rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-17540 
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:09:28.000Z
CVE-2019-17541 
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:06:43.000Z
CVE-2019-17542 
FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:09:18.000Z
CVE-2019-17543 
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:09:00.000Z
CVE-2019-17544 
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:07:53.000Z
CVE-2019-17545 
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:07:41.000Z
CVE-2019-17546 
tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:07:02.000Z
CVE-2019-17547 
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T01:07:25.000Z
CVE-2019-17549 
ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes. An attacker can abuse this bug to stop the protection from ESET and launch his attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-03T14:25:02.000Z
CVE-2019-17550 
The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T20:23:14.000Z
CVE-2019-17551 
In Apak Wholesale Floorplanning Finance 6.31.8.3 and 6.31.8.5, an attacker can send an authenticated POST request with a malicious payload to /WFS/agreementView.faces allowing a stored XSS via the mainForm:loanNotesnotes:0:rich_text_editor_note_text parameter in the Notes section. Although versions 6.31.8.3 and 6.31.8.5 are confirmed to be affected, all versions with the vulnerable WYSIWYG editor in the Notes section are likely affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T02:55:26.000Z
CVE-2019-17552 
An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T12:32:41.000Z
CVE-2019-17553 
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T12:32:31.000Z
CVE-2019-17554 
The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type "application/xml", which trigger the deserialization of entities, can be used to trigger XXE attacks.
Problem types: description: XML External Entity resolution attack
Affected products: vendor: Apache
product: Olingo
Published: 2019-12-04T16:54:22.000Z
CVE-2019-17555 
The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any check. If a malicious server returns a huge value in the header, then it can help to implement a DoS attack.
Problem types: description: DoS via Retry-After header vulnerability
Affected products: vendor: Apache
product: Olingo
Published: 2019-12-04T17:06:18.000Z
CVE-2019-17556 
Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious metadata to the class, then it may result in running attacker's code in the worse case.
Problem types: description: Deserialization vulnerability
Affected products: vendor: Apache
product: Olingo
Published: 2019-12-04T16:59:49.000Z
CVE-2019-17557 
It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Syncope
Published: 2020-05-04T12:27:31.000Z
CVE-2019-17558 
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user).
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Solr
Published: 2019-12-30T16:36:08.000Z
CVE-2019-17559 
There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and scheme parsing. Upgrade to versions 7.1.9 and 8.0.6 or later versions.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Traffic Server
Published: 2020-03-23T21:43:46.000Z
CVE-2019-17560 
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.
Problem types: description: Improper Certificate Validation
Affected products: vendor: n/a
product: Apache NetBeans
Published: 2020-03-30T18:39:41.000Z
CVE-2019-17561 
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.
Problem types: description: Improper Validation of Integrity Check Value
Affected products: vendor: n/a
product: Apache NetBeans
Published: 2020-03-30T18:44:42.000Z
CVE-2019-17562 
A buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack. This applies to all versions prior to 4.13.1. The vulnerability is due to the lack of validation of the mac parameter in baremetal virtual router. If you insert an arbitrary shell command into the mac parameter, v-router will process the command. For example: Normal: http://{GW}:10086/baremetal/provisiondone/{mac}, Abnormal: http://{GW}:10086/baremetal/provisiondone/#';whoami;#. Mitigation of this issue is an upgrade to Apache CloudStack 4.13.1.0 or beyond.
Problem types: description: buffer overflow exploit
Affected products: vendor: n/a
product: Apache CloudStack
Published: 2020-05-14T16:14:55.000Z
CVE-2019-17563 
When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.
Problem types: description: Session fixation
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2019-12-23T16:39:01.000Z
CVE-2019-17564 
Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4, 2.6.0 to 2.6.7, and all 2.5.x versions.
Problem types: description: Unsafe deserialization
Affected products: vendor: Apache
product: Apache Dubbo
Published: 2020-04-01T21:17:59.000Z
CVE-2019-17565 
There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and chunked encoding. Upgrade to versions 7.1.9 and 8.0.6 or later versions.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Traffic Server
Published: 2020-03-23T21:13:05.000Z
CVE-2019-17566 
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Batik
Published: 2020-11-12T00:00:00.000Z
CVE-2019-17567 mod_proxy_wstunnel tunneling of non Upgraded connections
Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.
Problem types: description: mod_proxy_wstunnel tunneling of non Upgraded connections
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: Reported by Mikhail Egorov (<0ang3el gmail.com>)
Published: 2021-06-10T07:10:19.000Z
CVE-2019-17569 
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.
Problem types: description: HTTP Request Smuggling
Affected products: vendor: Apache
product: Apache Tomcat
Published: 2020-02-24T21:04:40.000Z
CVE-2019-17570 
An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed.
Problem types: description: Deserialization
Affected products: vendor: Apache
product: Apache XML-RPC
Published: 2020-01-23T00:00:00.000Z
CVE-2019-17571 
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Log4j
Published: 2019-12-20T16:01:21.000Z
CVE-2019-17572 
In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.
Problem types: description: Directory Traversal (Local File Inclusion)
Affected products: vendor: n/a
product: Apache RocketMQ
Published: 2020-05-14T16:10:48.000Z
CVE-2019-17573 
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploits a feature which is not typically not present in modern browsers, who remove dot segments before sending the request. However, Mobile applications may be vulnerable.
Problem types: description: Cross Site Scripting
Affected products: vendor: Apache
product: CXF
Published: 2020-01-16T17:50:42.000Z
CVE-2019-17574 
An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the do_action function to invoke certain popmake_ or pum_ methods, as demonstrated by controlling content and delivery of popmake-system-info.txt (aka the "support debug text file").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T13:55:36.000Z
CVE-2019-17575 
A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension. (For example: place PHP code in a .jpg file, and then change the file's base name to filename.ph and change the file's extension to p. Because of concatenation, the name is then treated as filename.php.) At the result, remote attackers can execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T14:07:37.000Z
CVE-2019-17576 
An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the /admin/mails.php?action=edit URI via the "Send all emails to (instead of real recipients, for test purposes)" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T17:53:27.000Z
CVE-2019-17577 
An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails (fields 'Errors-To' in emails sent)" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T17:40:10.000Z
CVE-2019-17578 
An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Sender email for automatic emails (default value in php.ini: Undefined)" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T17:34:57.000Z
CVE-2019-17579 
SonarSource SonarQube before 7.8 has XSS in project links on account/projects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T14:56:02.000Z
CVE-2019-17580 
tonyy dormsystem through 1.3 allows SQL Injection in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T15:12:08.000Z
CVE-2019-17581 
tonyy dormsystem through 1.3 allows DOM XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T13:09:20.000Z
CVE-2019-17582 
A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive. NOTE: the discoverer states "This use-after-free is triggered prior to the double free reported in CVE-2017-12858."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T18:07:57.000Z
CVE-2019-17583 
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T15:47:07.000Z
CVE-2019-17584 
The Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys which allow attackers to get root access to the devices. All firmware versions up to v5.34o, v5.34s, v5.32* or 5.34g are affected. The private key is also used in an internal interface of another Meinberg Device and can be extracted from a firmware update of this device. An update to fix the vulnerability was published by the vendor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T19:32:32.000Z
CVE-2019-17590 
The csrf_callback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF protection bypass as it allows one to tamper with the csrf token values. A remote attacker can exploit this by crafting a malicious page and dispersing it to a victim via social engineering, enticing them to click the link. Once the user/victim clicks the "try again" button, the attacker can take over the account and perform unintended actions on the victim's behalf. NOTE: A third-party maintainer has stated that this CVE is a false report. They state that the csrf_callback function is actually a callback function to the callers own handler for output. The function called can be changed via configuration to a custom callback to handle failed validation differently. They also stated that there is no way for an attacker to change tokens to make them valid from the client side. The only thing an attack can do is to pull the token out of the javascript, but that will always be possible and has nothing to do with the callback
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T17:34:16.000Z
CVE-2019-17592 
The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T19:59:21.000Z
CVE-2019-17593 
JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T20:07:21.000Z
CVE-2019-17594 
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T20:43:11.000Z
CVE-2019-17595 
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T20:42:57.000Z
CVE-2019-17596 
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T21:07:25.000Z
CVE-2019-17598 
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T14:53:19.000Z
CVE-2019-17599 
The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter (and/or the quiz_id parameter). The component is: admin/quiz-options-page.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T13:30:03.000Z
CVE-2019-17600 
Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T13:54:17.000Z
CVE-2019-17601 
In MiniShare 1.4.1, there is a stack-based buffer overflow via an HTTP CONNECT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19862 and CVE-2018-19861. NOTE: this product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T20:49:16.000Z
CVE-2019-17602 
An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T21:00:15.000Z
CVE-2019-17603 
Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a denial of service (system crash) or gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-02T14:47:03.000Z
CVE-2019-17604 
An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:24:34.000Z
CVE-2019-17605 
A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a modified candidate id and an additional password parameter. The outcome is that the password of this other candidate is changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:21:03.000Z
CVE-2019-17606 
The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T16:18:14.000Z