rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-14861 
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: Red Hat
product: samba
Published: 2019-12-10T22:19:05.000Z
CVE-2019-14862 
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: knockout
Published: 2020-01-02T14:18:58.000Z
CVE-2019-14863 
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: angular:
Published: 2020-01-02T14:20:50.000Z
CVE-2019-14864 
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data.
Problem types: cwe_id: CWE-117
description: CWE-117
cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat
product: Ansible
Published: 2020-01-02T14:23:56.000Z
CVE-2019-14865 
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
Problem types: cwe_id: CWE-267
description: CWE-267
Affected products: vendor: [UNKNOWN]
product: grub2
Published: 2019-11-29T09:50:12.000Z
CVE-2019-14866 
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: cpio
Published: 2020-01-07T16:53:51.000Z
CVE-2019-14867 
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
Problem types: cwe_id: CWE-94
description: CWE-94
cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Red Hat
product: ipa
Published: 2019-11-27T08:05:17.000Z
CVE-2019-14868 
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables could allow them to exploit this issue remotely.
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: KornShell
product: ksh
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-04-02T16:48:57.000Z
CVE-2019-14869 
A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
Problem types: cwe_id: CWE-648
description: CWE-648
Affected products: vendor: Ghostscript
product: ghostscript
Published: 2019-11-15T11:55:54.000Z
CVE-2019-14870 
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Red Hat
product: samba
Published: 2019-12-10T00:00:00.000Z
CVE-2019-14871 
The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) as used by REENT_CHECK_TM, REENT_CHECK_MISC, REENT_CHECK_MP and other newlib macros in versions prior to 3.3.0, does not check for memory allocation problems when the DEBUG flag is unset (as is the case in production firmware builds).
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-18T15:43:25.000Z
CVE-2019-14872 
The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T12:35:41.000Z
CVE-2019-14873 
In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. This will trigger a null pointer dereference bug in case of a memory allocation failure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T15:04:12.000Z
CVE-2019-14874 
In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _ x[0] will trigger a null pointer dereference bug in case of a memory allocation failure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T15:07:52.000Z
CVE-2019-14875 
In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _x[0] will trigger a null pointer dereference bug in case of a memory allocation failure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T15:08:12.000Z
CVE-2019-14876 
In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access to b1 will trigger a null pointer dereference bug in case of a memory allocation failure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T15:08:25.000Z
CVE-2019-14877 
In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate big integers, however no check is performed to verify if the allocation succeeded or not. The access to _wds and _sign will trigger a null pointer dereference bug in case of a memory allocation failure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T15:04:15.000Z
CVE-2019-14878 
In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. Accessing _x will trigger a null pointer dereference bug in case of a memory allocation failure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: newlib
Published: 2020-03-19T15:04:19.000Z
CVE-2019-14879 
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2020-01-07T16:23:01.000Z
CVE-2019-14880 
A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify users' email address changes require additional verification during sign-up to reduce the risk of account compromise.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2020-03-31T15:11:30.000Z
CVE-2019-14881 
A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2020-03-18T12:19:40.000Z
CVE-2019-14882 
A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2020-03-18T12:14:28.000Z
CVE-2019-14883 
A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7 before 3.7.3, where tokens used to fetch inline atachments in email notifications were not disabled when a user's account was no longer active. Note: to access files, a user would need to know the file path, and their token.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2020-03-18T12:16:16.000Z
CVE-2019-14884 
A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2020-03-18T12:17:36.000Z
CVE-2019-14885 
A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat
product: JBoss EAP
Published: 2020-01-23T00:00:00.000Z
CVE-2019-14886 
A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords being exposed.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: Red Hat
product: Business-central
Published: 2020-03-05T00:00:00.000Z
CVE-2019-14887 
A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable.
Problem types: cwe_id: CWE-757
description: CWE-757
Affected products: vendor: Red Hat
product: wildfly
Published: 2020-03-16T14:48:09.000Z
CVE-2019-14888 
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Red Hat
product: undertow
Published: 2020-01-23T16:25:11.000Z
CVE-2019-14889 
A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Red Hat
product: libssh
Published: 2019-12-10T00:00:00.000Z
CVE-2019-14890 
A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database at '/api/v2/config' when applying the Ansible Tower license.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: [UNKNOWN]
product: Tower
Published: 2019-11-26T06:46:17.000Z
CVE-2019-14891 
A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host.
Problem types: cwe_id: CWE-460
description: CWE-460
Affected products: vendor: n/a
product: cri-o
Published: 2019-11-25T10:31:17.000Z
CVE-2019-14892 
A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.
Problem types: cwe_id: CWE-502
description: CWE-502
cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: jackson-databind
Published: 2020-03-02T16:28:40.000Z
CVE-2019-14893 
A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.
Problem types: cwe_id: CWE-502
description: CWE-502
cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: jackson-databind
Published: 2020-03-02T20:11:32.000Z
CVE-2019-14894 
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.
Problem types: cwe_id: CWE-20
description: CWE-20
cwe_id: CWE-78
description: CWE-78
Affected products: vendor: [UNKNOWN]
product: CloudForms
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2020-06-22T17:53:52.000Z
CVE-2019-14895 
A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: Red Hat
product: kernel
Published: 2019-11-29T13:50:14.000Z
CVE-2019-14896 
A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: Red Hat
product: kernel
Published: 2019-11-27T08:05:17.000Z
CVE-2019-14897 
A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Red Hat
product: kernel
Published: 2019-11-29T14:00:18.000Z
CVE-2019-14898 
The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls.
Problem types: cwe_id: CWE-362
description: CWE-362
cwe_id: CWE-667
description: CWE-667
Affected products: vendor: Linux kernel
product: kernel
Published: 2020-05-08T13:50:58.000Z
CVE-2019-14899 
A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: Red Hat
product: VPN
Published: 2019-12-11T14:45:12.000Z
CVE-2019-14900 
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.
Problem types: description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: n/a
product: Hibernate
Published: 2020-07-06T18:35:01.000Z
CVE-2019-14901 
A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
Problem types: cwe_id: CWE-400
description: CWE-400
cwe_id: CWE-122
description: CWE-122
Affected products: vendor: Red Hat
product: kernel
Published: 2019-11-29T14:05:14.000Z
CVE-2019-14902 
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: [UNKNOWN]
product: samba
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
Published: 2020-01-21T00:00:00.000Z
CVE-2019-14904 
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.
Problem types: cwe_id: CWE-20
description: CWE-20 leads to CWE-78
Affected products: vendor: n/a
product: Ansible
Published: 2020-08-25T23:21:47.000Z
CVE-2019-14905 
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.
Problem types: cwe_id: CWE-20
description: CWE-20
cwe_id: CWE-73
description: CWE-73
Affected products: vendor: Red Hat
product: Ansible
Published: 2020-03-31T16:20:41.000Z
CVE-2019-14906 
A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to make the application crash or execute code.
Problem types: cwe_id: CWE-787
description: CWE-787
cwe_id: CWE-125
description: CWE-125
Affected products: vendor: Red Hat
product: SDL
Published: 2020-01-07T20:05:18.000Z