rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-12765 
An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T18:35:33.000Z
CVE-2019-12766 
An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T18:36:42.000Z
CVE-2019-12767 
An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-21T00:16:30.000Z
CVE-2019-12768 
An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T19:26:30.000Z
CVE-2019-12769 
SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:38:10.000Z
CVE-2019-12771 
Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T13:05:23.000Z
CVE-2019-12773 
An issue was discovered in Verint Impact 360 15.1. At wfo/help/help_popup.jsp, the helpURL parameter can be changed to embed arbitrary content inside of an iFrame. Attackers may use this in conjunction with social engineering to embed malicious scripts or phishing pages on a site where this product is installed, given the attacker can convince a victim to visit a crafted link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-14T19:27:54.000Z
CVE-2019-12774 
A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044_update_05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description field in JSON data to the Profile Editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T15:06:04.000Z
CVE-2019-12775 
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. (Furthermore, the user account that controls the web application service is granted full access to run any system commands with elevated privilege, without the need for password authentication. Should vulnerabilities be identified and exploited within the web application, it may be possible for a threat actor to create or run high-privileged binaries or executables that are available within the operating system of the device.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T15:06:21.000Z
CVE-2019-12776 
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They include a hard-coded SSH backdoor for remote SSH and SCP access as the root user. A command in the relocate and relocate_revB scripts copies the hardcoded key to the root user's authorized_keys file, enabling anyone with the associated private key to gain remote root access to all affected products.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T15:06:30.000Z
CVE-2019-12777 
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They replace secure and protected directory permissions (set as default by the underlying operating system) with highly insecure read, write, and execute directory permissions for all users. By default, /usr/local and all of its subdirectories should have permissions set to only allow non-privileged users to read and execute from the tree structure, and to deny users from creating or editing files in this location. The ENTTEC firmware startup script permits all users to read, write, and execute (rwxrwxrwx) from the /usr, /usr/local, /usr/local/dmxis, and /usr/local/bin/ directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T15:06:42.000Z
CVE-2019-12779 
libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:44:25.000Z
CVE-2019-12780 
The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T15:46:05.000Z
CVE-2019-12781 
An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T13:56:37.000Z
CVE-2019-12782 
An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively deleting them.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T15:20:44.000Z
CVE-2019-12783 
An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the rd parameter can accept a URL, to which users will be redirected after a successful login. In conjunction with CVE-2019-12784, this can be used by attackers to "crowdsource" bruteforce login attempts on the target site, allowing them to guess and potentially compromise valid credentials without ever sending any traffic from their own machine to the target site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-14T19:22:12.000Z
CVE-2019-12784 
An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the login form can accept submissions from external websites. In conjunction with CVE-2019-12783, this can be used by attackers to "crowdsource" bruteforce login attempts on the target site, allowing them to guess and potentially compromise valid credentials without ever sending any traffic from their own machine to the target site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-14T19:25:24.000Z
CVE-2019-12786 
An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the IPAddress key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T17:49:30.000Z
CVE-2019-12787 
An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T17:49:38.000Z
CVE-2019-12788 
An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges). It is possible to perform a buffer overflow via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T18:14:50.000Z
CVE-2019-12789 
An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence (Ctrl-\) to obtain a shell with root privileges. After gaining root access, the attacker can mount the filesystem read-write and make permanent modifications to the device including bricking of the device, disabling vendor management of the device, preventing automatic upgrades, and permanently installing malicious code on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T16:19:57.000Z
CVE-2019-12790 
In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T18:41:59.000Z
CVE-2019-12791 
A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T20:34:18.000Z
CVE-2019-12792 
A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T20:39:26.000Z
CVE-2019-12794 
An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins (organization admins have the inherent ability to reset passwords for all of their organization's users). This, however, could be abused in a situation where the host organization of an instance creates organization admins. An organization admin could set a password manually for the site admin or simply use the API key of the site admin to impersonate them. The potential for abuse only occurs when the host organization creates lower-privilege organization admins instead of the usual site admins. Also, only organization admins of the same organization as the site admin could abuse this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T16:38:19.000Z
CVE-2019-12795 
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T21:07:32.000Z
CVE-2019-12797 
A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T18:21:40.000Z
CVE-2019-12798 
An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-13T16:58:21.000Z
CVE-2019-12799 
In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in an arbitrary deserialization if the right class is instantiated. An attacker can leverage this deserialization to achieve remote code execution. NOTE: this issue is a bypass for a CVE-2017-18357 whitelist patch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-13T19:18:41.000Z
CVE-2019-12801 
out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T17:35:08.000Z
CVE-2019-12802 
In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-13T20:58:51.000Z
CVE-2019-12803 Hunesion i-oneNet unrestricted file upload vulnerability
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, the specific upload web module doesn't verify the file extension and type, and an attacker can upload a webshell. After the webshell upload, an attacker can use the webshell to perform remote code exection such as running a system command.
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Hunesion
product: i-oneNet
Published: 2019-07-10T19:34:27.000Z
CVE-2019-12804 Hunesion i-oneNet Missing Support for Integrity Check vulnerability
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.
Problem types: cwe_id: CWE-353
description: CWE-353 Missing Support for Integrity Check
Affected products: vendor: Hunesion
product: i-oneNet
Published: 2019-07-10T19:38:09.000Z
CVE-2019-12805 NC Launcher 2 Arbitrary Command Injection Vulnerability
NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user.
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: NCSOFT
product: NC Launcher2
Published: 2019-08-09T16:11:12.492Z
CVE-2019-12806 
UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack with arbitrary data, due to a buffer overflow in a library. That leads remote attacker to execute arbitrary code via crafted https packets.
Problem types: cwe_id: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: CROSSCERT
product: UniSign
Published: 2019-08-13T19:10:06.000Z
CVE-2019-12807 
Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim to open a specially-crafted ISO archive file, an attacker could execution arbitrary code.
Problem types: cwe_id: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: ESTSOFT
product: ALZIP
Published: 2019-08-13T19:22:35.000Z
CVE-2019-12808 
ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: ESTSOFT
product: ALTOOLS Update Service
Published: 2019-08-13T19:35:24.000Z
CVE-2019-12809 
Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.
Problem types: cwe_id: CWE-494
description: CWE-494 Download of Code Without Integrity Check
Affected products: vendor: YES24
product: YES24 PC VIEWER
Published: 2019-08-15T18:53:58.000Z
CVE-2019-12810 
A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: ESTSOFT
product: ALSee
Published: 2019-08-30T16:33:08.000Z
CVE-2019-12811 
ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen method. This can be leveraged for code execution
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: ACTIVESOFT
product: MyBuilder
Published: 2019-10-07T14:10:37.000Z
CVE-2019-12812 
MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: ACTIVESOFT
product: MyBuilder
Published: 2019-10-07T14:14:10.000Z
CVE-2019-12813 
An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating the fingerprint image exhibit cleartext when the fingerprint scanner device transfers a fingerprint image to the driver. An attacker who sniffs an encrypted fingerprint image can easily decrypt that image using the key and salt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-13T22:25:28.000Z
CVE-2019-12814 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T13:24:44.000Z
CVE-2019-12815 
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T22:56:14.000Z
CVE-2019-12816 
Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T15:40:41.000Z
CVE-2019-12817 
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-25T11:12:22.000Z
CVE-2019-12818 
An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-14T01:24:42.000Z
CVE-2019-12819 
An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(), which will trigger a fixed_mdio_bus_init use-after-free. This will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-14T01:24:52.000Z
CVE-2019-12820 
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account, the login request is being sent in cleartext. The vulnerability exists in both the Android and iOS version of the app. An attacker could exploit this by using an MiTM attack on the local network to obtain someone's login credentials, which gives them full access to the robot vacuum cleaner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T17:18:28.000Z
CVE-2019-12821 
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code containing information about the device ID, it is possible to connect an arbitrary device and gain full access to it. The device ID has an initial "JSW" substring followed by a six digit number that depends on the specific device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T17:20:36.000Z
CVE-2019-12822 
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-14T13:06:56.000Z
CVE-2019-12823 
Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T12:06:59.000Z
CVE-2019-12825 
Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T13:54:59.000Z
CVE-2019-12826 
A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that are attached to widgets and then eval'd to dynamically determine their visibility) by crafting a malicious POST request that tricks administrators into adding the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T17:56:51.000Z