rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10753 
In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred over an insecure connection, a malicious user could have perform a Man-in-the-Middle attack during the build and alter the build artifacts that were produced. In case that any of these artifacts were compromised, any developers using these could be altered. **Note:** In order to validate that this artifact was not compromised, the maintainer would need to confirm that none of the artifacts published to the registry were not altered with. Until this happens, we can not guarantee that this artifact was not compromised even though the probability that this happened is low.
Problem types: description: Unsafe Dependancy Resolution
Affected products: vendor: n/a
product: Spotless
Published: 2019-09-05T19:45:24.000Z
CVE-2019-10754 
Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong.
Problem types: description: Insecure Randomness
Affected products: vendor: n/a
product: Apereo CAS
Published: 2019-09-23T22:09:32.000Z
CVE-2019-10755 
The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml.
Problem types: description: Insecure Randomness
Affected products: vendor: n/a
product: PAC4J For SAML Protocol
Published: 2019-09-23T22:13:04.000Z
CVE-2019-10756 
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: n/a
product: node-red-dashboard
Published: 2019-10-08T18:58:18.000Z
CVE-2019-10757 
knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: knex.js
Published: 2019-10-08T19:04:11.000Z
CVE-2019-10758 
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: mongo-express
Published: 2019-12-24T21:08:36.000Z
CVE-2019-10759 
safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Snyk
product: safer-eval
Published: 2019-10-15T14:47:19.000Z
CVE-2019-10760 
safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Snyk
product: safer-eval
Published: 2019-10-15T14:53:11.000Z
CVE-2019-10761 Sandbox Bypass
This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code running the script allowing it to spawn a child_process and execute arbitrary code.
Problem types: description: Sandbox Bypass
Affected products: vendor: n/a
product: vm2
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: LOW
exploitCodeMaturity: PROOF_OF_CONCEPT
integrityImpact: LOW
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: CHANGED
temporalScore: 7.5
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C
version: 3.1
Credits: lang: en
value: XmiliaH
Published: 2022-07-13T08:20:14.533Z
CVE-2019-10762 
columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: medoo
Published: 2019-10-30T21:14:05.000Z
CVE-2019-10763 
pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attacker with limited privileges (classes permission) can achieve a SQL injection that can lead in data leakage. The vulnerability can be exploited via 'id', 'storeId', 'pageSize' and 'tables' parameters, using a payload for trigger a time based or error based sql injection.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: pimcore/pimcore
Published: 2019-11-18T19:55:07.000Z
CVE-2019-10764 
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve which might allow practical recovery of the long-term private key.
Problem types: description: Timing Attack
Affected products: vendor: n/a
product: simplito/elliptic-php
Published: 2019-11-18T21:55:34.000Z
CVE-2019-10765 
iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: iobroker.admin
Published: 2019-11-20T15:38:43.000Z
CVE-2019-10766 
Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: Pixie Query Builder
Published: 2019-11-19T19:17:41.000Z
CVE-2019-10767 
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. **Note:** The attacker has to be logged in if the authentication is enabled (by default isn't enabled).
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: iobroker.js-controller
Published: 2019-11-21T16:09:40.000Z
CVE-2019-10768 
In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: AngularJS
Published: 2019-11-19T20:07:49.000Z
CVE-2019-10769 
safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: n/a
product: safer-eval
Published: 2019-12-06T22:49:56.000Z
CVE-2019-10770 
All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting (XSS). This affects the development mode error handler when an exception message contains untrusted data. Note the production mode error handler is not vulnerable - so for this to be utilized in production it would require users to not disable development mode.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: n/a
product: io.ratpack:ratpack-core
Published: 2020-01-28T00:21:46.000Z
CVE-2019-10771 
Characters in the GET url path are not properly escaped and can be reflected in the server response.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: n/a
product: iobroker.web
Published: 2019-11-25T22:39:39.000Z
CVE-2019-10772 
It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace by the sanitizer.
Problem types: description: Cross-site Scripting (XSS) via Sanitizer Bypass
Affected products: vendor: n/a
product: enshrined/svg-sanitize
Published: 2019-12-11T15:23:04.000Z
CVE-2019-10773 
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
Problem types: description: Arbitrary File Write
Affected products: vendor: n/a
product: Yarn
Published: 2019-12-16T19:31:34.000Z
CVE-2019-10774 
php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: php-shellcommand
Published: 2019-12-30T16:26:45.000Z
CVE-2019-10775 
ecstatic have a denial of service vulnerability. Successful exploitation could lead to crash of an application.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: ecstatic
Published: 2020-01-02T14:51:29.000Z
CVE-2019-10776 
In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: git-diff-apply
Published: 2020-01-07T18:27:13.000Z
CVE-2019-10777 
In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName".
Problem types: description: Command Injection
Affected products: vendor: n/a
product: aws-lambda
Published: 2020-01-08T16:13:33.000Z
CVE-2019-10778 
devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName` controlled by user input is used as part of the `exec` function without any sanitization.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: devcert-sanscache
Published: 2020-01-08T15:03:24.000Z
CVE-2019-10779 
All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting. An attacker website is able to load the Stroom UI into a hidden iframe. Using that iframe, the attacker site can issue commands to the Stroom UI via an XSS vulnerability to take full control of the Stroom UI on behalf of the logged-in user.
Problem types: description: Cross-site Scripting
Affected products: vendor: n/a
product: stroom:stroom-app
Published: 2020-01-28T00:17:32.000Z
CVE-2019-10780 
BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: BibTeX-ruby
Published: 2020-01-22T13:30:47.000Z
CVE-2019-10781 
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.
Problem types: description: Internal Property Tampering
Affected products: vendor: Snyk
product: schema-inspector
Published: 2020-01-22T13:40:56.000Z
CVE-2019-10782 
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
Problem types: description: XML External Entity (XXE) Injection
Affected products: vendor: n/a
product: com.puppycrawl.tools:checkstyle
Published: 2020-01-30T22:16:00.000Z
CVE-2019-10783 
All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: lsof
Published: 2020-01-29T21:07:28.000Z
CVE-2019-10784 
phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server.
Problem types: description: Cross-site Request Forgery (CSRF)
Affected products: vendor: n/a
product: phppgadmin
Published: 2020-02-04T18:58:27.000Z
CVE-2019-10785 
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.
Problem types: description: Cross-site Scripting
Affected products: vendor: n/a
product: dojox
Published: 2020-02-13T16:02:46.000Z
CVE-2019-10786 
network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync()" argument.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: network-manager
Published: 2020-02-04T20:19:19.000Z
CVE-2019-10787 
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: im-resize
Published: 2020-02-04T20:11:12.000Z
CVE-2019-10788 
im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: im-metadata
Published: 2020-02-04T20:06:21.000Z
CVE-2019-10789 
All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: curling.js
Published: 2020-02-06T15:58:53.000Z
CVE-2019-10790 
taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.
Problem types: description: Authorization Bypass Through User-Controlled Key
Affected products: vendor: n/a
product: taffy npm module
Published: 2020-02-17T00:00:00.000Z
CVE-2019-10791 
promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Snyk
product: promise-probe
Published: 2020-02-18T16:01:20.000Z
CVE-2019-10792 
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Problem types: description: Prototype Pollution
Affected products: vendor: Snyk
product: bodymen
Published: 2020-02-18T15:49:47.000Z
CVE-2019-10793 
dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Problem types: description: Prototype Pollution
Affected products: vendor: Snyk
product: dot-object
Published: 2020-02-18T15:57:37.000Z
CVE-2019-10794 
All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Problem types: description: Prototype Pollution
Affected products: vendor: Snyk
product: component-flatten
Published: 2020-02-18T15:32:54.000Z
CVE-2019-10795 
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Problem types: description: Prototype Pollution
Affected products: vendor: Snyk
product: undefsafe
Published: 2020-02-18T15:43:13.000Z
CVE-2019-10796 
rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: rpi
Published: 2020-02-24T17:40:06.000Z
CVE-2019-10797 
Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.
Problem types: description: HTTP Response Splitting
Affected products: vendor: Snyk
product: WSO2 transport-http
Published: 2020-02-19T18:14:55.000Z
CVE-2019-10798 
rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: rdf-graph-array
Published: 2020-02-24T17:37:46.000Z
CVE-2019-10799 
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: compile-sass
Published: 2020-02-24T17:42:03.000Z
CVE-2019-10800 Command Injection
This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: codecov
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: PROOF_OF_CONCEPT
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 5.9
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
version: 3.1
Credits: lang: en
value: Sam Sanoop of Snyk Security Team
Published: 2022-07-13T11:50:10.842Z
CVE-2019-10801 
enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: enpeem
Published: 2020-02-28T20:45:42.000Z
CVE-2019-10802 
giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: giting
Published: 2020-02-28T20:42:09.000Z
CVE-2019-10803 
push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: push-dir
Published: 2020-02-28T20:35:28.000Z
CVE-2019-10804 
serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: serial-number
Published: 2020-02-28T20:31:41.000Z
CVE-2019-10805 
valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks.
Problem types: description: Internal Property Tampering
Affected products: vendor: n/a
product: valib
Published: 2020-02-28T20:23:49.000Z
CVE-2019-10806 
vega-util prior to 1.13.1 allows manipulation of object prototype. The 'vega.mergeConfig' method within vega-util could be tricked into adding or modifying properties of the Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: vega-util
Published: 2020-03-09T16:00:54.000Z
CVE-2019-10807 
Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: blamer
Published: 2020-03-10T23:24:29.000Z
CVE-2019-10808 
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: utilitify
Published: 2020-03-11T22:05:07.000Z
CVE-2019-10842 
Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be leveraged to execute arbitrary code on the target system. Note that there are three underscore characters in the cookie name. This is unrelated to the __cfduid cookie that is legitimately used by Cloudflare.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T03:46:37.000Z
CVE-2019-10844 
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T04:19:49.000Z
CVE-2019-10845 
An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent, manipulated by remote servers. This pop-up window will stay on any page the user visits within the browser until a decision is made. A malicious web server can forcefully manipulate the pop-up and cause it not to appear, stopping users from securing their credentials. This vulnerability is related to id="uniqkey-password-popup" and password-popup/popup.html, but is a different vulnerability than CVE-2019-10676.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-08T17:57:14.000Z
CVE-2019-10846 
Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T19:14:06.000Z