rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-1010038 
OpenModelica OMCompiler is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: OPENMODELICAHOME parameter changeable via environment variable. The attack vector is: Changing an environment variable.
Problem types: description: Buffer Overflow
Affected products: vendor: OpenModelica
product: OMCompiler
Published: 2019-07-15T12:50:14.000Z
CVE-2019-1010039 
uLaunchELF < commit 170827a is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Loader program (loader.c) overly trusts the arguments provided via command line.
Problem types: description: Buffer Overflow
Affected products: vendor: uLaunchELF
product: uLaunchELF
Published: 2019-07-15T13:01:45.000Z
CVE-2019-1010043 
Quake3e < 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.
Problem types: description: Buffer Overflow
Affected products: vendor: Quake3e
product: Quake3e
Published: 2019-07-16T13:11:34.000Z
CVE-2019-1010044 
borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable.
Problem types: description: Buffer Overflow
Affected products: vendor: borg-reducer
product: borg-reducer
Published: 2019-07-15T15:25:11.000Z
CVE-2019-1010054 
Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.
Problem types: description: Cross ite Request Forgery (CSRF)
Affected products: vendor: Dolibarr ERP & CRM
product: Dolibarr
Published: 2019-07-18T12:52:13.000Z
CVE-2019-1010057 
nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e.
Problem types: description: Buffer Overflow
Affected products: vendor: nfdump
product: nfdump
Published: 2019-07-16T12:04:30.000Z
CVE-2019-1010060 
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by CVE-2018-3846, CVE-2018-3847, CVE-2018-3848, and CVE-2018-3849. One example is ftp_status in drvrnet.c mishandling a long string beginning with a '4' character.
Problem types: description: Buffer Overflow
Affected products: vendor: NASA
product: CFITSIO
Published: 2019-07-16T12:16:38.000Z
CVE-2019-1010062 
PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: pluck-cms
product: PluckCMS
Published: 2019-07-16T12:24:15.000Z
CVE-2019-1010065 
The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfs_dent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfs_cat_traverse() in lines: 952, 1062. The attack vector is: Victim must open a crafted HFS filesystem image.
Problem types: description: Integer Overflow
Affected products: vendor: The Sleuth Kit
product: The Sleuth Kit
Published: 2019-07-18T16:05:46.000Z
CVE-2019-1010066 
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in order to write to model specific registers, normally a function reserved for the root user. The fixed version is: v1.2.0.
Problem types: description: Incorrect Access Control
Affected products: vendor: Lawrence Livermore National Laboratory
product: msr-safe
Published: 2019-07-18T13:26:25.000Z
CVE-2019-1010069 
moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted file. The component is: front.c, function txt_add. The fixed version is: after commit commit 08aef597656d065e86075f3d53fda89765845eae.
Problem types: description: Incorrect Access Control
Affected products: vendor: moinejf
product: abcm2ps
Published: 2019-07-18T13:47:25.000Z
CVE-2019-1010083 
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.
Problem types: description: unexpected memory usage
Affected products: vendor: The Pallets Project
product: Flask
Published: 2019-07-17T13:59:09.000Z
CVE-2019-1010084 
Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to _ensure_auth() wrapper result in authentication-checking not being applied to al routes.
Problem types: description: Incorrect Access Control
Affected products: vendor: Dancer::Plugin::SimpleCRUD
product: Dancer::Plugin::SimpleCRUD
Published: 2019-07-17T13:05:11.000Z
CVE-2019-1010091 
tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation
Affected products: vendor: tinymce
product: tinymce
Published: 2019-07-17T16:35:10.000Z
CVE-2019-1010094 
domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page.
Problem types: description: Cross ite Request Forgery (CSRF)
Affected products: vendor: DomainMOD
product: DomainMOD
Published: 2019-07-18T12:31:15.000Z
CVE-2019-1010095 
DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: admin/users/add.php. The attack vector is: After the administrator logged in, open the html page.
Problem types: description: Cross ite Request Forgery (CSRF)
Affected products: vendor: DomainMOD
product: DomainMOD
Published: 2019-07-18T12:36:28.000Z
CVE-2019-1010096 
DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page.
Problem types: description: Cross ite Request Forgery (CSRF)
Affected products: vendor: DomainMOD
product: DomainMOD
Published: 2019-07-18T12:37:34.000Z
CVE-2019-1010100 
Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427.
Problem types: description: DLL search order hijacking
Affected products: vendor: Akeo Consulting
product: Rufus
Published: 2019-07-19T15:37:12.000Z
CVE-2019-1010101 
Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer, portable executable (ALL executables available). The attack vector is: CWE-29, CWE-377, CWE-379.
Problem types: description: Insecure Permissions
Affected products: vendor: Akeo Consulting
product: Rufus
Published: 2019-07-19T15:38:13.000Z
CVE-2019-1010104 
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: like_escape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request.
Problem types: description: SQL Injection
Affected products: vendor: TechyTalk
product: Quick Chat WordPress Plugin
Published: 2019-07-18T15:49:16.000Z
CVE-2019-1010112 
OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3.
Problem types: description: Cross ite Request Forgery (CSRF)
Affected products: vendor: OECMS
product: OECMS
Published: 2019-07-18T18:31:51.000Z
CVE-2019-1010113 
Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS). The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a link (A) element.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Premium Software
product: CLEditor
Published: 2019-07-19T15:22:07.000Z
CVE-2019-1010123 
MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via /assets/components/gallery/connector.php.
Problem types: cwe_id: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: MODX Revolution
product: Gallery
Published: 2019-07-23T12:36:44.000Z
CVE-2019-1010124 
WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). The impact is: XSS to RCE via editing theme files in WordPress. The component is: admin/partials/woo-feed-manage-list.php:63. The attack vector is: Administrator must be logged in.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: WebAppick
product: WooCommerce Product Feed
Published: 2019-07-23T00:00:00.000Z
CVE-2019-1010127 
VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.
Problem types: description: Use-after-free
Affected products: vendor: VCFTools
product: vcftools
Published: 2019-07-25T18:35:30.000Z
CVE-2019-1010136 
ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot. The impact is: PLC Wireless Router's are vulnerable to an unauthenticated remote reboot due. The component is: Reboot settings are available to unauthenticated users instead of only authenticaed users. The attack vector is: Remote.
Problem types: description: Incorrect Access Control - Unauthenticated Remote Reboot
Affected products: vendor: ChinaMobile
product: GPN2.4P21-C-CN
Published: 2019-07-19T15:42:04.000Z
CVE-2019-1010142 
scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work.
Problem types: description: Denial of Service
Affected products: vendor: SecDev
product: scapy
Published: 2019-07-19T15:45:09.000Z
CVE-2019-1010147 
Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. The impact is: Victim attacked and access admin functionality through their browser and control browser. The component is: MIAdminStyles.i4. The attack vector is: Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. The fixed version is: 7.4 and later.
Problem types: description: Incorrect Access Control - Privileges Escalation
Affected products: vendor: Yellowfin
product: Smart Reporting
Published: 2019-07-25T23:02:40.000Z
CVE-2019-1010148 
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution.
Problem types: description: SQL Injection
Affected products: vendor: zzcms
product: zzcms
Published: 2019-07-23T13:06:24.000Z
CVE-2019-1010149 
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licence_save.php.
Problem types: description: File Delete to Code Execution
Affected products: vendor: zzcms
product: zzcms
Published: 2019-07-23T13:07:45.000Z
CVE-2019-1010150 
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php.
Problem types: description: File Delete to Code Execution
Affected products: vendor: zzcms
product: zzcms
Published: 2019-07-23T13:09:12.000Z
CVE-2019-1010151 
zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php.
Problem types: description: File Delete to getshell
Affected products: vendor: zzcms
product: zzmcms
Published: 2019-07-19T13:56:32.000Z
CVE-2019-1010152 
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80.
Problem types: description: File Delete to Code Execution
Affected products: vendor: zzcms
product: zzcms
Published: 2019-07-23T13:10:53.000Z
CVE-2019-1010153 
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php.
Problem types: description: SQL Injection
Affected products: vendor: zzcms
product: zzcms
Published: 2019-07-23T13:12:12.000Z
CVE-2019-1010155 
D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually configure anything. Thus, there is no denial of service or information leakage
Problem types: description: Authentication Bypass
Affected products: vendor: D-Link
product: DSL-2750U
Published: 2019-07-23T13:18:36.000Z
CVE-2019-1010161 
perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in _decode_jws(). The attack vector is: network connectivity(crafting user-controlled input to bypass authentication). The fixed version is: 0.023.
Problem types: description: Incorrect Access Control
Affected products: vendor: perl-CRYPT-JWT
product: perl-CRYPT-JWT
Published: 2019-07-25T13:17:52.000Z
CVE-2019-1010162 
jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (jsiChar.c:121). The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77.
Problem types: cwe_id: CWE-476
description: CWE-476: NULL Pointer Dereference
Affected products: vendor: jsi
product: jsi
Published: 2019-07-23T13:28:53.000Z
CVE-2019-1010163 
Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Denial of Service. The impact is: Local privilege escalation (dependant upon conditions), shell code execution and denial-of-service. The component is: pdmlog.dll library. The attack vector is: The attacker must have access to local system (either directly, or remotley).
Problem types: description: Buffer Overflow - Local shell-code execution and Denial of Service
Affected products: vendor: Socusoft Co
product: Photo 2 Video Converter
Published: 2019-07-24T11:42:32.000Z
CVE-2019-1010169 
Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78.
Problem types: description: Out-of-bounds Read
Affected products: vendor: Jsish
product: Jsi
Published: 2019-07-23T13:40:08.000Z
CVE-2019-1010170 
Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78.
Problem types: description: Use After Free
Affected products: vendor: Jsish
product: Jsi
Published: 2019-07-23T13:41:54.000Z
CVE-2019-1010171 
Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84.
Problem types: description: Nullpointer dereference
Affected products: vendor: Jsish
product: Jsi
Published: 2019-07-23T13:43:28.000Z
CVE-2019-1010172 
Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString (jsiUtils.c). The attack vector is: executing crafted javascript code. The fixed version is: after commit f3a8096e0ce44bbf36c1dcb6e603adf9c8670c39.
Problem types: description: Uncontrolled Resource Consumption
Affected products: vendor: Jsish
product: Jsish
Published: 2019-07-25T13:13:15.000Z
CVE-2019-1010173 
Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Jsi_ValueArrayIndex (jsiValue.c:366). The attack vector is: executing crafted javascript code. The fixed version is: after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3.
Problem types: description: Reachable Assertion
Affected products: vendor: Jsish
product: Jsi
Published: 2019-07-23T14:00:56.000Z
CVE-2019-1010174 
CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed version is: v.2.3.4.
Problem types: description: command injection
Affected products: vendor: CImg
product: The CImg Library
Published: 2019-07-25T13:12:03.000Z
CVE-2019-1010176 
JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is: executing crafted javascript code. The fixed version is: after commit 505dace719aebb3308a3af223cfaa985159efae0.
Problem types: description: Buffer Overflow
Affected products: vendor: JerryScript
product: JerryScript
Published: 2019-07-25T13:05:09.000Z
CVE-2019-1010177 
Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d.
Problem types: description: Use After Free
Affected products: vendor: Jsish
product: Jsi
Published: 2019-07-24T11:52:20.000Z
CVE-2019-1010178 
Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is: assets/components/fred/web/elfinder/connector.php. The attack vector is: Uploading a PHP file or change data in the database. The fixed version is: https://github.com/modxcms/fred/commit/139cefac83b2ead90da23187d92739dec79d3ccd and https://github.com/modxcms/fred/commit/01f0a3d1ae7f3970639c2a0db1887beba0065246.
Problem types: cwe_id: CWE-648
description: Incorrect Access Control - CWE-648
Affected products: vendor: Fred
product: MODX Revolution
Published: 2019-07-24T13:50:45.000Z
CVE-2019-1010179 
PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a Command ('Command Injection'). The impact is: It is possible to manipulate gpg-keys or execute commands remotely. The component is: function pgp_exec() phkp.php:98. The attack vector is: HKP-Api: /pks/lookup?search.
Problem types: description: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: PHKP
product: PHKP
Published: 2019-07-24T13:44:50.000Z
CVE-2019-1010180 
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
Problem types: description: Buffer Overflow - Out of bound memory access
Affected products: vendor: GNU
product: gdb
Published: 2019-07-24T12:01:08.000Z
CVE-2019-1010182 
yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::load_from_str function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later.
Problem types: description: Uncontrolled Recursion
Affected products: vendor: yaml-rust
product: yaml-rust
Published: 2019-07-25T13:02:57.000Z
CVE-2019-1010183 
serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all deserialization functions). The attack vector is: Parsing a malicious YAML file. The fixed version is: 0.8.4 and later.
Problem types: description: Uncontrolled Recursion
Affected products: vendor: serde
product: serde_yaml
Published: 2019-07-25T12:50:56.000Z
CVE-2019-1010189 
mgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does never terminates. The component is: g3/g32pbm.c. The attack vector is: Local, the user should open a specially crafted file. The fixed version is: 1.2.1.
Problem types: description: Infinite Loop
Affected products: vendor: mgetty
product: mgetty
Published: 2019-07-24T13:16:51.000Z
CVE-2019-1010190 
mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan() in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1.
Problem types: description: out-of-bounds read
Affected products: vendor: mgetty
product: mgetty
Published: 2019-07-24T12:11:58.000Z