rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-5936 
Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5937 
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5938 
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5939 
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5940 
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5941 
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5942 
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5943 
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5944 
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5945 
Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon.
Problem types: description: Information Disclosure
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:55.000Z
CVE-2019-5946 
Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.
Problem types: description: Open Redirect
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5947 
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5953 
Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: The GNU Projec
product: GNU Wget
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5954 
JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: East Japan Railway Company
product: JR East Japan train operation information push notification App for Android
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5955 
CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks.
Problem types: description: Fails to restrict access
Affected products: vendor: CREATE S.D CO., LTD.
product: CREATE SD official App for Android
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5956 
Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors.
Problem types: description: Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors.
Affected products: vendor: WonderCMS
product: 2.6.0 and earlier
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5957 
Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of Internal Affairs and Communications
product: Installer of Electronic reception and examination of application for radio licenses Online
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5958 
Untrusted search path vulnerability in Electronic reception and examination of application for radio licenses Offline 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of Internal Affairs and Communications
product: Electronic reception and examination of application for radio licenses Offline
Published: 2019-05-17T15:25:56.000Z
CVE-2019-5960 
Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Custom4Web
product: WP Open Graph
Published: 2019-07-05T13:18:31.000Z
CVE-2019-5961 
The Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Tsukurito, Inc.
product: Android App 'Tootdon for Mastodon'
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5962 
Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Zoho SalesIQ Team
product: Zoho SalesIQ
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5963 
Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Zoho SalesIQ Team
product: Zoho SalesIQ
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5964 
iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the management console and operate the product via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: A.T.WORKS, Inc.
product: iDoors Reader
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5965 
Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: Open Redirect
Affected products: vendor: SiteBridge Inc.
product: Joruri Mail
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5966 
Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.
Problem types: description: Fails to manage sessions
Affected products: vendor: SiteBridge Inc.
product: Joruri Mail
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5967 
Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: SiteBridge Inc.
product: Joruri CMS 2017
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5968 
Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.
Problem types: description: Cross-site request forgery
Affected products: vendor: WESEEK, Inc.
product: GROWI
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5969 
Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login.
Problem types: description: Open Redirect
Affected products: vendor: WESEEK, Inc.
product: GROWI
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5970 
Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: SUKIMALAB.COM
product: Attendance Manager
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5971 
Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: SUKIMALAB.COM
product: Attendance Manager
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5972 
Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: SUKIMALAB.COM
product: Online Lesson Booking
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5973 
Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: SUKIMALAB.COM
product: Online Lesson Booking
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5974 
Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Contest-Gallery
product: Contest Gallery
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5975 
DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Inc."
product: Cybozu Garoon
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5976 
Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Inc."
product: Cybozu Garoon
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5977 
Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.
Problem types: description: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected products: vendor: Inc."
product: Cybozu Garoon
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5978 
Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.
Problem types: description: Open Redirect
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5979 
Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: N-MEDIA
product: Personalized WooCommerce Cart Page
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5980 
Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Chris Doerr
product: Related YouTube Videos
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5981 
Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrative privilege via unspecified vectors.
Problem types: description: Improper Authorization
Affected products: vendor: Sony Corporation
product: VAIO Update
Published: 2019-07-05T13:20:17.000Z
CVE-2019-5982 
Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed.
Problem types: description: Improper File Verification
Affected products: vendor: Sony Corporation
product: VAIO Update
Published: 2019-07-05T13:20:18.000Z
CVE-2019-5983 
Cross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Fla-shop.com
product: HTML5 Maps
Published: 2019-07-05T13:20:18.000Z
CVE-2019-5984 
Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: WaspThemes
product: Custom CSS Pro
Published: 2019-07-05T13:20:18.000Z
CVE-2019-5987 
Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page.
Problem types: description: OS Command Injection
Affected products: vendor: ANGLERSNET Co,.Ltd.
product: Access analysis CGI An-Analyzer
Published: 2020-01-06T05:45:20.000Z
CVE-2019-5988 
Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page.
Problem types: description: Cross-site scripting
Affected products: vendor: ANGLERSNET Co,.Ltd.
product: Access analysis CGI An-Analyzer
Published: 2020-01-06T05:45:21.000Z
CVE-2019-5989 
DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page.
Problem types: description: Cross-site scripting
Affected products: vendor: ANGLERSNET Co,.Ltd.
product: Access analysis CGI An-Analyzer
Published: 2020-01-06T05:45:21.000Z
CVE-2019-5990 
Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer.
Problem types: description: Information Disclosure
Affected products: vendor: ANGLERSNET Co,.Ltd.
product: Access analysis CGI An-Analyzer
Published: 2020-01-06T05:45:21.000Z
CVE-2019-5991 
SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Inc."
product: Cybozu Garoon
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5992 
Cross-site request forgery (CSRF) vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery (CSRF) vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected products: vendor: WordPress Ultra Simple Paypal Shopping Cart
product: v4.4 and earlier
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5993 
Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected products: vendor: Category Specific RSS feed Subscription
product: version v2.0 and earlier
Published: 2019-09-12T15:58:55.000Z
CVE-2019-5994 
Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier, EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier, EOS 9000D / EOS 77D firmware version 1.0.2 and earlier, EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier, EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier, EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier, EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier, EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier, EOS R firmware version 1.3.0 and earlier, EOS RP firmware version 1.2.0 and earlier, EOS RP GOLD firmware version 1.2.0 and earlier, EOS M2 firmware version 1.0.3 and earlier, EOS M3 firmware version 1.2.0 and earlier, EOS M5 firmware version 1.0.1 and earlier, EOS M6 firmware version 1.0.1 and earlier, EOS M6(China) firmware version 5.0.0 and earlier, EOS M10 firmware version 1.1.0 and earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via SendObjectInfo command.
Problem types: description: Buffer Overflow
Affected products: vendor: Canon, Inc.
product: EOS series digital cameras, PowerShot SX740 HS,  PowerShot SX70 HS, and PowerShot G5XmarkⅡ
Published: 2019-08-06T18:41:11.000Z
CVE-2019-5995 
Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier, EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier, EOS 9000D / EOS 77D firmware version 1.0.2 and earlier, EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier, EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier, EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier, EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier, EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier, EOS R firmware version 1.3.0 and earlier, EOS RP firmware version 1.2.0 and earlier, EOS RP GOLD firmware version 1.2.0 and earlier, EOS M2 firmware version 1.0.3 and earlier, EOS M3 firmware version 1.2.0 and earlier, EOS M5 firmware version 1.0.1 and earlier, EOS M6 firmware version 1.0.1 and earlier, EOS M6(China) firmware version 5.0.0 and earlier, EOS M10 firmware version 1.1.0 and earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier. A successful exploitation may result in a specially crafted firmware update or unofficial firmware update being applied without user's consent via unspecified vector.
Problem types: description: Authentication bypass
Affected products: vendor: Canon, Inc.
product: EOS series digital cameras, PowerShot SX740 HS,  PowerShot SX70 HS, and PowerShot G5XmarkⅡ
Published: 2019-08-06T18:41:11.000Z