rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11998 
HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online) and v3.20.206 (available online). Apply v3.20.206 (4 December 2019) or a newer version to resolve this issue. Please visit HPE Support Center https://support.hpe.com/hpesc/public/home to obtain the updated firmware for your product.
Problem types: description: local multiple vulnerabilities
Affected products: vendor: HPE
product: HPE Superdome Flex Server
Published: 2020-01-16T18:56:51.000Z
CVE-2019-11999 
Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. * For OCMP version 4.4.X - please upgrade to OCMP 4.4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software updates.
Problem types: description: remote arbitrary file download; remote cross-site scripting (xss)
Affected products: vendor: n/a
product: HPE OC Media Platform (OCMP)
Published: 2020-04-16T18:48:44.000Z
CVE-2019-12000 
HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide.
Problem types: description: remote access restriction bypass; remote user validation failure
Affected products: vendor: HPE
product: HPE MSE Msg Gw application E-LTU
Published: 2020-07-17T21:12:55.000Z
CVE-2019-12001 
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.
Problem types: description: Remote: Session Reuse
Affected products: vendor: n/a
product: HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage
Published: 2020-04-17T13:53:54.000Z
CVE-2019-12002 
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.
Problem types: description: Remote: Session Reuse
Affected products: vendor: n/a
product: HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage
Published: 2020-04-17T13:58:32.000Z
CVE-2019-12017 
A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handles login and ticket issuance. An attacker can use the 'class' property of the JSON request sent to the CLDB to influence the JSON library's decision on which Java class this JSON request is deserialized to. By doing so, the attacker can force the MapR CLDB to construct a URLClassLoader which loads a malicious Java class from a remote path and instantiate this object in the MapR CLDB, thus executing arbitrary code on the machine running the MapR CLDB and take over the cluster. By switching to the newer Jackson library and ensuring that all incoming JSON requests are only deserialized to the same class that it was serialized from, the vulnerability is fixed. This vulnerability affects the entire MapR core platform.
Problem types: description: Remote code execution vulnerability in MapR-MFS/CLDB
Affected products: vendor: n/a
product: MapR-MFS/CLDB
Published: 2019-10-24T14:28:12.000Z
CVE-2019-12041 
lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T12:07:49.000Z
CVE-2019-12042 
Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which leads to privilege escalation when the CmdLineExecute event is queued. This affects Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, and Panda Internet Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T13:30:44.000Z
CVE-2019-12043 
In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T13:05:08.000Z
CVE-2019-12044 
A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23 and Citrix Application Delivery Controller 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T15:29:28.000Z
CVE-2019-12046 
LemonLDAP::NG -2.0.3 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T15:07:06.000Z
CVE-2019-12047 
Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T14:21:33.000Z
CVE-2019-12067 
The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T14:18:09.000Z
CVE-2019-12068 
In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T19:59:44.000Z
CVE-2019-12083 
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T19:06:01.000Z
CVE-2019-12086 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T16:57:05.000Z
CVE-2019-12087 
Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected intent in the ContainerAgent application. For example, the victim becomes stuck in a launcher with their Secure Folder locked. NOTE: the researcher mentions "the Samsung Security Team considered this issue as no/little security impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T02:52:52.000Z
CVE-2019-12091 Netskope client command injections vulnerability
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from command injection vulnerability. Local users can use this vulnerability to execute code with NT\SYSTEM privilege.
Problem types: cwe_id: CWE-78
description: CWE-78 Command injection
Affected products: vendor: Netskope
product: Netskope client
Credits: lang: en
value: Julien Lenoit, Benoit Camredon, Mouad Abouhali from Airbus Security Lab.
Published: 2019-09-26T15:18:00.000Z
CVE-2019-12094 
Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f&user_name= or admin/user.php?form=remove_f&user_name= or admin/config/diff.php?app= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T16:49:03.000Z
CVE-2019-12095 
Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T17:09:59.000Z
CVE-2019-12097 
Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T20:26:01.000Z
CVE-2019-12098 
In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. This issue is in krb5_init_creds_step in lib/krb5/init_creds_pw.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:41:11.000Z
CVE-2019-12099 
In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T20:55:38.000Z
CVE-2019-12101 
coap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: (null)" and consequently allows remote attackers to cause a denial of service (segmentation fault).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T04:04:11.000Z
CVE-2019-12102 
Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselectors/insertimageormedia/tabs_media.aspx URI. NOTE: The vendor disputes the report because the researcher did not configure the media library permissions correctly. The vendor states that by default all users can read/modify/upload files, and it’s up to the administrator to decide who should have access to the media library and set the permissions accordingly. See the vendor documentation in the references for more information
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T14:54:24.000Z
CVE-2019-12103 
The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T20:29:31.000Z
CVE-2019-12104 
The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injection vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T20:32:43.000Z
CVE-2019-12105 
In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning message. The maintainer indicated the ability to run an open server will not be removed but an additional warning was added to the documentation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T16:18:27.000Z
CVE-2019-12106 
The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:22:44.000Z
CVE-2019-12107 
The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:22:54.000Z
CVE-2019-12108 
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:23:03.000Z
CVE-2019-12109 
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:23:11.000Z
CVE-2019-12110 
An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:23:19.000Z
CVE-2019-12111 
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T22:23:27.000Z
CVE-2019-12112 
An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:01:37.000Z
CVE-2019-12113 
An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsGv with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:03:18.000Z
CVE-2019-12114 
An issue was discovered in ONAP HOLMES before Dublin. By accessing port 9202 of dep-holmes-engine-mgmt pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:04:39.000Z
CVE-2019-12115 
An issue was discovered in ONAP SDC through Dublin. By accessing port 4000 of demo-sdc-sdc-be pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:05:31.000Z
CVE-2019-12116 
An issue was discovered in ONAP SDC through Dublin. By accessing port 6000 of demo-sdc-sdc-fe pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:06:49.000Z
CVE-2019-12117 
An issue was discovered in ONAP SDC through Dublin. By accessing port 4001 of demo-sdc-sdc-onboarding-be pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:07:24.000Z
CVE-2019-12118 
An issue was discovered in ONAP SDC through Dublin. By accessing port 7001 of demo-sdc-sdc-wfd-be pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:08:07.000Z
CVE-2019-12119 
An issue was discovered in ONAP SDC through Dublin. By accessing port 7000 of demo-sdc-sdc-wfd-fe pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:08:50.000Z
CVE-2019-12120 
An issue was discovered in ONAP VNFSDK through Dublin. By accessing port 8000 of demo-vnfsdk-vnfsdk, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:16:57.000Z
CVE-2019-12121 
An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:18:01.000Z
CVE-2019-12122 
An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:18:53.000Z
CVE-2019-12123 
An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:19:40.000Z
CVE-2019-12124 
An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:20:54.000Z
CVE-2019-12125 
In ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:30:30.000Z
CVE-2019-12126 
In ONAP DCAE through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:30:36.000Z
CVE-2019-12127 
In ONAP OOM through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:30:41.000Z
CVE-2019-12128 
In ONAP SO through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:42:47.000Z
CVE-2019-12129 
In ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:43:21.000Z
CVE-2019-12130 
In ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:44:17.000Z
CVE-2019-12131 
An issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID parameter in an HTTP header, an attacker may impersonate an arbitrary existing user without any authentication. All APPC and SDC setups are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:26:01.000Z
CVE-2019-12132 
An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:25:06.000Z