rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-16201 
WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T00:00:00.000Z
CVE-2019-16202 
MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T13:07:53.000Z
CVE-2019-16203 
Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when configuring the ESRS client.
Problem types: description: Information Exposure
Affected products: vendor: Brocade
product: Brocade Fabric OS
Published: 2020-02-05T15:16:01.000Z
CVE-2019-16204 
Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server.
Problem types: description: Information Exposure
Affected products: vendor: Brocade
product: Brocade Fabric OS
Published: 2020-02-05T15:16:23.000Z
CVE-2019-16205 
A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal.
Problem types: description: Information exposure
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade SANnav
Published: 2019-11-08T17:17:16.000Z
CVE-2019-16206 
The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.
Problem types: description: Information Exposure
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade SANnav
Published: 2019-11-08T17:18:31.000Z
CVE-2019-16207 
Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges.
Problem types: description: Use of Hard-coded Credentials
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade SANnav
Published: 2019-11-08T17:02:32.000Z
CVE-2019-16208 
Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services (Radius, TACAS, etc.).
Problem types: description: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade SANnav
Published: 2019-11-08T17:03:39.000Z
CVE-2019-16209 
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections.
Problem types: description: Improper Certificate Validation
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade SANnav
Published: 2019-11-08T17:19:12.000Z
CVE-2019-16210 
Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save.
Problem types: description: Information Exposure
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade SANnav
Published: 2019-11-08T17:05:38.000Z
CVE-2019-16211 
Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability.
Problem types: description: Unprotected Storage of Credentials
Affected products: vendor: n/a
product: Brocade SANnav
Published: 2020-09-25T13:08:13.000Z
CVE-2019-16212 
A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process.
Problem types: description: LDAP injection
Affected products: vendor: n/a
product: Brocade SANnav
Published: 2020-09-25T13:07:20.000Z
CVE-2019-16213 
Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-25T19:19:40.000Z
CVE-2019-16214 
Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence (which introduces a single-line comment), followed by very brief comment text, the \r character, and code that has security-critical functionality. In many popular environments, this code is displayed on a separate line, and thus a reader may infer that the code is executed. However, the code is NOT executed, because language/compiler/ir_to_bytecode/src/parser.rs allows the comment to continue after the \r character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T03:51:57.000Z
CVE-2019-16215 
The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T11:07:00.000Z
CVE-2019-16216 
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack is only effective against browsers lacking support for Content-Security-Policy such as Internet Explorer 11. On a Zulip server using the S3 uploads backend, the attack is confined to the origin of the configured S3 uploads hostname and cannot reach the Zulip server itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T11:08:09.000Z
CVE-2019-16217 
WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:07:40.000Z
CVE-2019-16218 
WordPress before 5.2.3 allows XSS in stored comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:06:48.000Z
CVE-2019-16219 
WordPress before 5.2.3 allows XSS in shortcode previews.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:07:31.000Z
CVE-2019-16220 
In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:06:57.000Z
CVE-2019-16221 
WordPress before 5.2.3 allows reflected XSS in the dashboard.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:07:23.000Z
CVE-2019-16222 
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:07:15.000Z
CVE-2019-16223 
WordPress before 5.2.3 allows XSS in post previews by authenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T13:07:06.000Z
CVE-2019-16224 
An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T14:47:37.000Z
CVE-2019-16225 
An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T14:47:23.000Z
CVE-2019-16226 
An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T14:47:13.000Z
CVE-2019-16227 
An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T14:47:02.000Z
CVE-2019-16228 
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T14:46:45.000Z
CVE-2019-16229 
drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T15:30:55.000Z
CVE-2019-16230 
drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics card occurs during boot. It is not attacker controllable and OOM at that time is highly unlikely
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T15:30:33.000Z
CVE-2019-16231 
drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T15:30:23.000Z
CVE-2019-16232 
drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T15:30:13.000Z
CVE-2019-16233 
drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T15:30:01.000Z
CVE-2019-16234 
drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T15:29:40.000Z
CVE-2019-16235 
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T18:57:20.000Z
CVE-2019-16236 
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T18:57:07.000Z
CVE-2019-16237 
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T18:56:58.000Z
CVE-2019-16238 
Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T15:53:03.000Z
CVE-2019-16239 
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T11:37:21.000Z
CVE-2019-16240 
A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-09T14:37:36.000Z
CVE-2019-16241 
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. This file would typically be created via Android Debug Bridge (adb) over USB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:33:26.000Z
CVE-2019-16242 
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named omamock that is vulnerable to OS command injection. An attacker with physical access to the device can abuse this vulnerability to execute arbitrary OS commands as the root user via the application's UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:30:15.000Z
CVE-2019-16243 
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. (This web API is normally used by the system application to trigger firmware updates via OmaService.js.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:31:38.000Z
CVE-2019-16244 
OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-22T15:31:29.000Z
CVE-2019-16245 
OMERO before 5.6.1 makes the details of each user available to all users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-17T16:18:19.000Z
CVE-2019-16246 
Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:43:33.000Z
CVE-2019-16247 
Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T21:23:36.000Z
CVE-2019-16248 
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previously sent image (analogous to supported functionality in which a sender can remove a recipient's copy of a previously sent message).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T22:19:49.000Z
CVE-2019-16249 
OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T22:19:33.000Z
CVE-2019-16250 
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets (CSS) token sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-11T22:55:49.000Z
CVE-2019-16251 
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T16:09:29.000Z
CVE-2019-16252 
Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-12T22:15:51.000Z
CVE-2019-16253 
The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T22:40:55.000Z
CVE-2019-16254 
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T00:00:00.000Z
CVE-2019-16255 
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T00:00:00.000Z
CVE-2019-16256 
Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T12:56:18.000Z
CVE-2019-16257 
Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T12:56:03.000Z
CVE-2019-16258 
The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T17:08:15.000Z
CVE-2019-16261 
Tripp Lite PDUMH15AT 12.04.0053 and SU750XL 12.04.0052 devices allow unauthenticated POST requests to the /Forms/ directory, as demonstrated by changing the manager or admin password, or shutting off power to an outlet. NOTE: the vendor's position is that a newer firmware version, fixing this vulnerability, had already been released before this vulnerability report about 12.04.0053.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T14:07:11.000Z
CVE-2019-16263 
The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-07T11:19:26.000Z
CVE-2019-16264 
In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:04:48.000Z
CVE-2019-16265 
CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T16:34:57.000Z
CVE-2019-16268 
Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T17:55:06.000Z
CVE-2019-16271 
DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T20:02:46.000Z
CVE-2019-16272 
On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T19:58:48.000Z
CVE-2019-16273 
DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the Android OS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T19:55:50.000Z
CVE-2019-16274 
DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T19:52:35.000Z
CVE-2019-16275 
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T19:07:09.000Z