rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11073 
A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization when passing arguments to the HttpTransactionSensor.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Transaction Sensor and set specific settings when the sensor is executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T18:41:58.000Z
CVE-2019-11074 
A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM privileges (although not controlling the contents of such files) due to insufficient sanitisation when passing arguments to the phantomjs.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Full Web Page Sensor and set specific settings when executing the sensor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:06:41.000Z
CVE-2019-11076 
Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T17:32:05.000Z
CVE-2019-11077 
FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T01:10:56.000Z
CVE-2019-11078 
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T01:11:10.000Z
CVE-2019-11080 
Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863. An authenticated user with necessary permissions is able to remotely execute OS commands by sending a crafted serialized object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T13:33:43.000Z
CVE-2019-11081 
A default username and password in Dentsply Sirona Sidexis 4.3.1 and earlier allows an attacker to gain administrative access to the application server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T14:40:23.000Z
CVE-2019-11082 
core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T15:39:46.000Z
CVE-2019-11084 
GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T18:07:34.000Z
CVE-2019-11085 
Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) i915 Graphics for Linux
Published: 2019-05-17T15:41:37.000Z
CVE-2019-11086 
Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:10:11.000Z
CVE-2019-11087 
Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME, Intel(R) TXE
Published: 2019-12-18T21:09:04.000Z
CVE-2019-11088 
Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:08:03.000Z
CVE-2019-11089 
Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
Published: 2019-11-14T19:05:53.000Z
CVE-2019-11090 
Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, SPS_SoC-A_04.00.04.191.0, SPS_E3_04.01.04.086.0, SPS_E3_04.08.04.047.0 may allow an unauthenticated user to potentially enable information disclosure via network access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Intel(R) PTT
Published: 2019-12-18T21:08:39.000Z
CVE-2019-11091 
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Central Processing Units (CPUs)
Published: 2019-05-30T15:28:28.000Z
CVE-2019-11092 
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Open Cloud Integrity Technology and OpenAttestation
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11093 
Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) SCS Discovery Utility
Published: 2019-05-17T15:41:37.000Z
CVE-2019-11094 
Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel (R) NUC
Published: 2019-05-17T15:41:37.000Z
CVE-2019-11095 
Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Intel(R) Driver & Support Assistant
Published: 2019-05-17T15:41:37.000Z
CVE-2019-11096 
Insufficient memory protection for Intel(R) Ethernet I218 Adapter driver for Windows* 10 before version 24.1 may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) Ethernet I218 Adapter driver for Windows* 10
Published: 2019-12-16T19:13:23.000Z
CVE-2019-11097 
Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Management Engine
Published: 2019-12-18T21:08:22.000Z
CVE-2019-11098 
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Tianocore
Published: 2021-07-14T13:28:44.000Z
CVE-2019-11100 
Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:09:20.000Z
CVE-2019-11101 
Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME, Intel(R) TXE
Published: 2019-12-18T21:09:13.000Z
CVE-2019-11102 
Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) DAL software for Intel(R) CSME
Published: 2019-12-18T21:09:26.000Z
CVE-2019-11103 
Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME
Published: 2019-12-18T21:08:27.000Z
CVE-2019-11104 
Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) CSME
Published: 2019-12-18T21:08:17.000Z
CVE-2019-11105 
Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access.
Problem types: description: Escalation of Privilege, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME
Published: 2019-12-18T21:07:58.000Z
CVE-2019-11106 
Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME
Published: 2019-12-18T21:09:36.000Z
CVE-2019-11107 
Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:09:47.000Z
CVE-2019-11108 
Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME
Published: 2019-12-18T21:10:20.000Z
CVE-2019-11109 
Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) SPS
Published: 2019-12-18T21:09:56.000Z
CVE-2019-11110 
Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) CSME, Intel(R) TXE
Published: 2019-12-18T21:10:03.000Z
CVE-2019-11111 
Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
Published: 2019-11-14T19:04:34.000Z
CVE-2019-11112 
Memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver before 26.20.100.6813 (DCH) or 26.20.100.6812 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
Published: 2019-11-14T18:41:06.000Z
CVE-2019-11113 
Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
Published: 2019-11-14T19:06:14.000Z
CVE-2019-11114 
Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Intel(R) Driver & Support Assistant
Published: 2019-05-17T15:41:37.000Z
CVE-2019-11117 
Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Omni-Path Fabric Manager GUI
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11119 
Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) RAID Web Console 3 for Windows*
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11120 
Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel®
product: Active System Console Advisory
Published: 2019-10-11T17:56:30.000Z
CVE-2019-11121 
Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Media SDK for Windows
Published: 2020-11-12T17:53:54.000Z
CVE-2019-11123 
Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11124 
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11125 
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11126 
Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11127 
Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11128 
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11129 
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: escalation of privilege, denial of service and/or information disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Firmware
Published: 2019-06-13T15:36:25.000Z
CVE-2019-11131 
Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:08:08.000Z
CVE-2019-11132 
Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) AMT
Published: 2019-12-18T21:07:47.000Z
CVE-2019-11133 
Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Processor Diagnostic Tool Advisory
Published: 2019-07-11T20:23:14.000Z
CVE-2019-11135 
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – TSX Asynchronous Abort
Published: 2019-11-14T18:19:25.000Z
CVE-2019-11136 
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – UEFI
Published: 2019-11-14T16:56:37.000Z
CVE-2019-11137 
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: 2019.2 IPU – UEFI
Published: 2019-11-14T16:56:56.000Z
CVE-2019-11139 
Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Xeon(R) Scalable Processors Voltage Setting Modulation
Published: 2019-11-14T18:18:56.000Z
CVE-2019-11140 
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure
Affected products: vendor: n/a
product: Intel(R) NUC Advisory
Published: 2019-08-19T16:13:42.000Z
CVE-2019-11143 
Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Authenticate Advisory
Published: 2019-08-19T16:13:24.000Z
CVE-2019-11145 
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Driver & Support Assistant Advisory
Published: 2019-08-19T16:12:49.000Z