
Published: 2019-07-19T21:30:01.000Z
CVE-2019-11991 
HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays.
Problem types: description: remote disclosure of privileged information
Affected products: vendor: Hewlett Packard Enterprise
product: HPE 3PAR Service Processors
Published: 2019-07-09T18:32:04.000Z
CVE-2019-11992 
A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting.
Problem types: description: remote cross-site scripting (xss)
Affected products: vendor: n/a
product: HPE OneView for VMware vCenter with Operations Manager and Log Insight
Published: 2019-12-18T15:59:05.000Z
CVE-2019-11993 
A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now deprecated APIs run as root, accept a file name path, and can be used to create or delete arbitrary files on the nodes. These APIs do not require user authentication and are accessible over the management network, resulting in remote availability and integrity vulnerabilities For all customers running HPE OmniStack version 3.7.9 and earlier. HPE recommends upgrading the OmniStack software to version 3.7.10 or later, which contains a permanent resolution. Customers and partners who can upgrade to 3.7.10 should upgrade at the earliest convenience. For all customers and partners unable to upgrade their environments to the recommended version 3.7.10, HPE has created a Temporary Workaround https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=mmr_sf-EN_US000061675&withFrame for you to implement. All customer should upgrade to the recommended 3.7.10 or later version at the earliest convenience.
Problem types: description: remote creation and deletion of arbitrary files; remote creation and deletion of arbitrary files
Affected products: vendor: n/a
product: SimpliVity OmniCube; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; SimpliVity OmniStack for Lenovo; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; HPE SimpliVity 2600 Gen10
Published: 2020-01-03T17:18:03.000Z
CVE-2019-11994 
A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. An API is used to execute a command manifest file during upgrade does not correctly prevent directory traversal and so can be used to execute manifest files in arbitrary locations on the node. The API does not require user authentication and is accessible over the management network, resulting in the potential for unauthenticated remote execution of manifest files. For all customers running HPE OmniStack version 3.7.9 and earlier. HPE recommends upgrading the OmniStack software to version 3.7.10 or later, which contains a permanent resolution. Customers and partners who can upgrade to 3.7.10 should upgrade at the earliest convenience. For all customers and partners unable to upgrade their environments to the recommended version 3.7.10, HPE has created a Temporary Workaround https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=mmr_sf-EN_US000061901&withFrame for you to implement. All customer should upgrade to the recommended 3.7.10 or later version at the earliest convenience.
Problem types: description: remote arbitrary command execution; remote arbitrary command execution
Affected products: vendor: n/a
product: HPE SimpliVity 2600 Gen10; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 380 Gen9; SimpliVity OmniCube; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; SimpliVity OmniStack for Lenovo
Published: 2020-01-03T17:23:49.000Z
CVE-2019-11995 
Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT: For customers with release UIoT 1.2.4.2 fixes are made available with 1.2.4.2 RP3 HF1. For customers with release older than 1.2.4.2, such as 1.2.4.1, 1.2.4.0, the resolution will be to upgrade to 1.2.4.2 RP3 HF1 Customers are requested to upgrade to the updated versions or contact HPE support for further assistance.
Problem types: description: remote unauthorized access to sensitive information; remote unauthorized remote access
Affected products: vendor: n/a
product: HPE IOT + GCP
Published: 2019-12-18T19:46:26.000Z
CVE-2019-11996 
Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0.
Problem types: description: remote disclosure of information; remote elevation of privilege; remote multiple vulnerabilities
Affected products: vendor: n/a
product: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays
Published: 2019-11-07T18:23:20.000Z
CVE-2019-11997 
A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0. The vulnerability could be used for unauthorized access to information via cross site scripting. HPE has made the following software updates to resolve the vulnerability in eIUM. The eIUM 8.3 FP01 customers are advised to install eIUM83FP01Patch_QXCR1001711284.20190806-1244 patch. The eIUM 9.0 customers are advised to upgrade to eIUM 9.0 FP02 PI5 or later versions. For other versions, please, contact the product support.
Problem types: description: remote cross-site scripting (xss)
Affected products: vendor: HPE
product: HPE enhanced Internet Usage Manager (eIUM)
Published: 2020-01-16T18:55:52.000Z