rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-20419 
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2.
Problem types: description: DLL Hijacking
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-07-03T01:20:11.452Z
CVE-2019-20421 
In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:22:10.000Z
CVE-2019-20422 
In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count decision, leading to (for example) a crash that was identified by syzkaller, aka CID-7b09c2d052db.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:21:55.000Z
CVE-2019-20423 
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function target_handle_connect() mishandles a certain size value when a client connects to a server, because of an integer signedness error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:21:40.000Z
CVE-2019-20424 
In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:21:30.000Z
CVE-2019-20425 
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function lustre_msg_string, there is no validation of a certain length value derived from lustre_msg_buflen_v2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:21:15.000Z
CVE-2019-20426 
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function ldlm_cancel_hpreq_check, there is no lock_count bounds check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:21:04.000Z
CVE-2019-20427 
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between req_capsule_get_size and tgt_brw_write leads to a tgt_shortio2pages integer signedness error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:20:55.000Z
CVE-2019-20428 
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldl_request_cancel function mishandles a large lock_count parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:20:43.000Z
CVE-2019-20429 
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the lack of validation for specific fields of packets sent by a client. This is caused by interaction between sptlrpc_svc_unwrap_request and lustre_msg_hdr_size_v2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:20:23.000Z
CVE-2019-20430 
In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:20:09.000Z
CVE-2019-20431 
In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osd_bufs_get in the osd_ldiskfs module does not validate a certain length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:19:58.000Z
CVE-2019-20432 
In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdt_file_secctx_unpack does not validate the value of name_size derived from req_capsule_get_size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T04:19:42.000Z
CVE-2019-20433 
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T14:03:26.000Z
CVE-2019-20434 
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Datasource creation page of the Management Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:38:54.000Z
CVE-2019-20435 
An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:38:34.000Z
CVE-2019-20436 
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. If there is a claim dialect configured with an XSS payload in the dialect URI, and a user picks up this dialect's URI and adds it as the service provider claim dialect while configuring the service provider, that payload gets executed. The attacker also needs to have privileges to log in to the management console, and to add and configure claim dialects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:36:25.000Z
CVE-2019-20437 
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. When a custom claim dialect with an XSS payload is configured in the identity provider basic claim configuration, that payload gets executed, if a user picks up that dialect's URI as the provisioning claim in the advanced claim configuration of the same Identity Provider. The attacker also needs to have privileges to log in to the management console, and to add and update identity provider configurations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:38:16.000Z
CVE-2019-20438 
An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting (XSS) vulnerability has been identified in the inline API documentation editor page of the API Publisher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:37:59.000Z
CVE-2019-20439 
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in defining a scope in the "manage the API" page of the API Publisher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:37:39.000Z
CVE-2019-20440 
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the update API documentation feature of the API Publisher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:37:26.000Z
CVE-2019-20441 
An issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site Scripting (XSS) vulnerability has been identified in the 'implement phase' of the API Publisher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:37:15.000Z
CVE-2019-20442 
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in roleToAuthorize has been identified in the registry UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:36:56.000Z
CVE-2019-20443 
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T23:36:43.000Z
CVE-2019-20444 
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T20:33:17.000Z
CVE-2019-20445 
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T20:33:03.000Z
CVE-2019-20446 
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-02T00:00:00.000Z
CVE-2019-20447 
Jobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-05T19:22:07.000Z
CVE-2019-20451 
The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and requesting /REBOOTSYSTEM or /RESTARTVNC. (Authentication is required but an XML file containing credentials can be downloaded.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T14:39:06.000Z
CVE-2019-20452 
A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core.access/src/RecycleBinManager.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T13:56:00.000Z
CVE-2019-20453 
A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/uploader.http/HttpDownload.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T13:56:58.000Z
CVE-2019-20454 
An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T00:00:00.000Z
CVE-2019-20455 
Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T15:43:53.000Z
CVE-2019-20456 
Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escalation via DLL hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-16T19:00:22.000Z
CVE-2019-20457 
An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD5 hash of the password in hexadecimal. An attacker can easily derive the true MD5 hash from this, and use offline cracking attacks to obtain administrative access to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20458 
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes (and functions) without a password. The user is at no point prompted to set up a password on the device (leaving a number of devices without a password). In this case, anyone connecting to the web admin panel is capable of becoming admin without using any credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20459 
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20460 
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For example, an attack could deliver a worrisome printout to an end user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20461 
An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control video and audio services. The protocol has been partially reverse engineered. Based upon the reverse engineering, no password or username is ever transferred over this protocol. Thus, one can set up the camera connection feed with only the encoded UID. It is possible to set up sessions with the camera over the Internet by using the encoded UID and the custom UDP protocol, because authentication happens at the client side.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20462 
An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board level. By attaching to this serial interface and rebooting the device, a large amount of information is disclosed. This includes the view password and the password of the Wi-Fi access point that the device used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20463 
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner. For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for a long time period, the crafted IP traffic may be sent periodically.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T15:30:35.000Z
CVE-2019-20464 
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a password, the other streaming services do not. By initiating communication on the RTSP port, an attacker can obtain access to the video feed without authenticating.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T15:32:59.000Z
CVE-2019-20465 
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible (using TELNET without a password) to control the camera's pan/zoom/tilt functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T15:35:03.000Z
CVE-2019-20466 
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "default" account is capable of reading the /etc/passwd file, which contains a weakly hashed root password. By taking this hash and cracking it, the attacker can obtain root rights on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T15:37:05.000Z
CVE-2019-20467 
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. The device by default has a TELNET interface available (which is not advertised or functionally used, but is nevertheless available). Two backdoor accounts (root and default) exist that can be used on this interface. The usernames and passwords of the backdoor accounts are the same on all devices. Attackers can use these backdoor accounts to obtain access and execute code as root within the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T12:37:51.000Z
CVE-2019-20468 
An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, and READ_CONTACTS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T20:18:40.000Z
CVE-2019-20469 
An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20470 
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password, e.g., pw,<password>,call,<mobile_number> triggers an outbound call from the watch. The password is sometimes available because of CVE-2019-20471.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T20:03:48.000Z
CVE-2019-20471 
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used (123456) for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-20470.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T20:10:12.000Z
CVE-2019-20472 
An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-07T00:00:00.000Z
CVE-2019-20473 
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T20:13:13.000Z
CVE-2019-20474 
An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (read-only access) to use and abuse it. One of the abuses allows performing network and port scan operations of the localhost or the hosts on the same network segment, aka SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T18:36:34.000Z
CVE-2019-20477 
PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-19T03:09:21.000Z
CVE-2019-20478 
In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-19T03:09:08.000Z
CVE-2019-20479 
A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T00:00:00.000Z
CVE-2019-20480 
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T14:35:58.000Z
CVE-2019-20481 
In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T14:35:42.000Z
CVE-2019-20483 
An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie and use that to login to the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T21:02:18.000Z
CVE-2019-20484 
An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T21:05:07.000Z
CVE-2019-20485 
qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T01:29:44.000Z