rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11326 
An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A guest is allowed to login. Once logged in as a guest, an attacker can browse a URL to read the password of the administrative user. The same procedure allows a regular user to gain administrative privileges. The guest login is possible in the default configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T18:19:08.000Z
CVE-2019-11327 
An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product has a local file inclusion vulnerability. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's files system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T18:24:50.000Z
CVE-2019-11328 
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/<user>/<instance>`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T20:24:29.000Z
CVE-2019-11331 
Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T21:58:36.000Z
CVE-2019-11332 
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T22:17:14.000Z
CVE-2019-11334 
An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources (that are not otherwise accessible without proper authentication) via capture-replay. Physically proximate attackers can use this information to unlock unauthorized Tzumi Electronics Klic Smart Padlock Model 5686 Firmware 6.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T17:43:26.000Z
CVE-2019-11336 
Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T13:57:24.000Z
CVE-2019-11338 
libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T23:52:00.000Z
CVE-2019-11339 
The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T23:52:15.000Z
CVE-2019-11340 
util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parseaddr call on user@bad.example.net@good.example.com returns the user@bad.example.net substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T13:35:36.000Z
CVE-2019-11341 
On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code, but is protected by an OTP password. However, this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:00:17.000Z
CVE-2019-11343 
Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T20:53:27.000Z
CVE-2019-11344 
data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file, because only certain PHP-related filename extensions are blocked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T18:20:34.000Z
CVE-2019-11345 
Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:03:02.000Z
CVE-2019-11350 
CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via the proxy configuration page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T20:07:24.000Z
CVE-2019-11351 
TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T20:53:20.000Z
CVE-2019-11353 
The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters. This vulnerability is fixed in a later firmware version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-09T13:32:46.000Z
CVE-2019-11354 
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T21:29:05.000Z
CVE-2019-11355 
An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator's page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T20:56:02.000Z
CVE-2019-11356 
The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:44:30.000Z
CVE-2019-11358 
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T00:00:00.000Z
CVE-2019-11359 
Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T23:59:25.000Z
CVE-2019-11360 
A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-12T13:54:45.000Z
CVE-2019-11361 
Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full application takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T16:48:23.000Z
CVE-2019-11362 
app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T12:33:47.000Z
CVE-2019-11363 
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T20:01:30.000Z
CVE-2019-11364 
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T20:03:06.000Z
CVE-2019-11365 
An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this vulnerable strncpy pattern within the code base, specifically within tftpd_file.c, tftp_file.c, tftpd_mtftp.c, and tftp_mtftp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T12:57:45.000Z
CVE-2019-11366 
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T12:58:09.000Z
CVE-2019-11367 
An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T20:16:01.000Z
CVE-2019-11368 
Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T20:13:35.000Z
CVE-2019-11369 
An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allow sensitive information to be read by someone with access to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:48:25.000Z
CVE-2019-11370 
Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T19:44:10.000Z
CVE-2019-11371 
BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T17:23:20.000Z
CVE-2019-11372 
An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:05:17.000Z
CVE-2019-11373 
An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:05:36.000Z
CVE-2019-11374 
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:35:05.000Z
CVE-2019-11375 
Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:35:15.000Z
CVE-2019-11376 
SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicates that there was an assumption that the content is "made editable on its own.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:35:52.000Z
CVE-2019-11377 
wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:36:04.000Z
CVE-2019-11378 
An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitrary files and (potentially) access the supporting database, delete arbitrary files, access user passwords, or run arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-20T14:51:46.000Z
CVE-2019-11380 
The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T20:38:59.000Z
CVE-2019-11383 
An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user via /data/data/com.medhaapps.wififtpserver/shared_prefs/com.medhaapps.wififtpserver_preferences.xml
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T21:04:42.000Z
CVE-2019-11384 
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/shared_prefs/login_data.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T20:57:40.000Z
CVE-2019-11387 
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T01:14:49.000Z
CVE-2019-11388 
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T01:15:03.000Z
CVE-2019-11389 
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with next# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T01:15:45.000Z
CVE-2019-11390 
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with set_error_handler# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T01:16:04.000Z
CVE-2019-11391 
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with $a# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T01:16:16.000Z
CVE-2019-11392 
BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T18:22:20.000Z
CVE-2019-11393 
An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T13:50:14.000Z
CVE-2019-11395 
A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T14:26:01.000Z
CVE-2019-11396 
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (files / folders and configuration) are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to obtain SYSTEM privileges. Arbitrary file creation can be achieved by abusing the SwuConfig.json file creation: an unprivileged user can replace these files by pseudo-symbolic links to arbitrary files. When an update occurs, a privileged service creates a file and sets its access rights, offering write access to the Everyone group in any directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T19:06:02.000Z
CVE-2019-11397 
GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T20:18:42.000Z
CVE-2019-11398 
Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.php, the go parameter to /admin/index.php?register=register, or the error parameter to admin/index.php?action=favicon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T17:36:54.000Z
CVE-2019-11399 
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T14:52:41.000Z
CVE-2019-11400 
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T14:57:51.000Z
CVE-2019-11401 
A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T15:37:38.000Z
CVE-2019-11402 
In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T16:06:16.000Z
CVE-2019-11403 
In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T16:06:30.000Z
CVE-2019-11404 
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T16:06:56.000Z
CVE-2019-11405 
OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T16:07:22.000Z
CVE-2019-11406 
Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T17:27:38.000Z
CVE-2019-11407 
app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure vulnerability due to excessive debug information, which allows authenticated administrative attackers to obtain credentials and other sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T17:56:13.000Z
CVE-2019-11408 
XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated attackers to inject arbitrary JavaScript characters by placing a phone call using a specially crafted caller ID number. This can further lead to remote code execution by chaining this vulnerability with a command injection vulnerability also present in FusionPBX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T17:59:30.000Z