rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-7121 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T17:18:49.000Z
CVE-2019-7122 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T17:16:55.000Z
CVE-2019-7123 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T17:15:43.000Z
CVE-2019-7124 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T17:06:59.000Z
CVE-2019-7125 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T16:51:25.000Z
CVE-2019-7127 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T17:14:25.000Z
CVE-2019-7128 
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-23T17:04:01.000Z
CVE-2019-7129 
Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe
product: Adobe Experience Manager Forms
Published: 2019-05-29T17:47:23.000Z
CVE-2019-7130 
Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code execution.
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:35:38.000Z
CVE-2019-7131 
Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-01-27T23:12:51.000Z
CVE-2019-7132 
Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation could lead to remote code execution.
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:34:40.000Z
CVE-2019-7133 
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:33:32.000Z
CVE-2019-7134 
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:31:31.000Z
CVE-2019-7135 
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:44:48.000Z
CVE-2019-7136 
Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:29:50.000Z
CVE-2019-7137 
Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:27:25.000Z
CVE-2019-7138 
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge CC
Published: 2019-05-23T15:30:12.000Z
CVE-2019-7139 
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Problem types: description: SQL Injection
Affected products: vendor: Magento
product: Magento Open Source
vendor: Magento
product: Magento Commerce
vendor: Magento
product: Magento
Published: 2019-04-10T17:07:20.000Z
CVE-2019-7140 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T12:58:08.000Z
CVE-2019-7141 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T13:03:12.000Z
CVE-2019-7142 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T13:04:30.000Z
CVE-2019-7143 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T13:05:48.000Z
CVE-2019-7144 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T13:07:46.000Z
CVE-2019-7145 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T13:09:32.000Z
CVE-2019-7146 
In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7147 
A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation faults, leading to denial-of-service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7148 
An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7149 
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7150 
An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to dwfl_segment_report_module not checking whether the dyn data read from a core file is truncated. A crafted input can cause a program crash, leading to denial-of-service, as demonstrated by eu-stack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7151 
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7152 
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7153 
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7154 
The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T00:00:00.000Z
CVE-2019-7155 
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. A user retains their role within a project in a private group after being removed from the group, if their privileges within the project are different from the group.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-16T21:47:56.000Z
CVE-2019-7156 
In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T08:00:00.000Z
CVE-2019-7158 
OX App Suite 7.10.0 and earlier has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:03:42.000Z
CVE-2019-7159 
OX App Suite 7.10.1 and earlier allows Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T12:24:18.000Z
CVE-2019-7160 
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T16:00:00.000Z
CVE-2019-7161 
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T20:39:46.000Z
CVE-2019-7162 
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retrieve internal information from the system and modify the product installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T14:10:58.000Z
CVE-2019-7163 
The web interface of Alcatel LINKZONE MW40-V-V1.0 MW40_LU_02.00_02 devices is vulnerable to an authentication bypass that allows an unauthenticated user to have access to the web interface without knowing the administrator's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T20:56:25.000Z
CVE-2019-7164 
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T00:00:00.000Z
CVE-2019-7165 
A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T17:25:07.000Z
CVE-2019-7167 
Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced certain bypass elements. Availability of these elements allowed a cheating prover to bypass a consistency check, and consequently transform the proof of one statement into an ostensibly valid proof of a different statement, thereby breaking the soundness of the proof system. This misled the original Sprout zk-SNARK verifier into accepting the correctness of a transaction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T01:37:40.000Z
CVE-2019-7168 
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T18:00:00.000Z
CVE-2019-7169 
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T18:00:00.000Z
CVE-2019-7170 
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocabularies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T18:00:00.000Z
CVE-2019-7171 
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T18:00:00.000Z
CVE-2019-7172 
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T18:00:00.000Z
CVE-2019-7173 
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T18:00:00.000Z
CVE-2019-7174 
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T17:58:27.000Z
CVE-2019-7175 
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-7176 
An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T20:02:30.000Z
CVE-2019-7177 
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T03:26:24.000Z
CVE-2019-7178 
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T03:26:59.000Z
CVE-2019-7181 
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: myQNAPcloud Connect
Published: 2019-05-09T14:57:52.000Z
CVE-2019-7183 
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.
Problem types: description: Improper Link Resolution
Affected products: vendor: n/a
product: QNAP NAS devices
Published: 2019-12-05T16:41:13.000Z
CVE-2019-7184 
This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: n/a
product: QNAP NAS devices running Video Station
Published: 2019-12-05T16:45:14.000Z
CVE-2019-7185 
This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: n/a
product: QNAP NAS devices running Music Station
Published: 2019-12-05T16:48:20.000Z
CVE-2019-7192 
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: QNAP NAS devices running Photo Station
Published: 2019-12-05T16:17:29.000Z
CVE-2019-7193 
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Problem types: description: Improper Input Validation
Affected products: vendor: n/a
product: QNAP NAS devices
Published: 2019-12-05T16:22:19.000Z
CVE-2019-7194 
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Problem types: description: External Control of File Name or Path
Affected products: vendor: n/a
product: QNAP NAS devices running Photo Station
Published: 2019-12-05T16:30:53.000Z
CVE-2019-7195 
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Problem types: description: External Control of File Name or Path
Affected products: vendor: n/a
product: QNAP NAS devices running Photo Station
Published: 2019-12-05T16:34:38.000Z
CVE-2019-7197 
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.
Problem types: description: Stored XSS
Affected products: vendor: n/a
product: QNAP NAS devices
Published: 2019-12-04T16:45:00.000Z
CVE-2019-7198 Command Injection Vulnerability in QTS and QuTS hero
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: QNAP Systems Inc.
product: QTS
vendor: QNAP Systems Inc.
product: QuTS hero
Credits: lang: en
value: Jan Hoff
Published: 2020-12-10T03:34:17.478Z