rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-9679 
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
Problem types: description: Privilege Escalation
Affected products: vendor: Dahua Technology
product: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X
Published: 2019-09-18T18:32:15.000Z
CVE-2019-9680 
Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Problem types: description: Information Leakage
Affected products: vendor: Dahua Technology
product: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X
Published: 2019-09-18T18:36:13.000Z
CVE-2019-9681 
Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
Problem types: description: Information Leakage
Affected products: vendor: Dahua
product: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X
Published: 2019-09-17T16:02:18.000Z
CVE-2019-9682 
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.
Problem types: description: Replay Attacks
Affected products: vendor: n/a
product: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HDBW1320E-W
Published: 2020-05-13T15:10:43.000Z
CVE-2019-9686 
pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a Content-Disposition header. pacman renames the downloaded package file to match the name given in this header. However, pacman did not sanitize this name, which may contain slashes, before calling rename(). A malicious server (or a network MitM if downloading over HTTP) can send a Content-Disposition header to make pacman place the file anywhere in the filesystem, potentially leading to arbitrary root code execution. Notably, this bypasses pacman's package signature checking. This occurs in curl_download_internal in lib/libalpm/dload.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-11T16:00:00.000Z
CVE-2019-9687 
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-11T16:00:00.000Z
CVE-2019-9688 
sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-11T16:00:00.000Z
CVE-2019-9689 
process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:59:21.000Z
CVE-2019-9692 
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-11T18:00:00.000Z
CVE-2019-9693 
In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _updateshow (parameter show_id), _inputshow (parameter show_id), _Getshowinfo (parameter show_id), _Getpictureinfo (parameter picture_id), _AdjustNameSeq (parameter shownumber), _Updatepicture (parameter picture_id), and _Deletepicture (parameter picture_id).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-11T18:00:00.000Z
CVE-2019-9694 
Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Problem types: description: Privilege Escalation
Affected products: vendor: Symantec
product: Symantec Endpoint Encryption
Published: 2019-04-10T19:54:45.000Z
CVE-2019-9695 
Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Norton
product: Norton Core
Published: 2019-03-29T13:32:42.000Z
CVE-2019-9696 
Symantec VIP Enterprise Gateway (all versions) may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
Problem types: description: Cross-site Scripting
Affected products: vendor: Symantec
product: Symantec VIP Enterprise Gateway
Published: 2019-04-09T20:23:27.000Z
CVE-2019-9697 
An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL policy import servers that they might not otherwise be authorized to access.
Problem types: description: Information disclosure
Affected products: vendor: Symantec Corporation
product: Management Center (MC)
Published: 2019-08-29T22:43:44.000Z
CVE-2019-9698 
Symantec AV Engine, prior to 13.0.9r17, may be susceptible to an arbitrary file deletion issue, which is a type of vulnerability that could allow an attacker to delete files on the resident system without elevated privileges.
Problem types: description: Arbitrary File Deletion
Affected products: vendor: n/a
product: Symantec AV Engine
Published: 2019-05-08T18:46:47.000Z
CVE-2019-9699 
Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.
Problem types: description: Information Disclosure
Affected products: vendor: Symantec
product: Symantec Messaging Gateway
Published: 2019-10-24T15:32:19.000Z
CVE-2019-9700 
Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic.
Problem types: description: Address Spoof
Affected products: vendor: Norton
product: Norton Password Manager
Published: 2019-07-16T18:37:07.000Z
CVE-2019-9701 
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.
Problem types: description: Cross-site Scripting
Affected products: vendor: n/a
product: Data Loss Prevention
Published: 2019-06-19T15:55:27.000Z
CVE-2019-9702 
Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
Problem types: description: Privilege Escalation
Affected products: vendor: Symantec
product: Endpoint Encryption
Published: 2019-07-01T20:28:16.000Z
CVE-2019-9703 
Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
Problem types: description: Privilege Escalation
Affected products: vendor: Symantec
product: Endpoint Encryption
Published: 2019-07-01T20:29:28.000Z
CVE-2019-9704 
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T00:00:00.000Z
CVE-2019-9705 
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T00:00:00.000Z
CVE-2019-9706 
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T00:00:00.000Z
CVE-2019-9708 
An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. A site administrator can suspend the system user (root), causing all users to be locked out from the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T16:53:21.000Z
CVE-2019-9709 
An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. The collection title is vulnerable to Cross Site Scripting (XSS) due to not escaping it when viewing the collection's SmartEvidence overview page (if that feature is turned on). This can be exploited by any logged-in user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T13:58:24.000Z
CVE-2019-9710 
An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products. JSON parsing uses a short-lived cache to store the parsed JSON body. This cache is not thread-safe, meaning that incorrect JSON payloads could have been parsed for concurrent requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T02:00:00.000Z
CVE-2019-9711 
An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T18:00:00.000Z
CVE-2019-9712 
An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T18:00:00.000Z
CVE-2019-9713 
An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T18:00:00.000Z
CVE-2019-9714 
An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T18:00:00.000Z
CVE-2019-9717 
In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c has a complex format argument to sscanf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T20:28:19.000Z
CVE-2019-9718 
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T06:00:00.000Z
CVE-2019-9719 
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a vulnerability is provided” and only “a generic warning from a static code analysis” is provided
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T20:32:34.000Z
CVE-2019-9720 
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T20:37:41.000Z
CVE-2019-9721 
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T06:00:00.000Z
CVE-2019-9723 
LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T17:33:30.000Z
CVE-2019-9724 
aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File writer component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T13:56:18.000Z
CVE-2019-9725 
The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T20:00:00.000Z
CVE-2019-9726 
Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T16:19:20.000Z
CVE-2019-9727 
Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T16:41:24.000Z
CVE-2019-9729 
In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T22:00:00.000Z
CVE-2019-9730 
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T15:11:05.000Z
CVE-2019-9732 
An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T16:18:36.000Z
CVE-2019-9733 
An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. This is only allowable from a connection directly from localhost, but providing a X-Forwarded-For HTTP header to the request allows an unauthenticated user to login with the default credentials of the access-admin account while bypassing the whitelist of allowed IP addresses. The access-admin account can use Artifactory's API to request authentication tokens for all users including the admin account and, in turn, assume full control of all artifacts and repositories managed by Artifactory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T18:59:36.000Z
CVE-2019-9734 
Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T14:04:53.000Z
CVE-2019-9735 
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T02:00:00.000Z
CVE-2019-9736 
DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T02:00:00.000Z
CVE-2019-9737 
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T02:00:00.000Z
CVE-2019-9738 
jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T02:00:00.000Z
CVE-2019-9740 
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T03:00:00.000Z
CVE-2019-9741 
An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T06:00:00.000Z
CVE-2019-9742 
gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\gdwfpcd device are not properly protected, leading to unintended impersonation or object creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T14:00:00.000Z
CVE-2019-9743 
An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:57:56.000Z
CVE-2019-9744 
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:50:47.000Z
CVE-2019-9745 
CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). The data (JSON) sent via this channel is used to import data from CRM software using plugins (.dll files). The plugin to import data from the EXQUISE software (DatasourceExquiseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same privileges as Recognition Update Client Service (NT AUTHORITY\SYSTEM), thus elevating privileges. This occurs because a higher-privileged process executes scripts from a directory writable by a lower-privileged user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T14:19:02.000Z
CVE-2019-9746 
In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T16:00:00.000Z
CVE-2019-9747 
In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompress_nlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As a result, the mDNS server hangs after receiving the malicious mDNS packet. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T19:00:00.000Z