rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-18625 
An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server. After the TCP SYN packet, it is possible to inject a RST ACK and a FIN ACK packet with a bad TCP Timestamp option. The client will ignore the RST ACK and the FIN ACK packets because of the bad TCP Timestamp option. Both linux and windows client are ignoring the injected packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T20:09:13.000Z
CVE-2019-18626 
Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social security numbers, home addresses, and more.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T17:01:30.000Z
CVE-2019-18628 
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T06:09:30.000Z
CVE-2019-18629 
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T06:12:03.000Z
CVE-2019-18630 
On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T22:07:44.000Z
CVE-2019-18631 
The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 (18.8), 3.5.2 (18.11), and 3.6.0 (19.6) does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows attackers to execute arbitrary code inside the Centrify process via (1) a crafted application that makes a pipe connection to the process and sends malicious serialized data or (2) a crafted Microsoft Management Console snap-in control file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T15:30:33.000Z
CVE-2019-18632 
European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forged certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T21:16:38.000Z
CVE-2019-18633 
European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T21:16:47.000Z
CVE-2019-18634 
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T17:23:26.000Z
CVE-2019-18635 
An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a NULL pointer dereference in MPDevice_win.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T21:58:14.000Z
CVE-2019-18636 
A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-01T11:37:51.000Z
CVE-2019-18641 
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T20:35:18.000Z
CVE-2019-18642 
Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The lack of validation and use of sequential user IDs allows any user to change account details of any other user. This vulnerability could be used to change the email address of another account, even the administrator account. Upon changing another account's email address, performing a password reset to the new email address could allow an attacker to take over any account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T20:45:46.000Z
CVE-2019-18643 
Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protection mechanism is a file-extension blacklist that can be bypassed by adding multiple spaces and periods after the file name. This could allow an attacker to upload ASPX code and gain remote code execution on the application. The application typically runs as LocalSystem as mandated in the installation guide. Patched in versions 8.10 and 9.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T20:45:41.000Z
CVE-2019-18644 
The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow privileged files to be deleted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T23:07:51.000Z
CVE-2019-18645 
The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T23:07:35.000Z
CVE-2019-18646 
The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T14:17:19.000Z
CVE-2019-18647 
The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T14:16:24.000Z
CVE-2019-18648 
When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T14:13:44.000Z
CVE-2019-18649 
When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T14:03:06.000Z
CVE-2019-18650 
An issue was discovered in Joomla! before 3.9.13. A missing token check in com_template causes a CSRF vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T01:35:13.000Z
CVE-2019-18651 
A cross-site request forgery (CSRF) vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote attackers to execute malicious and unauthorized actions (e.g., delete application users) by sending a crafted HTML document or encoded URL to a user that the website trusts. The user needs to have an active privileged session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:39:24.000Z
CVE-2019-18652 
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and Microsoft Edge 44.18362.387.0 (Microsoft EdgeHTML 18.18362).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-07T21:40:50.000Z
CVE-2019-18653 
A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code via an SSID Name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-01T18:25:08.000Z
CVE-2019-18654 
A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code via an SSID Name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-01T18:25:52.000Z
CVE-2019-18655 
File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious payload in the URL. A similar issue to CVE-2019-17415, CVE-2019-16724, and CVE-2010-2331.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T16:11:07.000Z
CVE-2019-18656 
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T16:41:22.000Z
CVE-2019-18657 
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T18:55:55.000Z
CVE-2019-18658 
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as /dev/urandom, via symlinks. No version of Tiller is known to be impacted. This is a client-only issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T13:20:13.000Z
CVE-2019-18659 
The Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 (aka SIB12). NOTE: testing inside an RF-isolated shield box suggested that all LTE phones are affected by design (e.g., use of Android versus iOS does not matter); testing in an open RF environment is, of course, contraindicated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T00:49:21.000Z
CVE-2019-18660 
The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T22:11:42.000Z
CVE-2019-18661 
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T01:17:12.000Z
CVE-2019-18662 
An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat.json.php is not properly sanitized (in getFromChat in plugin/LiveChat/Objects/LiveChatObj.php) before being used to construct a SQL query. This can be exploited by malicious users to, e.g., read sensitive data from the database through in-band SQL Injection attacks. Successful exploitation of this vulnerability requires the Live Chat plugin to be enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T14:06:20.000Z
CVE-2019-18663 
A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbitrary SQL commands via the user_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T19:08:13.000Z
CVE-2019-18664 
The Log module in SECUDOS DOMOS before 5.6 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T14:28:21.000Z
CVE-2019-18665 
The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T14:28:11.000Z
CVE-2019-18666 
An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without authorization via an undocumented HTTP request. Although this is the primary vulnerability, the impact depends on the firmware version. Versions 609EU through 613EUbeta were tested. Versions through 6.12b01 have weak root credentials, allowing an attacker to gain remote root access. After 6.12b01, the root credentials were changed but the telnet service can still be started without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T17:18:44.000Z
CVE-2019-18667 
/usr/local/www/freeradius_view_config.php in the freeradius3 package before 0.15.7_3 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript code on a victim browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T15:07:51.000Z
CVE-2019-18668 
An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This means that if an attacker provides a currency that does not exist and is worth less than this default, the attacker can eventually purchase an item for a significantly cheaper price.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T15:29:16.000Z
CVE-2019-18670 
In the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability (including search order hijacking, which searches for the missing DLL in the PATH environment variable), which is caused by an uncontrolled search path element for nvapi.dll, atiadlxx.dll, or atiadlxy.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T15:10:05.000Z
CVE-2019-18671 
Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attackers and the interface is reachable via WebUSB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-06T17:53:29.000Z
CVE-2019-18672 
Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets to known values via crafted messages. Notably, this breaks the security of U2F for new server registrations and invalidates existing registrations. This vulnerability can be exploited by unauthenticated attackers and the interface is reachable via WebUSB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-06T17:54:54.000Z
CVE-2019-18673 
On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover confidential secrets such as the PIN and BIP39 mnemonic. Note: BIP39 secrets are not displayed by default on this device. The side channel is relevant only if the attacker has enough control over the device's USB connection to make power-consumption measurements at a time when secret data is displayed. The side channel is not relevant in other circumstances, such as a stolen device that is not currently displaying secret data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-02T16:25:42.000Z
CVE-2019-18674 
An issue was discovered in Joomla! before 3.9.13. A missing access check in the phputf8 mapping files could lead to a path disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T01:34:16.000Z
CVE-2019-18675 
The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T13:44:26.000Z
CVE-2019-18676 
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote client that can reach the proxy port can trivially perform the attack via a crafted URI scheme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:23:49.000Z
CVE-2019-18677 
An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:21:59.000Z
CVE-2019-18678 
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:15:42.000Z
CVE-2019-18679 
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:14:03.000Z
CVE-2019-18680 
An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c that will cause denial of service, aka CID-91573ae4aed0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T14:13:32.000Z
CVE-2019-18683 
An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T15:36:14.000Z
CVE-2019-18684 
Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process. This occurs because of a race condition between determining a uid, and the setresuid and openat system calls. The attacker can write "ALL ALL=(ALL) NOPASSWD:ALL" to /proc/#####/fd/3 at a time when Sudo is prompting for a password. NOTE: This has been disputed due to the way Linux /proc works. It has been argued that writing to /proc/#####/fd/3 would only be viable if you had permission to write to /etc/sudoers. Even with write permission to /proc/#####/fd/3, it would not help you write to /etc/sudoers
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T15:53:31.000Z
CVE-2019-18780 
An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. These Veritas products are affected: Access 7.4.2 and earlier, Access Appliance 7.4.2 and earlier, Flex Appliance 1.2 and earlier, InfoScale 7.3.1 and earlier, InfoScale between 7.4.0 and 7.4.1, Veritas Cluster Server (VCS) 6.2.1 and earlier on Linux/UNIX, Veritas Cluster Server (VCS) 6.1 and earlier on Windows, Storage Foundation HA (SFHA) 6.2.1 and earlier on Linux/UNIX, and Storage Foundation HA (SFHA) 6.1 and earlier on Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T19:05:17.000Z
CVE-2019-18781 
An open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before 5809 that allows attackers to force users who click on a crafted link to be sent to a specified external site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T21:02:47.000Z
CVE-2019-18782 
SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the .htaccess protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T00:30:55.000Z