rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19494 
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E 5.510.5.11, and COMPAL 7486E 5.510.5.11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T12:11:13.000Z
CVE-2019-19495 
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing external access to a root shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-08T17:05:54.000Z
CVE-2019-19496 
Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T03:01:53.000Z
CVE-2019-19497 
MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T18:40:09.000Z
CVE-2019-19499 
Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-28T14:49:46.000Z
CVE-2019-19500 
Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment field of a special order for individual software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T13:13:22.000Z
CVE-2019-19501 
VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T12:27:37.000Z
CVE-2019-19502 
Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T15:14:20.000Z
CVE-2019-19505 
Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-25T19:22:21.000Z
CVE-2019-19506 
Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-25T19:22:18.000Z
CVE-2019-19507 
In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T16:17:45.000Z
CVE-2019-19509 
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T19:27:27.000Z
CVE-2019-19513 
The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execute code on the target machine. A failure in exploitation leads to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-16T12:52:35.000Z
CVE-2019-19514 
Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T16:59:52.000Z
CVE-2019-19515 
Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T17:01:28.000Z
CVE-2019-19516 
Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T22:10:35.000Z
CVE-2019-19517 
Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T17:03:53.000Z
CVE-2019-19518 
CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands.
Problem types: description: Authentication Flaw leading to Remote Command Execution
Affected products: vendor: n/a
product: CA Automic Sysload
Published: 2020-01-08T15:57:21.000Z
CVE-2019-19519 
In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in su/su.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T23:34:48.000Z
CVE-2019-19520 
xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T23:34:21.000Z
CVE-2019-19521 
libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greeter/verify.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T23:33:35.000Z
CVE-2019-19522 
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T23:33:05.000Z
CVE-2019-19523 
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:42:29.000Z
CVE-2019-19524 
In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:42:13.000Z
CVE-2019-19525 
In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:41:58.000Z
CVE-2019-19526 
In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:41:43.000Z
CVE-2019-19527 
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:41:27.000Z
CVE-2019-19528 
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:41:11.000Z
CVE-2019-19529 
In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:40:58.000Z
CVE-2019-19530 
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:40:38.000Z
CVE-2019-19531 
In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:39:51.000Z
CVE-2019-19532 
In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:39:36.000Z
CVE-2019-19533 
In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:39:15.000Z
CVE-2019-19534 
In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:38:58.000Z
CVE-2019-19535 
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:38:45.000Z
CVE-2019-19536 
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:38:32.000Z
CVE-2019-19537 
In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T15:38:08.000Z
CVE-2019-19538 
In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules have a Remote Command Execution vulnerability that results in Privilege Escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T20:08:15.000Z
CVE-2019-19539 
An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and L01ABP-L01ABZ, Web ViewPoint Plus H01AAG-H01AAQ and L01AAH-L01AAR, and Web ViewPoint Enterprise H01-H01AAE and L01-L01AAF. By reading ADB or AADB file content within the Installation subvolume, a Guardian user can discover the password of the group.user or alias who acknowledges events from the WVP Events screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:06:39.000Z
CVE-2019-19540 
The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T14:33:17.000Z
CVE-2019-19541 
The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T14:33:11.000Z
CVE-2019-19542 
The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T14:33:04.000Z
CVE-2019-19543 
In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T20:03:15.000Z
CVE-2019-19544 
CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life (EOL) status on April 1, 2015.
Problem types: description: Local Privilege Elevation
Affected products: vendor: n/a
product: CA Automic Dollar Universe
Published: 2020-01-08T16:03:13.000Z
CVE-2019-19545 
Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served.
Problem types: description: CORS
Affected products: vendor: n/a
product: Norton Password Manager
Published: 2019-12-05T17:18:00.000Z
CVE-2019-19546 
Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Norton Password Manager
Published: 2019-12-05T17:18:27.000Z
CVE-2019-19547 
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
Problem types: description: Cross-site scripting
Affected products: vendor: Symantec
product: Endpoint Detection and Response (SEDR)
Published: 2020-01-13T15:10:46.000Z
CVE-2019-19548 
Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Problem types: description: Privilege Escalation
Affected products: vendor: Symantec
product: Norton Power Eraser
Published: 2020-01-14T18:00:22.000Z
CVE-2019-19550 
Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-31T13:53:23.000Z
CVE-2019-19551 
In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management screen of the Administrator web site. An attacker with access to the User Control Panel application can submit malicious values in some of the time/date formatting and time-zone fields. These fields are not being properly sanitized. If this is done and a user (such as an admin) visits the User Management screen and views that user's profile, the XSS payload will render and execute in the context of the victim user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-06T15:04:14.000Z
CVE-2019-19552 
In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management screen of the Administrator web site, i.e., the/admin/config.php?display=userman URI. An attacker with sufficient privileges can edit the Display Name of a user and embed malicious XSS code. When another user (such as an admin) visits the main User Management screen, the XSS payload will render and execute in the context of the victim user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-06T15:02:45.000Z
CVE-2019-19553 
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-05T00:58:37.000Z
CVE-2019-19555 
read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T16:19:22.000Z
CVE-2019-19556 
An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-15T23:37:20.000Z
CVE-2019-19557 
A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-15T23:49:36.000Z
CVE-2019-19560 
An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-15T23:41:34.000Z
CVE-2019-19561 
A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-15T23:51:58.000Z
CVE-2019-19562 
An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-15T23:30:38.000Z
CVE-2019-19563 
A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-15T23:44:05.000Z
CVE-2019-19576 
class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T17:33:34.000Z
CVE-2019-19577 
An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number of levels of pagetables (the pagetable height) in the IOMMU according to the guest's address space size. The code to select and update the height had several bugs. Notably, the update was done without taking a lock which is necessary for safe operation. A malicious guest administrator can cause Xen to access data structures while they are being modified, causing Xen to crash. Privilege escalation is thought to be very difficult but cannot be ruled out. Additionally, there is a potential memory leak of 4kb per guest boot, under memory pressure. Only Xen on AMD CPUs is vulnerable. Xen running on Intel CPUs is not vulnerable. ARM systems are not vulnerable. Only systems where guests are given direct access to physical devices are vulnerable. Systems which do not use PCI pass-through are not vulnerable. Only HVM guests can exploit the vulnerability. PV and PVH guests cannot. All versions of Xen with IOMMU support are vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T16:55:00.000Z
CVE-2019-19578 
An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pagetables, because of an incorrect fix for CVE-2017-15595. "Linear pagetables" is a technique which involves either pointing a pagetable at itself, or to another pagetable of the same or higher level. Xen has limited support for linear pagetables: A page may either point to itself, or point to another pagetable of the same level (i.e., L2 to L2, L3 to L3, and so on). XSA-240 introduced an additional restriction that limited the "depth" of such chains by allowing pages to either *point to* other pages of the same level, or *be pointed to* by other pages of the same level, but not both. To implement this, we keep track of the number of outstanding times a page points to or is pointed to another page table, to prevent both from happening at the same time. Unfortunately, the original commit introducing this reset this count when resuming validation of a partially-validated pagetable, incorrectly dropping some "linear_pt_entry" counts. If an attacker could engineer such a situation to occur, they might be able to make loops or other arbitrary chains of linear pagetables, as described in XSA-240. A malicious or buggy PV guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Privilege escalation and information leaks cannot be excluded. All versions of Xen are vulnerable. Only x86 systems are affected. Arm systems are not affected. Only x86 PV guests can leverage the vulnerability. x86 HVM and PVH guests cannot leverage the vulnerability. Only systems which have enabled linear pagetables are vulnerable. Systems which have disabled linear pagetables, either by selecting CONFIG_PV_LINEAR_PT=n when building the hypervisor, or adding pv-linear-pt=false on the command-line, are not vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T16:53:45.000Z