rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-12323 
The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T15:53:07.000Z
CVE-2019-12324 
A command injection (missing input validation) issue in the IP address field for the logging server in the configuration web interface on the Akuvox R50P VoIP phone with firmware 50.0.6.156 allows an authenticated remote attacker in the same network to trigger OS commands via shell metacharacters in a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T15:35:12.000Z
CVE-2019-12325 
The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device (DoS) without authentication or execute code (authenticated as a user) to spawn a remote shell as a root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T15:54:16.000Z
CVE-2019-12326 
Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the file) and trigger code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T16:05:13.000Z
CVE-2019-12327 
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T17:30:45.000Z
CVE-2019-12328 
A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP phone with firmware 2.6.1a2421 allows an authenticated remote attacker in the same network to trigger OS commands via shell metacharacters in a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T17:55:50.000Z
CVE-2019-12331 
PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficient. By double-encoding the the xml payload to utf-7 it is possible to bypass the check for the string ‚<!ENTITY‘ and thus allowing for an xml external entity processing (XXE) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T14:03:43.000Z
CVE-2019-12345 
XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-27T20:17:30.000Z
CVE-2019-12346 
In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T20:25:25.000Z
CVE-2019-12347 
In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. The vulnerability occurs due to input validation errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T18:29:16.000Z
CVE-2019-12348 
An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T15:03:24.000Z
CVE-2019-12349 
An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T12:38:57.000Z
CVE-2019-12350 
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T12:58:24.000Z
CVE-2019-12351 
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T12:26:35.000Z
CVE-2019-12352 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker has dls_print authority) via a dlid cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:11:12.000Z
CVE-2019-12353 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dl_sendmail.php (when the attacker has admin authority) via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:10:54.000Z
CVE-2019-12354 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php (when the attacker has admin authority) via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:10:32.000Z
CVE-2019-12355 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print.php (when the attacker has dls_print authority) via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:10:14.000Z
CVE-2019-12356 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:09:59.000Z
CVE-2019-12357 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php (when the attacker has admin authority) via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:09:46.000Z
CVE-2019-12358 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker has dls_print authority) via a dlid cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:09:35.000Z
CVE-2019-12359 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyan_sendmail.php (when the attacker has admin authority) via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T12:09:22.000Z
CVE-2019-12360 
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-27T22:01:33.000Z
CVE-2019-12361 
EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-27T22:49:57.000Z
CVE-2019-12362 
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-27T22:50:09.000Z
CVE-2019-12363 
An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to an installed mybb2fa plugin to control its state via usercp.php?action=mybb2fa&do=deactivate (or usercp.php?action=mybb2fa&do=activate). A deactivate operation lowers the security of the targeted account by disabling two factor authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T13:25:07.000Z
CVE-2019-12365 
The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:29:07.000Z
CVE-2019-12366 
The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:30:09.000Z
CVE-2019-12367 
The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:31:08.000Z
CVE-2019-12368 
The Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:31:51.000Z
CVE-2019-12369 
The TypeApp application through 1.9.5.35 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:34:27.000Z
CVE-2019-12370 
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:35:07.000Z
CVE-2019-12372 
Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T00:11:33.000Z
CVE-2019-12373 
Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote disclosure of administrator passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:27:16.000Z
CVE-2019-12374 
A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper username sanitization in the Basic Authentication implementation in core/provisioning.secure/ProvisioningSecure.asmx in Provisioning.Secure.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:26:14.000Z
CVE-2019-12375 
Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote information disclosure and arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:24:45.000Z
CVE-2019-12376 
Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to full managed endpoint compromise by an authenticated user with read privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:23:37.000Z
CVE-2019-12377 
A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 allows arbitrary file upload, which may lead to arbitrary remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:19:43.000Z
CVE-2019-12378 
An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This has been disputed as not an issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T02:04:30.000Z
CVE-2019-12379 
An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T02:04:48.000Z
CVE-2019-12380 
**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T02:05:08.000Z
CVE-2019-12381 
An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: this is disputed because new_ra is never used if it is NULL
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T02:05:20.000Z
CVE-2019-12382 
An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T02:05:29.000Z
CVE-2019-12383 
Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T02:21:05.000Z
CVE-2019-12384 
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T15:34:08.000Z
CVE-2019-12385 
An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T18:19:41.000Z
CVE-2019-12386 
An issue was discovered in Ampache through 3.9.1. A stored XSS exists in the localplay.php LocalPlay "add instance" functionality. The injected code is reflected in the instances menu. This vulnerability can be abused to force an admin to create a new privileged user whose credentials are known by the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T18:21:04.000Z
CVE-2019-12387 
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T11:34:49.000Z
CVE-2019-12388 
Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:40:54.000Z
CVE-2019-12389 
Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:37:48.000Z
CVE-2019-12390 
Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without credentials via port tcp/5010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:35:28.000Z
CVE-2019-12391 
The Anviz Management System for access control has insufficient logging for device events such as door open requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:16:20.000Z
CVE-2019-12392 
Anviz access control devices allow remote attackers to issue commands without a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:26:00.000Z
CVE-2019-12393 
Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:05:31.000Z
CVE-2019-12394 
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:29:20.000Z
CVE-2019-12395 
In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-28T12:41:32.000Z
CVE-2019-12397 
Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version of Apache Ranger with the fix.
Problem types: description: Cross-site scripting
Affected products: vendor: Apache Software Foundation
product: Apache Ranger
Published: 2019-08-08T17:06:43.000Z
CVE-2019-12398 
In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected.
Problem types: description: Stored XSS
Affected products: vendor: Apache
product: Airflow
Published: 2020-01-14T16:28:35.000Z
CVE-2019-12399 
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration property value, then any client can issue a request to the same Connect cluster to obtain the connector's task configuration and the response will contain the plaintext secret rather than the externalized secrets variables.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Kafka
Published: 2020-01-14T14:28:57.000Z
CVE-2019-12400 
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4.
Problem types: description: Process Control
Affected products: vendor: Apache
product: Apache Santuario - XML Security for Java
Published: 2019-08-23T20:30:33.000Z
CVE-2019-12401 
Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs.
Problem types: description: XML Entity Expansion
Affected products: vendor: Apache
product: Solr
Published: 2019-09-10T14:06:54.000Z
CVE-2019-12402 
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.
Problem types: description: denial of service vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Commons Compress
Published: 2019-08-29T00:00:00.000Z
CVE-2019-12404 
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache JSPWiki
Published: 2019-09-23T14:54:35.000Z
CVE-2019-12405 
Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct password.
Problem types: description: Improper Authentication
Affected products: vendor: Apache
product: Traffic Control
Published: 2019-09-09T16:36:25.000Z
CVE-2019-12406 
Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments. From the 3.3.4 and 3.2.11 releases, a default limit of 50 message attachments is enforced. This is configurable via the message property "attachment-max-count".
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache CXF
Published: 2019-11-06T20:07:27.000Z
CVE-2019-12407 
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache JSPWiki
Published: 2019-09-23T15:40:59.000Z