rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11487 
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T22:00:44.000Z
CVE-2019-11488 
Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attackers to READ/WRITE Customer or Administrator data via a persistent HTTP GET Request Hash Link Replay, as demonstrated by a login-link from the browser history.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T20:08:01.000Z
CVE-2019-11489 
Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-Priv Users to Elevate Privileges to Full Admin Rights via a crafted HTTP PUT Request, as demonstrated by modified JSON data to a /v2/rest/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T20:02:41.000Z
CVE-2019-11490 
An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T02:40:38.000Z
CVE-2019-11492 
ProjectSend before r1070 writes user passwords to the server logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T20:02:17.000Z
CVE-2019-11493 
VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx (used by pdfeditor.exe and pdfcmd.exe) is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T13:42:21.000Z
CVE-2019-11494 
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T17:04:02.000Z
CVE-2019-11495 
In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which results in a small search space for potential random seeds that could then be used to brute force the cookie and execute code against a remote system. This has been fixed in version 6.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T17:16:29.000Z
CVE-2019-11496 
In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication. As part of 5.0, the behavior of all buckets including "default" were changed to only allow access by authenticated users with sufficient authorization. However, users were allowed unauthenticated and unauthorized access to the "default" bucket if the properties of this bucket were edited. This has been fixed in versions 5.1.0 and 5.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T17:26:15.000Z
CVE-2019-11497 
In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This has been fixed in version 5.5.0. XDCR now checks the validity of the certificate thoroughly and prevents a remote cluster reference from being created with an invalid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T17:24:04.000Z
CVE-2019-11498 
WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T04:03:05.000Z
CVE-2019-11499 
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T17:00:15.000Z
CVE-2019-11500 
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T13:51:46.000Z
CVE-2019-11502 
snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:02:32.000Z
CVE-2019-11503 
snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:02:44.000Z
CVE-2019-11504 
Zotonic before version 0.47 has mod_admin XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:17:35.000Z
CVE-2019-11505 
In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to MagickBitStreamMSBWrite in magick/bit_stream.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:31:00.000Z
CVE-2019-11506 
In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to ExportRedQuantumType in magick/export.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:31:13.000Z
CVE-2019-11507 
In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T16:52:15.000Z
CVE-2019-11508 
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T16:49:51.000Z
CVE-2019-11509 
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2 before 5.2R12.1, 5.3 before 5.3R15.1, 5.4 before 5.4R7.1, and 9.0 before 9.0R3.2, an authenticated attacker (via the admin web interface) can exploit Incorrect Access Control to execute arbitrary code on the appliance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:34:46.000Z
CVE-2019-11510 
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T16:18:28.000Z
CVE-2019-11511 
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T02:38:33.000Z
CVE-2019-11512 
Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T20:33:49.000Z
CVE-2019-11513 
The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T02:52:28.000Z
CVE-2019-11514 
User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T02:59:15.000Z
CVE-2019-11515 
core/classes/db_backup.php in Gila CMS 1.10.1 allows admin/db_backup?download= absolute path traversal to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T03:05:37.000Z
CVE-2019-11516 
An issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom) Wireless IoT codebase. Extended Inquiry Responses (EIRs) are improperly handled, which causes a heap-based buffer overflow during device inquiry. This overflow can be used to overwrite existing functions with arbitrary code. The Reserved for Future Use (RFU) bits are not discarded by eir_handleRx(), and are included in an EIR's length. Therefore, one can exceed the expected 240 bytes, which leads to a heap-based buffer overflow in eir_getReceivedEIR() called by bthci_event_SendInquiryResultEvent(). In order to exploit this bug, an attacker must repeatedly connect to the victim's device in a short amount of time from different source addresses. This will cause the victim's Bluetooth stack to resolve the device names and therefore allocate buffers with attacker-controlled data. Due to the heap corruption, the name will be eventually written to an attacker-controlled location, leading to a write-what-where condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-05T16:01:49.000Z
CVE-2019-11517 
WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An attacker could add/delete any vhosts without the consent of the owner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T17:47:49.000Z
CVE-2019-11518 
An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T12:12:36.000Z
CVE-2019-11519 
Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations -> Languages -> Edit Language -> Import Resources -> Upload XML file" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T12:44:48.000Z
CVE-2019-11521 
OX App Suite 7.10.1 allows Content Spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T12:26:10.000Z
CVE-2019-11522 
OX App Suite 7.10.0 to 7.10.2 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T12:31:28.000Z
CVE-2019-11523 
Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list (which includes RFID codes and passcodes in cleartext), or update/create users. The same attack can be executed on a local network and over the internet (if the device is exposed on a public IP address).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T19:39:05.000Z
CVE-2019-11526 
An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T18:48:21.000Z
CVE-2019-11527 
An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T19:37:44.000Z
CVE-2019-11528 
An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T19:30:51.000Z
CVE-2019-11533 
Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T20:06:49.000Z
CVE-2019-11535 
Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T19:35:09.000Z
CVE-2019-11536 
Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, and 3.6.1, when WebHMI is not installed, allows an attacker to inject client-side commands or scripts to be executed on the device with privileged access, aka CYB/2019/19561. The attack requires network connectivity to the device and exploits the webserver interface, typically through a browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T17:46:57.000Z
CVE-2019-11537 
In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T18:26:59.000Z
CVE-2019-11538 
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authenticated attacker to access the contents of arbitrary files on the affected device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T01:39:22.000Z
CVE-2019-11539 
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T01:39:36.000Z
CVE-2019-11540 
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T01:39:49.000Z
CVE-2019-11541 
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Existing NC (Pulse) Session option may see authentication leaks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T01:40:18.000Z
CVE-2019-11542 
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, an authenticated attacker (via the admin web interface) can send a specially crafted message resulting in a stack buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T01:40:33.000Z
CVE-2019-11543 
XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T01:40:43.000Z
CVE-2019-11544 
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository restrictions will receive emails about restricted events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T18:28:54.000Z
CVE-2019-11545 
An issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11.10.2. It allows Information Disclosure. When an issue is moved to a private project, the private project namespace is leaked to unauthorized users with access to the original issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T18:32:02.000Z
CVE-2019-11546 
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has a Race Condition which could allow users to approve a merge request multiple times and potentially reach the approval count required to merge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T18:34:19.000Z
CVE-2019-11547 
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has Improper Encoding or Escaping of Output. The branch name on new merge request notification emails isn't escaped, which could potentially lead to XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T18:49:01.000Z
CVE-2019-11548 
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T18:52:14.000Z
CVE-2019-11549 
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T18:54:19.000Z
CVE-2019-11550 
Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T16:09:32.000Z
CVE-2019-11551 
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T17:47:22.000Z
CVE-2019-11552 
Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injection. A proxy auto-configuration file, crafted by a lesser privileged user, may be used to execute arbitrary code at a higher privilege as the service user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T13:51:23.000Z
CVE-2019-11553 
In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web restore permission. When requesting the token to do a web restore, an administrator with permission to manage a user could request the token of that user. If the administrator was not authorized to perform web restores but the user was authorized to perform web restores, this would allow the administrator to impersonate the user with greater permissions. In order to exploit this vulnerability, the user would have to be an administrator with access to manage an organization with a user with greater permissions than themselves.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T16:44:41.000Z
CVE-2019-11554 
The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-06T15:07:02.000Z
CVE-2019-11555 
The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T21:16:24.000Z
CVE-2019-11556 
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T05:56:42.000Z
CVE-2019-11557 
The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T21:42:23.000Z
CVE-2019-11559 
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:44:10.000Z