rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-20892 
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-25T09:07:42.000Z
CVE-2019-20893 
An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim's machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-30T11:35:22.000Z
CVE-2019-20894 
Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-02T15:30:22.000Z
CVE-2019-20896 
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T18:11:35.000Z
CVE-2019-20897 
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1.
Problem types: description: Denial of Service
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-07-13T00:50:11.654Z
CVE-2019-20898 
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.
Problem types: description: Information Disclosure
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-07-13T00:55:12.380Z
CVE-2019-20899 
The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API. The affected versions are before version 8.5.4, and from version 8.6.0 before 8.6.1.
Problem types: description: Denial of Service
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-07-13T01:00:16.851Z
CVE-2019-20900 
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module. The affected versions are before version 8.7.0.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-07-13T01:05:13.826Z
CVE-2019-20901 
The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect in the os_destination parameter.
Problem types: description: Open Redirect
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-07-13T04:55:11.862Z
CVE-2019-20902 
Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1.
Problem types: description: Broken Access Control
Affected products: vendor: Atlassian
product: Crowd
Published: 2020-10-01T01:30:19.193Z
CVE-2019-20903 
The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: Atlassian
product: @atlaskit/editor-core
Published: 2020-10-01T01:30:19.624Z
CVE-2019-20907 
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-13T00:00:00.000Z
CVE-2019-20908 
An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T21:24:27.000Z
CVE-2019-20909 
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:49.000Z
CVE-2019-20910 
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:41.000Z
CVE-2019-20911 
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:34.000Z
CVE-2019-20912 
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:26.000Z
CVE-2019-20913 
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:18.000Z
CVE-2019-20914 
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:10.000Z
CVE-2019-20915 
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T17:46:03.000Z
CVE-2019-20916 
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T19:20:55.000Z
CVE-2019-20917 
An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-11T04:43:48.000Z
CVE-2019-20918 
An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-11T04:43:40.000Z
CVE-2019-20919 
An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T17:35:43.000Z
CVE-2019-20920 
Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T12:30:56.000Z
CVE-2019-20921 
bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T12:30:36.000Z
CVE-2019-20922 
Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T12:30:22.000Z
CVE-2019-20923 Crash while handling internal Javascript exception types
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engine's internals. This issue affects MongoDB Server v4.0 versions prior to 4.0.7.
Problem types: cwe_id: CWE-749
description: CWE-749 Exposed Dangerous Method or Function
Affected products: vendor: MongoDB Inc.
product: MongoDB Server
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2020-11-23T15:30:20.507Z
CVE-2019-20924 Invariant in IndexBoundsBuilder
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.
Problem types: cwe_id: CWE-394
description: CWE-394 Unexpected Status Code or Return Value
Affected products: vendor: MongoDB Inc.
product: MongoDB Server
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2020-11-23T15:30:16.137Z
CVE-2019-20925 Denial of service via malformed network packet
An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.
Problem types: cwe_id: CWE-839
description: CWE-839: Numeric Range Comparison Without Minimum Check
Affected products: vendor: MongoDB Inc.
product: MongoDB Server
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2020-11-24T11:00:16.027Z
CVE-2019-20933 
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T01:50:50.000Z
CVE-2019-20934 
An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in show_numa_stats() because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-28T06:20:36.000Z
CVE-2019-25001 
An issue was discovered in the serde_cbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:33:20.000Z
CVE-2019-25002 
An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:33:09.000Z
CVE-2019-25003 
An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:32:57.000Z
CVE-2019-25004 
An issue was discovered in the flatbuffers crate before 0.6.1 for Rust. Arbitrary bytes can be reinterpreted as a bool, defeating soundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:32:41.000Z
CVE-2019-25005 
An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:32:30.000Z
CVE-2019-25006 
An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:32:18.000Z
CVE-2019-25007 
An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can cause a panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:32:09.000Z
CVE-2019-25009 
An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:31:47.000Z
CVE-2019-25010 
An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_type_id__ is overridden.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:31:16.000Z
CVE-2019-25011 
NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by /dcim/sites/add/ comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T19:09:30.000Z
CVE-2019-25012 
The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T23:28:07.000Z
CVE-2019-25013 
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-04T00:00:00.000Z
CVE-2019-25014 
A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is possible to cause the Go runtime to panic (resulting in a denial of service to the istio-pilot application).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T06:00:23.000Z
CVE-2019-25015 
LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T20:08:14.000Z
CVE-2019-25016 
In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to authenticated user to execute specific commands were not affected by this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-28T19:38:24.000Z
CVE-2019-25017 
An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious rcp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rcp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). This issue is similar to CVE-2019-6111 and CVE-2019-7283. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-02T17:23:58.000Z
CVE-2019-25018 
In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an empty filename, similar to CVE-2018-20685 and CVE-2019-7282. The impact is modifying the permissions of the target directory on the client side. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-02T17:23:31.000Z
CVE-2019-25019 
LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-14T03:22:02.000Z
CVE-2019-25020 
An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T04:27:38.000Z
CVE-2019-25021 
An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T04:26:19.000Z
CVE-2019-25022 
An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime().exec() without validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T04:21:59.000Z
CVE-2019-25023 
An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the internal application logs, an attacker can inject wrong IP addresses into these logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T04:22:59.000Z
CVE-2019-25024 
OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T03:37:04.000Z
CVE-2019-25025 
The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed session ID is valid. Consequently, remote attackers can leverage timing discrepancies to achieve a correct guess in a relatively short amount of time. This is a related issue to CVE-2019-16782.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T05:54:10.000Z
CVE-2019-25026 
Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T07:59:04.000Z
CVE-2019-25027 Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL
Problem types: cwe_id: CWE-81
description: CWE-81 Improper Neutralization of Script in an Error Message Web Page
Affected products: vendor: Vaadin
product: Vaadin
vendor: Vaadin
product: flow-server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Published: 2021-04-23T16:05:40.442Z
CVE-2019-25028 Stored cross-site scripting in Grid component in Vaadin 7 and 8
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector
Problem types: cwe_id: CWE-80
description: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Affected products: vendor: Vaadin
product: Vaadin
vendor: Vaadin
product: vaadin-server
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: This issue was discovered and responsibly reported by MATE Marketing Technologie
Published: 2021-04-23T16:05:40.548Z
CVE-2019-25029 
In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are possible when an application passes unsafe user supplied data (forms, cookies, HTTP headers etc.) to a system shell. In this attack, the attacker-supplied operating system commands are usually executed with the privileges of the vulnerable application. Command injection attacks are possible largely due to insufficient input validation.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: n/a
product: Versa Director
Published: 2021-05-26T18:45:32.000Z