rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-14727 
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password of a victim account via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T15:21:01.000Z
CVE-2019-14728 
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victim's account via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T15:22:35.000Z
CVE-2019-14729 
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T15:21:43.000Z
CVE-2019-14730 
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T15:23:20.000Z
CVE-2019-14731 
An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other people's cookies via the Rich Text Box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T23:36:35.000Z
CVE-2019-14732 
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T00:06:44.000Z
CVE-2019-14733 
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T00:06:33.000Z
CVE-2019-14734 
AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T00:06:20.000Z
CVE-2019-14737 
Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T18:15:58.000Z
CVE-2019-14743 
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T14:05:50.000Z
CVE-2019-14744 
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T14:30:35.000Z
CVE-2019-14745 
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T14:58:18.000Z
CVE-2019-14746 
A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T15:04:04.000Z
CVE-2019-14747 
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T15:12:32.000Z
CVE-2019-14748 
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. For example, a non-agent user can upload a .html file, and Content-Disposition will be set to inline instead of attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T16:38:58.000Z
CVE-2019-14749 
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input in the Name and Internal Notes fields in the Users tab, and the Issue Summary field in the tickets tab. This allows other agents to download data in a .csv file format or .xls file format. This is used as input for spreadsheet applications such as Excel and OpenOffice Calc, resulting in a situation where cells in the spreadsheets can contain input from an untrusted source. As a result, the end user who is accessing the exported spreadsheet can be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T16:38:45.000Z
CVE-2019-14750 
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T16:38:35.000Z
CVE-2019-14751 
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T15:59:59.000Z
CVE-2019-14752 
SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:11:42.000Z
CVE-2019-14753 
SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T16:44:43.000Z
CVE-2019-14754 
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T12:32:46.000Z
CVE-2019-14755 
The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T14:27:42.000Z
CVE-2019-14756 
An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application's UI as soon as the email is opened. At a bare minimum, this allows an attacker to take control over the Email application's UI (e.g., display a malicious prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the privileges available to the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T18:32:49.000Z
CVE-2019-14757 
An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a vCard file to the victim that will inject HTML into the Contacts application (assuming the victim chooses to import the file). At a bare minimum, this allows an attacker to take control over the Contacts application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T19:07:13.000Z
CVE-2019-14758 
An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a file via email to the victim that will inject HTML into the File Manager application (assuming the victim chooses to download the email attachment). At a bare minimum, this allows an attacker to take control over the File Manager application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T19:13:41.000Z
CVE-2019-14759 
An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T19:17:29.000Z
CVE-2019-14760 
An issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Recorder application. At a bare minimum, this allows an attacker to take control over the Recorder application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T19:21:57.000Z
CVE-2019-14761 
An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Note application. At a bare minimum, this allows an attacker to take control over the Note application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T19:24:07.000Z
CVE-2019-14763 
In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T21:50:39.000Z
CVE-2019-14765 
Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T15:32:15.000Z
CVE-2019-14766 
Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T15:33:40.000Z
CVE-2019-14767 
In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T15:34:55.000Z
CVE-2019-14768 
An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new WebApp WAR file to the Tomcat server via Path Traversal, allowing remote code execution with SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T15:36:02.000Z
CVE-2019-14769 
Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a specialized label, then have an administrator execute scripting when administering a layout. (This issue is mitigated by the attacker needing permission to create custom blocks on the site, which is typically an administrative permission.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T01:36:18.000Z
CVE-2019-14770 
In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged in and uses the search functionality. (This issue is mitigated by the attacker needing permissions to create administrative menu links, such as by creating a content type or layout. Such permissions are usually restricted to trusted or administrative users.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T01:36:04.000Z
CVE-2019-14771 
Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, potentially allowing non-configuration scripts to be uploaded to the server. (This attack is mitigated by the attacker needing the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should be given. Other preventative measures in Backdrop CMS prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code.) Note: This has been disputed by multiple 3rd parties due to advanced permissions that are needed to exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T01:35:48.000Z
CVE-2019-14772 
verdaccio before 3.12.0 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T12:59:04.000Z
CVE-2019-14773 
admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T19:49:04.000Z
CVE-2019-14774 
The woo-variation-swatches (aka Variation Swatches for WooCommerce) plugin 1.0.61 for WordPress allows XSS via the wp-admin/admin.php?page=woo-variation-swatches-settings tab parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T19:46:38.000Z
CVE-2019-14776 
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T18:45:48.000Z
CVE-2019-14777 
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T18:53:08.000Z
CVE-2019-14778 
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T18:47:41.000Z
CVE-2019-14782 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to make a request to extract the victim's password (for the OS and phpMyAdmin) via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T15:25:33.000Z
CVE-2019-14783 
On Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a malicious application to create privileged files. The Samsung ID is SVE-2019-14764.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:58:47.000Z
CVE-2019-14784 
The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T15:50:00.000Z
CVE-2019-14785 
The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cp_contact_form_paypal.php&pwizard=1 cp_contactformpp_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:37:50.000Z
CVE-2019-14786 
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T15:47:52.000Z
CVE-2019-14787 
The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:21:59.000Z
CVE-2019-14788 
wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T15:45:22.000Z
CVE-2019-14789 
The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T15:43:05.000Z
CVE-2019-14790 
The limb-gallery (aka Limb Gallery) plugin 1.4.0 for WordPress has XSS via the wp-admin/admin-ajax.php?action=grsGalleryAjax&grsAction=shortcode task parameter,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T14:57:04.000Z
CVE-2019-14791 
The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:32:47.000Z
CVE-2019-14792 
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:14:49.000Z
CVE-2019-14793 
The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:16:23.000Z
CVE-2019-14794 
The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:33:44.000Z
CVE-2019-14795 
The toggle-the-title (aka Toggle The Title) plugin 1.4 for WordPress has XSS via the wp-admin/admin-ajax.php?action=update_title_options isAutoSaveValveChecked or isDisableAllPagesValveChecked parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T14:55:44.000Z
CVE-2019-14796 
The mq-woocommerce-products-price-bulk-edit (aka Woocommerce Products Price Bulk Edit) plugin 2.0 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=update_options show_products_page_limit parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:32:37.000Z
CVE-2019-14797 
The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:30:40.000Z
CVE-2019-14798 
The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcode_bwg tagtext parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:29:40.000Z
CVE-2019-14799 
The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:18:29.000Z
CVE-2019-14800 
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T14:53:42.000Z
CVE-2019-14801 
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:22:24.000Z
CVE-2019-14802 
HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-26T00:00:00.000Z
CVE-2019-14804 
studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:46:01.000Z
CVE-2019-14805 
studio/builder_menu.php?page=sets in UNA 10.0.0-RC1 allows XSS via the System Name field under Sets during set editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T13:47:37.000Z
CVE-2019-14806 
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T14:29:16.000Z
CVE-2019-14807 
In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T20:28:46.000Z
CVE-2019-14808 
An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab (e.g., exposure of his birthday) or logs into his account (i.e., exposure of credentials).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:03:05.000Z