rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-16276 
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T18:40:12.000Z
CVE-2019-16277 
PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:07:00.000Z
CVE-2019-16278 
Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:06:03.000Z
CVE-2019-16279 
A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:01:11.000Z
CVE-2019-16281 
Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T20:12:30.000Z
CVE-2019-16282 
In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Items/Customers fields parameter to inject arbitrary JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T17:02:37.000Z
CVE-2019-16283 
A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution.
Affected products: vendor: HP Inc.
product: HP Softpaq installer
Published: 2023-06-09T17:29:29.285Z
CVE-2019-16284 
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
Problem types: description: Elevation of privilege
Affected products: vendor: HP Inc.
product: Multiple - See https://support.hp.com/rs-en/document/c06456250
Published: 2019-11-05T20:16:57.000Z
CVE-2019-16285 
If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive.
Problem types: description: Information disclosure.
Affected products: vendor: HP
product: ThinPro Linux
Published: 2019-11-22T21:44:22.000Z
CVE-2019-16286 
An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by changing browser preferences to launch a separate process that in turn can execute arbitrary commands.
Problem types: description: Application filter bypass and arbitrary command execution.
Affected products: vendor: HP
product: ThinPro Linux
Published: 2019-11-22T21:49:18.000Z
CVE-2019-16287 
In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed commands with elevated privileges.
Problem types: description: Privilege Escalation
Affected products: vendor: HP
product: ThinPro Linux
Published: 2019-11-22T21:30:53.000Z
CVE-2019-16288 
On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T15:00:30.000Z
CVE-2019-16289 
The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T14:58:03.000Z
CVE-2019-16293 
The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T16:06:32.000Z
CVE-2019-16294 
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:39:57.000Z
CVE-2019-16295 
Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T20:59:30.000Z
CVE-2019-16297 
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:38:40.000Z
CVE-2019-16298 
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:39:56.000Z
CVE-2019-16299 
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types: HOST_ADDED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:40:58.000Z
CVE-2019-16300 
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOST_REMOVED. In combination with other applications, this could lead to the absence of intended code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:42:43.000Z
CVE-2019-16301 
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the following event types: HOST_MOVED. In combination with other applications, this could lead to the absence of intended code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:43:32.000Z
CVE-2019-16302 
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event types: HOST_MOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:44:19.000Z
CVE-2019-16303 
A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils). This allows an attacker (if able to obtain their own password reset URL) to compute the value for all other password resets for other accounts, thus allowing privilege escalation or account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T23:43:41.000Z
CVE-2019-16305 
In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T14:04:54.000Z
CVE-2019-16307 
A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter (webExMeetingLogin.jsp) and meetingKey parameter (deleteWebExMeetingCheck.jsp).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T16:19:22.000Z
CVE-2019-16309 
FlameCMS 3.3.5 has SQL injection in account/login.php via accountName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:23:17.000Z
CVE-2019-16310 
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:23:05.000Z
CVE-2019-16311 
NIUSHOP V1.11 has CSRF via search&#95;info to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:22:54.000Z
CVE-2019-16312 
s-cms V3.0 has XSS in index.php?type=text via the S_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:22:44.000Z
CVE-2019-16313 
ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:22:34.000Z
CVE-2019-16314 
Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T15:22:21.000Z
CVE-2019-16317 
In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../var/www/html/web/var/assets/ directory, a different vulnerability than CVE-2019-10867 and CVE-2019-16318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T17:01:41.000Z
CVE-2019-16318 
In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renaming of .php to .php.txt for long filenames, a different vulnerability than CVE-2019-10867 and CVE-2019-16317.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-14T17:01:15.000Z
CVE-2019-16319 
In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T15:15:14.000Z
CVE-2019-16320 
Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T15:43:29.000Z
CVE-2019-16321 
ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T15:42:49.000Z
CVE-2019-16326 
D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T17:27:42.000Z
CVE-2019-16327 
D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T17:28:35.000Z
CVE-2019-16328 
In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T19:51:43.000Z
CVE-2019-16330 
In NCH Express Accounts Accounting v7.02, persistent cross site scripting (XSS) exists in Invoices/Sales Orders/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Sales Orders/Items/Customers/Quotes fields parameter to inject arbitrary JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T16:55:11.000Z
CVE-2019-16332 
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T21:00:40.000Z
CVE-2019-16333 
GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T21:22:58.000Z
CVE-2019-16334 
In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: this may overlap CVE-2017-16636.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T21:22:43.000Z
CVE-2019-16335 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-15T21:45:50.000Z
CVE-2019-16336 
The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T17:59:37.000Z
CVE-2019-16337 
The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:12:34.000Z
CVE-2019-16338 
The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:15:03.000Z
CVE-2019-16340 
Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T14:49:17.000Z
CVE-2019-16344 
A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T14:05:56.000Z
CVE-2019-16346 
ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:57:42.000Z
CVE-2019-16347 
ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:57:33.000Z
CVE-2019-16348 
marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:56:41.000Z
CVE-2019-16349 
Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4_TrunAtom class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:56:24.000Z
CVE-2019-16350 
ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:55:53.000Z
CVE-2019-16351 
ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:55:41.000Z
CVE-2019-16352 
ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:55:16.000Z
CVE-2019-16353 
Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic from a remote device, as demonstrated by an RX7i device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T13:18:58.000Z
CVE-2019-16354 
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T14:10:55.000Z
CVE-2019-16355 
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T14:12:22.000Z
CVE-2019-16366 
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:09:27.000Z
CVE-2019-16370 
The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T17:50:28.000Z
CVE-2019-16371 
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T17:56:06.000Z
CVE-2019-16374 
Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T12:30:26.000Z
CVE-2019-16375 
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T00:00:00.000Z
CVE-2019-16377 
The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-23T15:08:39.000Z
CVE-2019-16378 
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T11:24:18.000Z
CVE-2019-16382 
An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also, CVE-2018-15591 exploitation can consequently be achieved by using PowerGrid with the /SEE parameter to execute the arbitrary command specified in the XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T16:57:41.000Z
CVE-2019-16383 
MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, or may be able to alter the database via the REST API, aka SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T14:34:34.000Z
CVE-2019-16384 
Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known and the user has permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T15:30:34.000Z
CVE-2019-16385 
Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T15:29:35.000Z
CVE-2019-16386 
PEGA Platform 7.x and 8.x is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyActivity=GetWebInfo&target=popup&pzHarnessID=random_harness_id request to get database schema information while using a low-privilege account. NOTE: The vendor states that this vulnerability was discovered using an administrator account and they are normal administrator functions. Therefore, the claim that the CVE was done with a low privilege account is incorrect
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T17:23:46.000Z