rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19392 
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T16:34:07.000Z
CVE-2019-19393 
The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page. This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts) as the content is always displayed after and before login. Persistent XSS allows an attacker to modify displayed content or to change the victim's information. Successful exploitation requires access to the web management interface, either with valid credentials or a hijacked session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T16:55:05.000Z
CVE-2019-19394 
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T17:48:23.000Z
CVE-2019-19396 
illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg concurrently over a single socket, because uts/common/inet/ip/ip_attr.c mishandles conn_ixa dereferences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-29T21:02:36.000Z
CVE-2019-19397 
There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.
Problem types: description: Weak Algorithm
Affected products: vendor: n/a
product: S12700;S1700;S2700;S5700;S6700;S7700;S9700
Published: 2019-12-13T14:19:12.000Z
CVE-2019-19398 
M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify the memory of the device by doing a series of operations. Successful exploit may lead to malicious code execution.
Problem types: description: Insufficient Input
Affected products: vendor: Huawei
product: M5 lite 10
Published: 2019-12-26T18:24:04.000Z
CVE-2019-19411 
USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: USG9500
Published: 2020-01-21T18:09:27.000Z
CVE-2019-19412 
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
Problem types: description: FRP Bypass
Affected products: vendor: Huawei
product: ALP-AL00B
vendor: Huawei
product: ALP-L09
vendor: Huawei
product: ALP-L29
vendor: Huawei
product: Anne-AL00
vendor: Huawei
product: BLA-AL00B
vendor: Huawei
product: BLA-L09C
vendor: Huawei
product: BLA-L29C
vendor: Huawei
product: Berkeley-AL20
vendor: Huawei
product: Berkeley-L09
vendor: Huawei
product: Emily-L29C
vendor: Huawei
product: Figo-L03
vendor: Huawei
product: Figo-L21
vendor: Huawei
product: Figo-L23
vendor: Huawei
product: Figo-L31
vendor: Huawei
product: Florida-L03
vendor: Huawei
product: Florida-L21
vendor: Huawei
product: Florida-L22
vendor: Huawei
product: Florida-L23
vendor: Huawei
product: HUAWEI P smart
vendor: Huawei
product: HUAWEI P smart,HUAWEI Y7s
vendor: Huawei
product: HUAWEI P20 lite
vendor: Huawei
product: HUAWEI nova 3e,HUAWEI P20 lite
vendor: Huawei
product: Honor View 10
vendor: Huawei
product: Leland-AL00A
vendor: Huawei
product: Leland-L21A
vendor: Huawei
product: Leland-L22A
vendor: Huawei
product: Leland-L22C
vendor: Huawei
product: Leland-L31A
Published: 2020-06-08T18:21:28.000Z
CVE-2019-19413 
There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.
Problem types: description: Two Integer Overflow
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60
Published: 2020-01-21T22:54:22.000Z
CVE-2019-19414 
There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.
Problem types: description: Two Integer Overflow
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60
Published: 2020-01-21T22:54:32.000Z
CVE-2019-19415 
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Problem types: description: DoS
Affected products: vendor: Huawei
product: AR120-S
vendor: Huawei
product: AR1200
vendor: Huawei
product: AR1200-S
vendor: Huawei
product: AR150
vendor: Huawei
product: AR150-S
vendor: Huawei
product: AR160
vendor: Huawei
product: AR200
vendor: Huawei
product: AR200-S
vendor: Huawei
product: AR2200
vendor: Huawei
product: AR2200-S
vendor: Huawei
product: AR3200
vendor: Huawei
product: AR3600
vendor: Huawei
product: AR510
vendor: Huawei
product: DP300
vendor: Huawei
product: IPS Module
vendor: Huawei
product: NGFW Module
vendor: Huawei
product: NIP6300
vendor: Huawei
product: NIP6600
vendor: Huawei
product: NIP6800
vendor: Huawei
product: NetEngine16EX
vendor: Huawei
product: RSE6500
vendor: Huawei
product: SMC2.0
vendor: Huawei
product: SRG1300
vendor: Huawei
product: SRG2300
vendor: Huawei
product: SRG3300
vendor: Huawei
product: SVN5600
vendor: Huawei
product: SVN5800
vendor: Huawei
product: SVN5800-C
vendor: Huawei
product: SeMG9811
vendor: Huawei
product: Secospace USG6300
vendor: Huawei
product: Secospace USG6500
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: SoftCo
vendor: Huawei
product: TE30
vendor: Huawei
product: TE40
vendor: Huawei
product: TE50
vendor: Huawei
product: TE60
vendor: Huawei
product: TP3206
vendor: Huawei
product: USG9500
vendor: Huawei
product: USG9520
vendor: Huawei
product: USG9560
vendor: Huawei
product: VP9660
vendor: Huawei
product: ViewPoint 8660
vendor: Huawei
product: ViewPoint 9030
vendor: Huawei
product: eSpace U1910
vendor: Huawei
product: eSpace U1911
vendor: Huawei
product: eSpace U1930
vendor: Huawei
product: eSpace U1960
vendor: Huawei
product: eSpace U1980
vendor: Huawei
product: eSpace U1981
Published: 2020-07-08T16:58:31.000Z
CVE-2019-19416 
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Problem types: description: DoS
Affected products: vendor: Huawei
product: AR120-S
vendor: Huawei
product: AR1200
vendor: Huawei
product: AR1200-S
vendor: Huawei
product: AR150
vendor: Huawei
product: AR150-S
vendor: Huawei
product: AR160
vendor: Huawei
product: AR200
vendor: Huawei
product: AR200-S
vendor: Huawei
product: AR2200
vendor: Huawei
product: AR2200-S
vendor: Huawei
product: AR3200
vendor: Huawei
product: AR3600
vendor: Huawei
product: AR510
vendor: Huawei
product: DP300
vendor: Huawei
product: IPS Module
vendor: Huawei
product: NGFW Module
vendor: Huawei
product: NIP6300
vendor: Huawei
product: NIP6600
vendor: Huawei
product: NIP6800
vendor: Huawei
product: NetEngine16EX
vendor: Huawei
product: RSE6500
vendor: Huawei
product: SMC2.0
vendor: Huawei
product: SRG1300
vendor: Huawei
product: SRG2300
vendor: Huawei
product: SRG3300
vendor: Huawei
product: SVN5600
vendor: Huawei
product: SVN5800
vendor: Huawei
product: SVN5800-C
vendor: Huawei
product: SeMG9811
vendor: Huawei
product: Secospace USG6300
vendor: Huawei
product: Secospace USG6500
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: SoftCo
vendor: Huawei
product: TE30
vendor: Huawei
product: TE40
vendor: Huawei
product: TE50
vendor: Huawei
product: TE60
vendor: Huawei
product: TP3206
vendor: Huawei
product: USG9500
vendor: Huawei
product: USG9520
vendor: Huawei
product: USG9560
vendor: Huawei
product: VP9660
vendor: Huawei
product: ViewPoint 8660
vendor: Huawei
product: ViewPoint 9030
vendor: Huawei
product: eSpace U1910
vendor: Huawei
product: eSpace U1911
vendor: Huawei
product: eSpace U1930
vendor: Huawei
product: eSpace U1960
vendor: Huawei
product: eSpace U1980
vendor: Huawei
product: eSpace U1981
Published: 2020-07-08T16:55:48.000Z
CVE-2019-19417 
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Problem types: description: DoS
Affected products: vendor: Huawei
product: AR120-S
vendor: Huawei
product: AR1200
vendor: Huawei
product: AR1200-S
vendor: Huawei
product: AR150
vendor: Huawei
product: AR150-S
vendor: Huawei
product: AR160
vendor: Huawei
product: AR200
vendor: Huawei
product: AR200-S
vendor: Huawei
product: AR2200
vendor: Huawei
product: AR2200-S
vendor: Huawei
product: AR3200
vendor: Huawei
product: AR3600
vendor: Huawei
product: AR510
vendor: Huawei
product: DP300
vendor: Huawei
product: IPS Module
vendor: Huawei
product: NGFW Module
vendor: Huawei
product: NIP6300
vendor: Huawei
product: NIP6600
vendor: Huawei
product: NIP6800
vendor: Huawei
product: NetEngine16EX
vendor: Huawei
product: RSE6500
vendor: Huawei
product: SMC2.0
vendor: Huawei
product: SRG1300
vendor: Huawei
product: SRG2300
vendor: Huawei
product: SRG3300
vendor: Huawei
product: SVN5600
vendor: Huawei
product: SVN5800
vendor: Huawei
product: SVN5800-C
vendor: Huawei
product: SeMG9811
vendor: Huawei
product: Secospace USG6300
vendor: Huawei
product: Secospace USG6500
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: SoftCo
vendor: Huawei
product: TE30
vendor: Huawei
product: TE40
vendor: Huawei
product: TE50
vendor: Huawei
product: TE60
vendor: Huawei
product: TP3206
vendor: Huawei
product: USG9500
vendor: Huawei
product: USG9520
vendor: Huawei
product: USG9560
vendor: Huawei
product: VP9660
vendor: Huawei
product: ViewPoint 8660
vendor: Huawei
product: ViewPoint 9030
vendor: Huawei
product: eSpace U1910
vendor: Huawei
product: eSpace U1911
vendor: Huawei
product: eSpace U1930
vendor: Huawei
product: eSpace U1960
vendor: Huawei
product: eSpace U1980
vendor: Huawei
product: eSpace U1981
Published: 2020-07-08T16:53:05.000Z
CVE-2019-19441 
HUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information leak vulnerability. An attacker could send specific command in the local area network (LAN) to exploit this vulnerability. Successful exploitation may cause information leak.
Problem types: description: Information Leak
Affected products: vendor: n/a
product: HUAWEI P30
Published: 2020-01-03T14:03:15.000Z
CVE-2019-19447 
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-08T00:48:36.000Z
CVE-2019-19448 
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-08T01:01:04.000Z
CVE-2019-19449 
In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-08T01:14:50.000Z
CVE-2019-19450 
paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-20T00:00:00.000Z
CVE-2019-19451 
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's logging facility (potentially with elevated privileges), thus filling up the disk and eventually rendering the system unusable. (The filename can be for a nonexistent file.) NOTE: this does not affect an upstream release, but affects certain Linux distribution packages with version numbers such as 0.97.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-29T22:54:03.000Z
CVE-2019-19452 
A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers (including low integrity processes) can exploit this to gain NT AUTHORITY\SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T14:34:23.000Z
CVE-2019-19453 
Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-03T13:24:23.000Z
CVE-2019-19454 
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T16:40:21.000Z
CVE-2019-19455 
Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was resolved in Wowza Streaming Engine 4.8.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-03T13:25:19.000Z
CVE-2019-19456 
A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T16:43:33.000Z
CVE-2019-19457 
SALTO ProAccess SPACE 5.4.3.0 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:04:15.000Z
CVE-2019-19458 
SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:03:24.000Z
CVE-2019-19459 
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files under the web root, or .bat files that will be used with auto start. This allows an attacker to execute arbitrary commands on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:02:20.000Z
CVE-2019-19460 
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:00:38.000Z
CVE-2019-19461 
Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T19:56:03.000Z
CVE-2019-19462 
relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-30T00:57:13.000Z
CVE-2019-19463 
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-30T01:17:58.000Z
CVE-2019-19464 
The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-30T01:17:39.000Z
CVE-2019-19466 
SCEditor 2.1.3 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-05T16:13:38.000Z
CVE-2019-19468 
Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-30T18:45:52.000Z
CVE-2019-19469 
In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-01T13:21:17.000Z
CVE-2019-19470 
Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and including 2.1.12. Fixed in version 2.1.13.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T17:39:59.000Z
CVE-2019-19475 
An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications Manager is prone to attack due to lack of file permission security. The malicious users who are in “Authenticated Users” group can exploit privilege escalation and modify PostgreSQL configuration to execute arbitrary command to escalate and gain full system privilege user access and rights over the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-10T21:18:00.000Z
CVE-2019-19479 
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-01T22:37:39.000Z
CVE-2019-19480 
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-01T22:37:18.000Z
CVE-2019-19481 
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-01T22:37:30.000Z
CVE-2019-19484 
Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and execute unintended behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T02:37:18.000Z
CVE-2019-19486 
Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a plugin test.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T02:36:55.000Z
CVE-2019-19487 
Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection via a plugin test.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T02:36:41.000Z
CVE-2019-19489 
SMPlayer 19.5.0 has a buffer overflow via a long .m3u file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T01:14:15.000Z
CVE-2019-19490 
LiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server" folder, as demonstrated by ROMFUSClient.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T01:14:00.000Z
CVE-2019-19491 
TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T01:13:42.000Z
CVE-2019-19492 
FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T01:13:31.000Z
CVE-2019-19493 
Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T02:30:57.000Z