rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-12827 
Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-12T19:19:52.000Z
CVE-2019-12828 
An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via the platformpluginpath argument supplied with a Windows network share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-14T19:53:37.000Z
CVE-2019-12829 
radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, as demonstrated by newstr buffer overflows during replace operations. This affects libr/asm/asm.c and libr/parse/parse.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T16:32:12.000Z
CVE-2019-12830 
In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [video] BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T17:04:50.000Z
CVE-2019-12831 
In MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that leads to truncation of strings that are too long for a database column) to create a PHP shell in the cache directory of a targeted forum via a crafted XML import, as demonstrated by truncation of aaaaaaaaaaaaaaaaaaaaaaaaaa.php.css to aaaaaaaaaaaaaaaaaaaaaaaaaa.php with a 30-character limit, aka theme import stylesheet name RCE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T17:05:08.000Z
CVE-2019-12834 
In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-16T17:55:18.000Z
CVE-2019-12835 
formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters that require escaping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T18:27:54.000Z
CVE-2019-12836 
The Bobronix JEditor editor before 3.0.6 for Jira allows an attacker to add a URL/Link (to an existing issue) that can cause forgery of a request to an out-of-origin domain. This in turn may allow for a forged request that can be invoked in the context of an authenticated user, leading to stealing of session tokens and account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:53:58.000Z
CVE-2019-12837 
The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T16:53:35.000Z
CVE-2019-12838 
SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T12:50:32.000Z
CVE-2019-12839 
In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath parameter) that allows authenticated attackers to achieve arbitrary command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T19:27:41.000Z
CVE-2019-12840 
In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T19:52:10.000Z
CVE-2019-12841 
Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity 2018.2.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:44:53.000Z
CVE-2019-12842 
A reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:45:58.000Z
CVE-2019-12843 
A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:43:49.000Z
CVE-2019-12844 
A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:41:04.000Z
CVE-2019-12845 
The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:42:34.000Z
CVE-2019-12846 
A user without the required permissions could gain access to some JetBrains TeamCity settings. The issue was fixed in TeamCity 2018.2.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:46:58.000Z
CVE-2019-12847 
In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:30:56.000Z
CVE-2019-12850 
A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:21:51.000Z
CVE-2019-12851 
A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:18:50.000Z
CVE-2019-12852 
An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:48:11.000Z
CVE-2019-12854 
Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T16:15:23.000Z
CVE-2019-12855 
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-16T11:11:43.000Z
CVE-2019-12863 
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T16:52:09.000Z
CVE-2019-12864 
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:30:46.000Z
CVE-2019-12865 
In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T22:49:04.000Z
CVE-2019-12866 
An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:28:18.000Z
CVE-2019-12867 
Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:24:45.000Z
CVE-2019-12868 
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T00:00:00.000Z
CVE-2019-12869 
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-Of-Bounds Read, Information Disclosure, and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T15:25:07.000Z
CVE-2019-12870 
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T15:20:09.000Z
CVE-2019-12871 
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to a Use-After-Free and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T14:57:47.000Z
CVE-2019-12872 
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T13:20:44.000Z
CVE-2019-12874 
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T17:53:09.000Z
CVE-2019-12875 
Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T18:09:20.000Z
CVE-2019-12876 
Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T19:46:17.000Z
CVE-2019-12880 
BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing * within web_accessible_resources. An attacker can take advantage of this vulnerability and cause significant harm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T18:39:30.000Z
CVE-2019-12881 
i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T22:07:15.000Z
CVE-2019-12887 
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-27T13:10:43.000Z
CVE-2019-12889 
An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only the Windows logon screen can escalate their privileges to NT AUTHORITY\System. An attacker would need local access to the machine for a successful exploit. The attacker must disconnect the computer from the local network / WAN and connect it to an internet facing access point / network. At that point, the attacker can execute the password-reset functionality, which will expose a web browser. Browsing to a site that calls local Windows system functions (e.g., file upload) will expose the local file system. From there an attacker can launch a privileged command shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T12:00:13.000Z
CVE-2019-12890 
RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insert_one call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T18:00:52.000Z
CVE-2019-12893 
Alternate Pic View 2.600 has a User Mode Write AV starting at PicViewer!PerfgrapFinalize+0x00000000000a8868.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:36:36.000Z
CVE-2019-12894 
Alternate Pic View 2.600 has a Read Access Violation at the Instruction Pointer after a call from PicViewer!PerfgrapFinalize+0x00000000000a9a1b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:36:47.000Z
CVE-2019-12895 
In Alternate Pic View 2.600, the Exception Handler Chain is Corrupted starting at PicViewer!PerfgrapFinalize+0x00000000000b916d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:36:56.000Z
CVE-2019-12896 
Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:37:08.000Z
CVE-2019-12897 
Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:37:20.000Z
CVE-2019-12898 
Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:37:30.000Z
CVE-2019-12899 
Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T21:37:39.000Z
CVE-2019-12900 
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T22:07:57.000Z
CVE-2019-12901 
Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete files/folders from, an unprivileged directory, leading to Privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T23:05:47.000Z
CVE-2019-12902 
Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted user's data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T23:05:59.000Z
CVE-2019-12903 
Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database column/table name as pert of the error message, exposing sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T23:06:11.000Z
CVE-2019-12904 
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T23:34:13.000Z
CVE-2019-12905 
FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed in FileRun 2019.06.01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-20T15:24:58.000Z
CVE-2019-12911 
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T20:06:15.000Z
CVE-2019-12912 
Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T20:16:32.000Z
CVE-2019-12913 
Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T20:19:10.000Z
CVE-2019-12914 
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T20:09:03.000Z
CVE-2019-12917 
A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/software_library.php component via the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:44:02.000Z
CVE-2019-12918 
Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is software_library.php and affected parameters are order[0][column] and order[0][dir].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T14:45:20.000Z
CVE-2019-12919 
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved on the external memory card attached to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-20T18:57:13.000Z
CVE-2019-12920 
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-20T18:57:32.000Z
CVE-2019-12921 
In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:39:30.000Z
CVE-2019-12922 
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:27:04.000Z
CVE-2019-12923 
In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-08T20:58:30.000Z
CVE-2019-12924 
MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an attacker to use a vulnerability in the configuration of the XML processor to read any file on the host system. Because all credentials were stored in a cleartext file, it was possible to steal all users' credentials (including the highest privileged users).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-08T21:00:00.000Z
CVE-2019-12925 
MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to reading other users' credentials including those of SYSADMIN accounts, reading other users' emails, or adding emails or files to other users' accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-08T21:01:24.000Z
CVE-2019-12926 
MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas within the application for which the accounts used were supposed to have insufficient access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-08T21:03:06.000Z
CVE-2019-12927 
MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-08T21:04:35.000Z