rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-7201 
An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108.
Problem types: description: Unquoted Service Path
Affected products: vendor: n/a
product: QNAP NetBak Replicator
Published: 2019-12-04T16:41:48.000Z
CVE-2019-7211 
SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T14:37:13.000Z
CVE-2019-7212 
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T14:43:02.000Z
CVE-2019-7213 
SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T14:46:14.000Z
CVE-2019-7214 
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T00:00:00.000Z
CVE-2019-7215 
Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie can be reused to maintain access to the account, even if the account credentials and permissions are changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T16:04:00.000Z
CVE-2019-7216 
An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T08:00:00.000Z
CVE-2019-7217 
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T18:08:17.000Z
CVE-2019-7218 
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using username/otp combination only (phase 2 of 2FA).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T18:19:19.000Z
CVE-2019-7219 
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T18:43:58.000Z
CVE-2019-7220 
X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T15:57:28.000Z
CVE-2019-7221 
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:26:10.000Z
CVE-2019-7222 
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:52:17.000Z
CVE-2019-7223 
InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-16T12:00:00.000Z
CVE-2019-7225 
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags (MODBUS coils) mapping to the HMI. These credentials are the idal123 password for the IdalMaster account, and the exor password for the exor account. These credentials are used over both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device. This affects ABB CP635 HMI, CP600 HMIClient, Panel Builder 600, IDAL FTP server, IDAL HTTP server, and multiple other HMI components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-27T16:38:39.000Z
CVE-2019-7226 
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the username and cleartext password of the user. An attacker can then supply an IDALToken value in a cookie, which will allow them to perform privileged operations such as restarting the service with /cgi/restart. A GET request to /cgi/loginDefaultUser may result in "1 #S_OK IDALToken=532c8632b86694f0232a68a0897a145c admin admin" or a similar response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-27T15:52:12.000Z
CVE-2019-7227 
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default credential pair exor/exor to become an authenticated attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-27T15:37:54.000Z
CVE-2019-7228 
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-27T14:21:41.000Z
CVE-2019-7229 
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T17:15:02.000Z
CVE-2019-7230 
The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T16:17:15.000Z
CVE-2019-7231 
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that terminates the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T19:32:37.000Z
CVE-2019-7232 
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured Exception Handler (SEH) address. An unauthenticated attacker can submit a Host header value of 2047 bytes or more to overflow the buffer and overwrite the SEH address, which can then be leveraged to execute attacker-controlled code on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T16:07:36.000Z
CVE-2019-7233 
In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-30T21:00:00.000Z
CVE-2019-7234 
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-30T21:00:00.000Z
CVE-2019-7235 
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-30T21:00:00.000Z
CVE-2019-7236 
An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-30T21:00:00.000Z
CVE-2019-7237 
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-30T21:00:00.000Z
CVE-2019-7238 
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-21T16:45:23.000Z
CVE-2019-7240 
An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T16:54:28.000Z
CVE-2019-7244 
An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T16:56:18.000Z
CVE-2019-7245 
An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T16:35:07.000Z
CVE-2019-7246 
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T15:56:48.000Z
CVE-2019-7247 
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T15:52:49.000Z
CVE-2019-7249 
In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T08:00:00.000Z
CVE-2019-7250 
An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T08:00:00.000Z
CVE-2019-7251 
An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T16:18:45.000Z
CVE-2019-7252 
Linear eMerge E3-Series devices have Default Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T18:54:50.000Z
CVE-2019-7253 
Linear eMerge E3-Series devices allow Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T18:53:30.000Z
CVE-2019-7254 
Linear eMerge E3-Series devices allow File Inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T18:51:42.000Z
CVE-2019-7255 
Linear eMerge E3-Series devices allow XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T18:44:16.000Z
CVE-2019-7256 
Linear eMerge E3-Series devices allow Command Injections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T00:00:00.000Z
CVE-2019-7257 
Linear eMerge E3-Series devices allow Unrestricted File Upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T18:16:34.000Z
CVE-2019-7258 
Linear eMerge E3-Series devices allow Privilege Escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T18:03:53.000Z
CVE-2019-7259 
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T17:09:22.000Z
CVE-2019-7260 
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T17:06:49.000Z
CVE-2019-7261 
Linear eMerge E3-Series devices have Hard-coded Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T17:03:54.000Z
CVE-2019-7262 
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T17:01:42.000Z
CVE-2019-7263 
Linear eMerge E3-Series devices have a Version Control Failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T17:00:20.000Z
CVE-2019-7264 
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:58:08.000Z
CVE-2019-7265 
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:49:28.000Z
CVE-2019-7266 
Linear eMerge 50P/5000P devices allow Authentication Bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:46:56.000Z
CVE-2019-7267 
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:45:01.000Z
CVE-2019-7268 
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:43:26.000Z
CVE-2019-7269 
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:40:41.000Z
CVE-2019-7270 
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-02T16:33:26.000Z
CVE-2019-7271 
Nortek Linear eMerge 50P/5000P devices have Default Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T20:12:18.000Z
CVE-2019-7272 
Optergy Proton/Enterprise devices allow Username Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T20:07:55.000Z
CVE-2019-7273 
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T20:05:27.000Z
CVE-2019-7274 
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T20:01:59.000Z
CVE-2019-7275 
Optergy Proton/Enterprise devices allow Open Redirect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:59:29.000Z
CVE-2019-7276 
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T00:00:00.000Z
CVE-2019-7277 
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:51:37.000Z
CVE-2019-7278 
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T19:43:05.000Z
CVE-2019-7279 
Optergy Proton/Enterprise devices have Hard-coded Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:50:04.000Z
CVE-2019-7280 
Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:31:34.000Z
CVE-2019-7281 
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:29:43.000Z
CVE-2019-7282 
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T18:00:00.000Z
CVE-2019-7283 
An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T18:00:00.000Z
CVE-2019-7284 
This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing.
Problem types: description: Processing a maliciously crafted mail message may lead to S/MIME signature spoofing
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:15.000Z
CVE-2019-7285 
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-12-18T17:33:15.000Z
CVE-2019-7286 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2019-12-18T17:33:16.000Z
CVE-2019-7287 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:15.000Z
CVE-2019-7288 
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .
Problem types: description: A thorough security audit of the FaceTime service uncovered an issue with Live Photos
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:23:12.000Z
CVE-2019-7289 
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Shortcuts 2.1.3 for iOS. A local user may be able to view senstive user information.
Problem types: description: A local user may be able to view senstive user information
Affected products: vendor: Apple
product: Shortcuts
Published: 2019-12-18T17:33:15.000Z