rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-8323 
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:01:32.000Z
CVE-2019-8324 
An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensure_loadable_spec during the preinstall check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T18:59:30.000Z
CVE-2019-8325 
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T18:59:57.000Z
CVE-2019-8331 
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T16:00:00.000Z
CVE-2019-8334 
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=[XSS].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-13T16:00:00.000Z
CVE-2019-8335 
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=[XSS].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-13T16:00:00.000Z
CVE-2019-8336 
HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is used in unusual circumstances.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-05T23:00:00.000Z
CVE-2019-8337 
In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are not properly checked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-13T20:00:00.000Z
CVE-2019-8338 
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 (9) and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the validity of the signing key, which allows remote attackers to spoof arbitrary email signatures by crafting a key with a fake user ID (email address) and injecting it into the user's keyring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T16:02:46.000Z
CVE-2019-8339 
An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T19:46:27.000Z
CVE-2019-8341 
An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T07:00:00.000Z
CVE-2019-8342 
A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T16:05:24.000Z
CVE-2019-8343 
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T07:00:00.000Z
CVE-2019-8345 
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T14:00:00.000Z
CVE-2019-8346 
In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability allows for an unauthenticated manipulation of the JavaScript code by injecting the HTTP form parameter adscsrf. An attacker can use this to capture a user's AD self-service password reset and MFA token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:48:36.000Z
CVE-2019-8347 
BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T15:00:00.000Z
CVE-2019-8349 
Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T13:24:32.000Z
CVE-2019-8350 
The Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was affected by an information disclosure vulnerability that leaked the user's password to the keyboard autocomplete functionality. Third-party Android keyboards that capture the password may store this password in cleartext, or transmit the password to third-party services for keyboard customization purposes. A compromise of any datastore that contains keyboard autocompletion caches would result in the disclosure of the user's Simple Bank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T13:31:45.000Z
CVE-2019-8351 
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-21T20:28:40.000Z
CVE-2019-8352 
By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code or escalate privileges on the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-20T18:32:32.000Z
CVE-2019-8354 
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T23:00:00.000Z
CVE-2019-8355 
An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsx_valloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channels_start in remix.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T23:00:00.000Z
CVE-2019-8356 
An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T23:00:00.000Z
CVE-2019-8357 
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-15T23:00:00.000Z
CVE-2019-8358 
In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-16T18:00:00.000Z
CVE-2019-8359 
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present in the data section during 6LoWPAN fragment re-assembly in the face of forged fragment offsets in os/net/ipv6/sicslowpan.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-23T12:33:35.000Z
CVE-2019-8360 
Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php cate parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-16T22:00:00.000Z
CVE-2019-8361 
PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-16T22:00:00.000Z
CVE-2019-8362 
DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip=1 request with a ZIP archive that contains a file such as "1.jpg.php" (because input validation only checks that .jpg, .png, or .gif is present as a substring, and does not otherwise check the file name or content).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-16T22:00:00.000Z
CVE-2019-8363 
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-16T22:00:00.000Z
CVE-2019-8368 
OpenEMR v5.0.1-6 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T17:02:39.000Z
CVE-2019-8371 
OpenEMR v5.0.1-6 allows code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:45:35.000Z
CVE-2019-8372 
The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T15:00:00.000Z
CVE-2019-8375 
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T13:00:00.000Z
CVE-2019-8376 
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8377 
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8378 
An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4_BitStream::ReadBytes() in Codecs/Ap4BitStream.cpp, a similar issue to CVE-2017-14645. It can be triggered by sending a crafted file to the aac2mp4 binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8379 
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8380 
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8381 
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8382 
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8383 
An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T02:00:00.000Z
CVE-2019-8385 
An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and local file inclusion vulnerability in the ThomsonReuters.Desktop.Service.exe and ThomsonReuters.Desktop.exe allows a remote attacker to list or enumerate sensitive contents of files via a \.. to port 6677. Additionally, this could allow for privilege escalation by dumping the affected machine's SAM and SYSTEM database files, as well as remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:35:54.000Z
CVE-2019-8387 
MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T13:17:10.000Z
CVE-2019-8389 
A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder (with a crafted ../ payload) to the download.script endpoint. This will create a MusicPlayerArchive.zip archive that is publicly accessible and includes the content of any requested file (such as the /etc/passwd file).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T03:00:00.000Z
CVE-2019-8390 
qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T14:57:51.000Z
CVE-2019-8391 
qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T15:05:54.000Z
CVE-2019-8392 
An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T04:00:00.000Z
CVE-2019-8393 
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T15:00:00.000Z
CVE-2019-8394 
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T04:00:00.000Z
CVE-2019-8395 
An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T04:00:00.000Z
CVE-2019-8396 
A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T06:00:00.000Z
CVE-2019-8397 
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T06:00:00.000Z
CVE-2019-8398 
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T06:00:00.000Z
CVE-2019-8400 
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T06:00:00.000Z
CVE-2019-8404 
An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted product image during the creation of a new product. Consequently, an attacker can steal information from the site with the help of an installed executable file, or change the contents of pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T15:29:31.000Z
CVE-2019-8407 
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T18:00:00.000Z
CVE-2019-8408 
OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T18:00:00.000Z
CVE-2019-8410 
Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-27T17:00:00.000Z
CVE-2019-8411 
admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T19:00:00.000Z
CVE-2019-8412 
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T19:00:00.000Z
CVE-2019-8413 
On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T19:00:00.000Z
CVE-2019-8418 
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T21:00:00.000Z
CVE-2019-8419 
VNote 2.2 has XSS via a new text note.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T22:00:00.000Z
CVE-2019-8421 
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T22:00:00.000Z
CVE-2019-8422 
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T22:00:00.000Z
CVE-2019-8423 
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T00:00:00.000Z
CVE-2019-8424 
ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T00:00:00.000Z
CVE-2019-8425 
includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T00:00:00.000Z
CVE-2019-8426 
skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T00:00:00.000Z
CVE-2019-8427 
daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T00:00:00.000Z