rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-9116 
DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublime_text.exe to open a .txt file within an attacker's %LOCALAPPDATA%\Temp\sublime_text folder. NOTE: the vendor's position is "This does not appear to be a bug with Sublime Text, but rather one with Windows that has been patched.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T07:00:00.000Z
CVE-2019-9117 
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNetworkTomographySettings API function, as demonstrated by shell metacharacters in the tomography_ping_number field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-9118 
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-9119 
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteSettings API function, as demonstrated by shell metacharacters in the staticroute_list field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-9120 
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWLanACLSettings API function, as demonstrated by shell metacharacters in the wl(0).(0)_maclist field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-9121 
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetSmartQoSSettings API function, as demonstrated by shell metacharacters in the smartqos_priority_devices field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-9122 
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter in an ntp_sync.cgi POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T05:00:00.000Z
CVE-2019-9123 
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T05:00:00.000Z
CVE-2019-9124 
An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T05:00:00.000Z
CVE-2019-9125 
An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T05:00:00.000Z
CVE-2019-9126 
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN information of the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T05:00:00.000Z
CVE-2019-9132 
Remote code execution vulnerability exists in KaKaoTalk PC messenger when user clicks specially crafted link in the message window. This affects KaKaoTalk windows version 2.7.5.2024 or lower.
Affected products: vendor: KaKao
product: Kakaotalk Windows PC Messenger
Published: 2019-04-01T16:52:46.000Z
CVE-2019-9133 KMPlayer Subtitles parser Heap Overflow Vulnerability
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: Pandora.tv
product: KMPlayer
Published: 2019-04-09T17:33:27.000Z
CVE-2019-9134 
Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary code.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: Solideo Systems Co,Ltd
product: Architectural Information System
Published: 2019-04-09T17:53:54.000Z
CVE-2019-9135 
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: HumanTalk Co,Ltd
product: DaviewIndy
Published: 2019-04-25T16:49:13.000Z
CVE-2019-9136 
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: HumanTalk Co,Ltd
product: DaviewIndy
Published: 2019-04-25T16:57:29.000Z
CVE-2019-9137 
DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: HumanTalk Co,Ltd
product: DaviewIndy
Published: 2019-04-25T17:11:58.000Z
CVE-2019-9138 
DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PhotoShop file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: HumanTalk Co,Ltd
product: DaviewIndy
Published: 2019-04-25T17:19:01.000Z
CVE-2019-9139 
DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: HumanTalk Co,Ltd
product: DaviewIndy
Published: 2019-04-25T17:22:31.000Z
CVE-2019-9140 Happypoint mobile application information disclosure vulnerability
When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a specific malicious URL.
Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: SPC CLOUD
product: Happypoint mobile app
Published: 2019-08-01T16:54:17.745Z
CVE-2019-9141 Zoneplayer ActiveX Remote Code Execution vulnerability
ZInsVX.dll ActiveX Control 2018.02 and earlier in Zoneplayer contains a vulnerability that could allow remote attackers to execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for remote code execution.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: IMGTech Co,Ltd
product: ZInsVX.dll ActiveX Control
Published: 2019-08-02T15:52:45.558Z
CVE-2019-9142 
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T15:00:00.000Z
CVE-2019-9143 
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T15:00:00.000Z
CVE-2019-9144 
An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T15:00:00.000Z
CVE-2019-9145 
An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T17:00:00.000Z
CVE-2019-9146 
Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacOS/Terminal" into the TCP data stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T18:00:00.000Z
CVE-2019-9147 
Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation mechanisms are disabled (web_accessible_resources). Mailvelope implements additional measures to prevent web applications from directly embedding the settings page, but this mechanism can be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T20:20:33.000Z
CVE-2019-9148 
Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a manipulated key could claim to have signed a message that originates from another person.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T20:41:18.000Z
CVE-2019-9149 
Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary messages with Mailvelope, assuming the private key password is cached. A second vulnerability allows an attacker to decrypt an arbitrary message when the GnuPG backend is used in Mailvelope.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T20:45:39.000Z
CVE-2019-9150 
Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T20:49:50.000Z
CVE-2019-9151 
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T19:00:00.000Z
CVE-2019-9152 
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T19:00:00.000Z
CVE-2019-9153 
Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T15:30:33.000Z
CVE-2019-9154 
Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T15:39:28.000Z
CVE-2019-9155 
A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T15:48:57.000Z
CVE-2019-9156 
Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:27:42.000Z
CVE-2019-9157 
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:25:32.000Z
CVE-2019-9158 
Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:16:57.000Z
CVE-2019-9160 
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH (on TCP port 22345) and escalate to root (because the password for root is the WebUI admin password concatenated with a static string).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T21:58:00.000Z
CVE-2019-9161 
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginx_webconsole.php Cookie header can be used to read an etc/config/wac/wns_cfg_admin_detail.xml file containing the admin password. (The password for root is the WebUI admin password concatenated with a static string.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T22:01:22.000Z
CVE-2019-9162 
In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T22:00:00.000Z
CVE-2019-9163 
The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T20:23:42.000Z
CVE-2019-9164 
Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T16:43:13.000Z
CVE-2019-9165 
SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T18:59:09.000Z
CVE-2019-9166 
Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and import_xiconfig.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T19:10:01.000Z
CVE-2019-9167 
Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T19:14:26.000Z
CVE-2019-9168 
WooCommerce before 3.5.5 allows XSS via a Photoswipe caption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-26T00:00:00.000Z
CVE-2019-9169 
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-26T02:00:00.000Z
CVE-2019-9170 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:23:38.000Z
CVE-2019-9171 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 1 of 5).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:37:30.000Z
CVE-2019-9172 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 2 of 5).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:20:09.000Z
CVE-2019-9174 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:17:40.000Z
CVE-2019-9175 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 3 of 5).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:26:16.000Z
CVE-2019-9176 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:15:05.000Z
CVE-2019-9178 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 4 of 5).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:28:40.000Z
CVE-2019-9179 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 5 of 5).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:31:20.000Z
CVE-2019-9181 
SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code after the JPEG data. This ultimately allows execution of arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-26T07:00:00.000Z
CVE-2019-9182 
There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-26T07:00:00.000Z
CVE-2019-9183 
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment processing in the face of truncated fragments in os/net/ipv6/sicslowpan.c. This results in accesses of unmapped memory, crashing the application. An attacker can cause a denial-of-service via a crafted 6LoWPAN frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-23T12:33:37.000Z
CVE-2019-9184 
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-26T15:00:00.000Z
CVE-2019-9185 
Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-9186 
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of listening on only the localhost interface). This issue has been fixed in the following versions: 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:35:06.000Z
CVE-2019-9187 
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T17:55:37.000Z