rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-13264 
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router (following the IGMP protocol) creates an IGMP Membership Query packet with the Group IP and sends it to both the Host and the Guest networks. The data is transferred within the Group IP field, which is completely controlled by the sender.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:07:00.000Z
CVE-2019-13265 
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert channel, the sender can trivially issue an ARP request to an arbitrary computer on the network. (In general, some routers restrict ARP forwarding only to requests destined for the network's subnet mask, but these routers did not restrict this traffic in any way. Depending on this factor, one must use either the lower 8 bits of the IP address, or the entire 32 bits, as the data payload.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:06:36.000Z
CVE-2019-13266 
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK message. Studying the NAK case revealed that the router erroneously sends the NAK to both Host and Guest networks with the same Transaction ID as found in the DHCP Request. This allows encoding of data to be sent cross-router into the 32-bit Transaction ID field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:06:10.000Z
CVE-2019-13267 
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router (following the IGMP protocol) creates an IGMP Membership Query packet with the Group IP and sends it to both the Host and the Guest networks. The data is transferred within the Group IP field, which is completely controlled by the sender.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:05:39.000Z
CVE-2019-13268 
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert channel, the sender can trivially issue an ARP request to an arbitrary computer on the network. (In general, some routers restrict ARP forwarding only to requests destined for the network's subnet mask, but these routers did not restrict this traffic in any way. Depending on this factor, one must use either the lower 8 bits of the IP address, or the entire 32 bits, as the data payload.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:05:06.000Z
CVE-2019-13269 
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK message. Studying the NAK case revealed that the router erroneously sends the NAK to both Host and Guest networks with the same Transaction ID as found in the DHCP Request. This allows encoding of data to be sent cross-router into the 32-bit Transaction ID field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:04:20.000Z
CVE-2019-13270 
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router (following the IGMP protocol) creates an IGMP Membership Query packet with the Group IP and sends it to both the Host and the Guest networks. The data is transferred within the Group IP field, which is completely controlled by the sender.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:03:43.000Z
CVE-2019-13271 
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert channel, the sender can trivially issue an ARP request to an arbitrary computer on the network. (In general, some routers restrict ARP forwarding only to requests destined for the network's subnet mask, but these routers did not restrict this traffic in any way. Depending on this factor, one must use either the lower 8 bits of the IP address, or the entire 32 bits, as the data payload.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T16:57:30.000Z
CVE-2019-13272 
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T12:32:55.000Z
CVE-2019-13273 
In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T16:52:01.000Z
CVE-2019-13274 
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T16:49:13.000Z
CVE-2019-13275 
An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. The v1/hit endpoint of the API, when the non-default "use cache plugin" setting is enabled, is vulnerable to unauthenticated blind SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T18:51:22.000Z
CVE-2019-13276 
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:19:06.000Z
CVE-2019-13277 
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change configuration values, potentially leading to a denial of service. The request can be made on the local intranet or remotely if remote administration is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T20:28:49.000Z
CVE-2019-13278 
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:23:37.000Z
CVE-2019-13279 
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:27:52.000Z
CVE-2019-13280 
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can be exercised on the local intranet or remotely if remote administration is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T18:44:23.000Z
CVE-2019-13281 
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service, an information leak, or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T19:47:55.000Z
CVE-2019-13282 
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when using a large index for samples. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T19:48:09.000Z
CVE-2019-13283 
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T19:48:23.000Z
CVE-2019-13285 
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:36:13.000Z
CVE-2019-13286 
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:06:41.000Z
CVE-2019-13287 
In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16368.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:06:50.000Z
CVE-2019-13288 
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:06:59.000Z
CVE-2019-13289 
In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:07:06.000Z
CVE-2019-13290 
Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:07:14.000Z
CVE-2019-13291 
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:07:21.000Z
CVE-2019-13292 
A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T21:56:07.000Z
CVE-2019-13294 
AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session control. Therefore an unauthenticated user can execute a command on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-04T22:09:54.000Z
CVE-2019-13295 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:50:46.000Z
CVE-2019-13296 
ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:50:58.000Z
CVE-2019-13297 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:51:07.000Z
CVE-2019-13298 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:51:52.000Z
CVE-2019-13299 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:52:07.000Z
CVE-2019-13300 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:52:17.000Z
CVE-2019-13301 
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:52:28.000Z
CVE-2019-13302 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:52:44.000Z
CVE-2019-13303 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:02.000Z
CVE-2019-13304 
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:10.000Z
CVE-2019-13305 
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:20.000Z
CVE-2019-13306 
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:29.000Z
CVE-2019-13307 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:35.000Z
CVE-2019-13308 
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:43.000Z
CVE-2019-13309 
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:50.000Z
CVE-2019-13310 
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:53:57.000Z
CVE-2019-13311 
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:54:05.000Z
CVE-2019-13312 
block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T00:54:13.000Z
CVE-2019-13313 
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T13:22:02.000Z
CVE-2019-13314 
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virt_bootstrap.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T13:22:12.000Z
CVE-2019-13315 
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8656.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Foxit
product: Reader
Credits: lang: en
value: Anonymous
Published: 2019-10-04T17:37:01.000Z
CVE-2019-13316 
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate actions. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8757.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Foxit
product: PhantomPDF
Credits: lang: en
value: RockStar
Published: 2019-10-04T17:35:53.000Z
CVE-2019-13317 
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate actions. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8759.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Foxit
product: PhantomPDF
Credits: lang: en
value: RockStar
Published: 2019-10-04T17:37:01.000Z
CVE-2019-13318 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the util.printf Javascript method. The application processes the %p parameter in the format string, allowing heap addresses to be returned to the script. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8544.
Problem types: cwe_id: CWE-134
description: CWE-134: Use of Externally-Controlled Format String
Affected products: vendor: Foxit
product: Reader
Credits: lang: en
value: banananapenguin
Published: 2019-10-04T17:37:01.000Z
CVE-2019-13319 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA forms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8669.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Foxit
product: Reader
Credits: lang: en
value: huyna of Viettel Cyber Security
Published: 2019-10-04T17:37:01.000Z