rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-13106 
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T19:05:47.000Z
CVE-2019-13107 
Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T21:07:03.000Z
CVE-2019-13108 
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T22:19:48.000Z
CVE-2019-13109 
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T22:20:02.000Z
CVE-2019-13110 
A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T00:00:00.000Z
CVE-2019-13111 
A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T22:20:54.000Z
CVE-2019-13112 
A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T00:00:00.000Z
CVE-2019-13113 
Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T22:21:47.000Z
CVE-2019-13114 
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-30T00:00:00.000Z
CVE-2019-13115 
In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-16T00:00:00.000Z
CVE-2019-13116 
The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T19:06:39.000Z
CVE-2019-13117 
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T01:27:02.000Z
CVE-2019-13118 
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T01:27:39.000Z
CVE-2019-13120 
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which interacts with an associated vulnerable MQTT message in the application, specific circumstances could trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-07T21:57:48.000Z
CVE-2019-13121 
An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local network resources. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T17:11:26.000Z
CVE-2019-13122 
A Cross Site Scripting (XSS) vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msgid in templatetags/patch.py. Patchwork versions v2.1.4 and v2.0.4 will contain the fix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:38:39.000Z
CVE-2019-13123 
Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T19:18:42.000Z
CVE-2019-13124 
Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T19:29:35.000Z
CVE-2019-13125 
HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T13:23:24.000Z
CVE-2019-13126 
An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-29T16:07:16.000Z
CVE-2019-13127 
An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/grapheditor/www/js/Dialogs.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T14:33:36.000Z
CVE-2019-13128 
An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T14:47:52.000Z
CVE-2019-13129 
On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T14:48:00.000Z
CVE-2019-13131 
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T15:31:11.000Z
CVE-2019-13132 
In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T00:00:00.000Z
CVE-2019-13133 
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:27:14.000Z
CVE-2019-13134 
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:27:24.000Z
CVE-2019-13135 
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:27:35.000Z
CVE-2019-13136 
ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:27:46.000Z
CVE-2019-13137 
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:27:56.000Z
CVE-2019-13139 
In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build" command would be able to gain command execution. An issue exists in the way "docker build" processes remote git URLs, and results in command injection into the underlying "git clone" command, leading to code execution in the context of the user executing the "docker build" command. This occurs because git ref can be misinterpreted as a flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:47:43.000Z
CVE-2019-13140 
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:24:48.000Z
CVE-2019-13142 
The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T17:42:51.000Z
CVE-2019-13143 
An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the lock. The user ID, name, and MAC address are trivially obtained from APIs found within the Android or iOS application. With only the MAC address of the lock, any attacker can transfer ownership of the lock from the current user, over to the attacker's account. Thus rendering the lock completely inaccessible to the current user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T17:38:23.000Z
CVE-2019-13144 
myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T12:02:03.000Z
CVE-2019-13146 
The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T17:58:40.000Z
CVE-2019-13147 
In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T00:00:00.000Z
CVE-2019-13148 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the UDP Ports To Open in Add Gaming Rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:16:16.000Z
CVE-2019-13149 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the key passwd in Routing RIP Settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:16:23.000Z
CVE-2019-13150 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication). The command injection exists in the key ip_addr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:16:37.000Z
CVE-2019-13151 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the action set_sta_enrollee_pin_5g and the key wps_sta_enrollee_pin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:16:48.000Z
CVE-2019-13152 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Gaming Rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:16:58.000Z
CVE-2019-13153 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the Private Port in Add Virtual Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:17:06.000Z
CVE-2019-13154 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the TCP Ports To Open in Add Gaming Rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:17:14.000Z
CVE-2019-13155 
An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Virtual Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T12:17:36.000Z
CVE-2019-13156 
NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: NAVER Corporation
product: NDrive
Credits: lang: en
value: MyeongHwan Seo(f10w3r) rootsmh0311@gmail.com
Published: 2019-09-03T14:42:09.000Z
CVE-2019-13157 
nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: NAVER Corporation
product: Naver Vaccine
Credits: lang: en
value: JAEWOOK SHIN(powerprove, null2root, proveofhack@gmail.com) and JINWOO PARK (P4rkJW, CAT-Security)
Published: 2019-11-22T02:06:08.000Z
CVE-2019-13161 
An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-12T19:24:37.000Z
CVE-2019-13163 
The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V11 and other versions, Interstage Job Workload Server V8, Interstage List Works V10 and other versions, Interstage Studio V12 and other versions, Interstage Web Server Express V11, Linkexpress V5, Safeauthor V3, ServerView Resource Orchestrator V3, Systemwalker Cloud Business Service Management V1, Systemwalker Desktop Keeper V15, Systemwalker Desktop Patrol V15, Systemwalker IT Change Manager V14, Systemwalker Operation Manager V16 and other versions, Systemwalker Runbook Automation V15 and other versions, Systemwalker Security Control V1, and Systemwalker Software Configuration Manager V15.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-07T22:45:40.000Z
CVE-2019-13164 
qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T13:56:52.000Z
CVE-2019-13165 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:35:08.000Z
CVE-2019-13166 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:33:54.000Z
CVE-2019-13167 
Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:24:17.000Z
CVE-2019-13168 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:23:08.000Z
CVE-2019-13169 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:20:01.000Z
CVE-2019-13170 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vulnerability can lead to the takeover of a local account on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:18:33.000Z
CVE-2019-13171 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:17:14.000Z
CVE-2019-13172 
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T18:14:27.000Z
CVE-2019-13173 
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T19:26:05.000Z
CVE-2019-13175 
Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T19:56:16.000Z
CVE-2019-13176 
An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2. The Content.MainForm.wgx component is affected by XXE via a crafted XML document in POST data. There is potential to use this for SSRF (reading local files, outbound HTTP, and outbound DNS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T13:26:33.000Z
CVE-2019-13177 
verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T21:17:53.000Z