rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-17355 
In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T20:46:24.000Z
CVE-2019-17356 
The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T20:33:30.000Z
CVE-2019-17357 
Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T18:35:44.000Z
CVE-2019-17358 
Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-controlled data to populate arrays. An authenticated attacker could use this to influence object data values and control actions taken by Cacti or potentially cause memory corruption in the PHP module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:53:51.000Z
CVE-2019-17359 
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T13:39:54.000Z
CVE-2019-17360 
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a denial of service (DoS) condition because of Uncontrolled Resource Consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T17:39:36.000Z
CVE-2019-17361 
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-17T01:16:29.000Z
CVE-2019-17362 
In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T00:00:00.000Z
CVE-2019-17364 
The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T20:45:21.000Z
CVE-2019-17365 
Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T21:19:13.000Z
CVE-2019-17366 
Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T21:12:28.000Z
CVE-2019-17367 
OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, firewall/rules, network/wan, network/wan6, or network/lan under /cgi-bin/luci/admin/network/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-18T16:19:56.000Z
CVE-2019-17368 
S-CMS v1.5 has XSS in tpl.php via the member/member_login.php from parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T10:55:36.000Z
CVE-2019-17369 
OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T10:55:46.000Z
CVE-2019-17370 
OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into outfile" in a SELECT statement, but does not block the "into/**/outfile" manipulation. Therefore, the attacker can create a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T11:04:25.000Z
CVE-2019-17371 
gif2png 2.5.13 has a memory leak in the writefile function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T12:07:22.000Z
CVE-2019-17372 
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T12:06:57.000Z
CVE-2019-17373 
Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T12:07:13.000Z
CVE-2019-17375 
cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:08:35.000Z
CVE-2019-17376 
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:09:21.000Z
CVE-2019-17377 
cPanel before 82.0.15 allows self XSS in LiveAPI example scripts (SEC-524).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:10:01.000Z
CVE-2019-17378 
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:10:42.000Z
CVE-2019-17379 
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:11:19.000Z
CVE-2019-17380 
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:11:55.000Z
CVE-2019-17382 
An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). All created elements (Dashboard/Report/Screen/Map) are accessible by other users and by an admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T00:00:00.000Z
CVE-2019-17383 
The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T14:54:40.000Z
CVE-2019-17384 
The animate-it plugin before 2.3.4 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:38:06.000Z
CVE-2019-17385 
The animate-it plugin before 2.3.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:38:44.000Z
CVE-2019-17386 
The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T20:03:46.000Z
CVE-2019-17387 
An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-05T17:07:48.000Z
CVE-2019-17388 
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-05T17:08:39.000Z
CVE-2019-17389 
In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker (via a large packet) to prevent a RIOT MQTT-SN client from working until the device is restarted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T16:06:55.000Z
CVE-2019-17390 
An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in the Health Monitor service because PronestorHealthMonitor.exe access control is mishandled, aka PNB-2359.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T22:31:34.000Z
CVE-2019-17391 
An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:34:03.000Z
CVE-2019-17392 
Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T17:30:00.000Z
CVE-2019-17393 
The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauthorized actors. Basic authentication is used for the authentication, making it possible to base64 decode the sniffed credentials and discover the username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-18T16:04:41.000Z
CVE-2019-17394 
In the Seesaw Parent and Family application 6.2.5 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T20:59:54.000Z
CVE-2019-17395 
In the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T21:07:47.000Z
CVE-2019-17396 
In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T20:52:45.000Z
CVE-2019-17397 
In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T14:42:38.000Z
CVE-2019-17398 
In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T20:38:26.000Z
CVE-2019-17399 
The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T17:20:24.000Z
CVE-2019-17400 
The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T22:06:04.000Z
CVE-2019-17401 
libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_location_information_read_data in liblnk_location_information.c, a different issue than CVE-2019-17264. NOTE: the vendor has disputed this as described in the GitHub issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T18:21:18.000Z
CVE-2019-17402 
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T00:00:00.000Z
CVE-2019-17403 
Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T14:43:01.000Z
CVE-2019-17404 
Nokia IMPACT < 18A: allows full path disclosure
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T14:48:10.000Z
CVE-2019-17405 
Nokia IMPACT < 18A: has Reflected self XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T14:53:32.000Z
CVE-2019-17406 
Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T15:03:36.000Z
CVE-2019-17408 
parserIfLabel in inc/zzz_template.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the danger_key function can be bypassed via manipulations such as strtr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T11:43:05.000Z
CVE-2019-17409 
Reflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T00:11:32.000Z
CVE-2019-17414 
tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T21:52:29.000Z
CVE-2019-17415 
A Structured Exception Handler (SEH) based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T21:52:40.000Z
CVE-2019-17417 
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T22:30:45.000Z
CVE-2019-17418 
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T22:55:34.000Z
CVE-2019-17419 
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T22:55:17.000Z
CVE-2019-17420 
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T23:29:04.000Z
CVE-2019-17421 
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T14:36:02.000Z
CVE-2019-17424 
A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-22T11:54:22.000Z
CVE-2019-17426 
Automattic Mongoose through 5.7.4 allows attackers to bypass access control (in some applications) because any query object with a _bsontype attribute is ignored. For example, adding "_bsontype":"a" can sometimes interfere with a query filter. NOTE: this CVE is about Mongoose's failure to work around this _bsontype special case that exists in older versions of the bson parser (aka the mongodb/js-bson project).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T00:35:17.000Z
CVE-2019-17427 
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T00:42:09.000Z
CVE-2019-17428 
An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:44:28.000Z
CVE-2019-17429 
Adhouma CMS through 2019-10-09 has SQL Injection via the post.php p_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T10:46:58.000Z
CVE-2019-17430 
EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T10:45:29.000Z
CVE-2019-17431 
An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T11:15:53.000Z
CVE-2019-17432 
An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the row&#91;name&#93; parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T11:15:31.000Z
CVE-2019-17433 
z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T11:40:29.000Z
CVE-2019-17434 
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-10T11:40:40.000Z
CVE-2019-17435 
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.
Problem types: description: Escalation of Privilege
Affected products: vendor: Palo Alto Networks
product: GlobalProtect Agent for Windows
Published: 2019-10-16T18:06:47.000Z
CVE-2019-17436 
A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root users to overwrite root files on the file system.
Problem types: description: Escalation of Privilege
Affected products: vendor: Palo Alto Networks
product: GlobalProtect Agent for Linux and OSX
Published: 2019-10-16T18:06:44.000Z
CVE-2019-17437 PAN-OS: Custom-role users may escalate privileges
An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9.0 versions prior to 9.0.5. PAN-OS version 7.0 and prior EOL versions have not been evaluated for this issue.
Problem types: cwe_id: CWE-280
description: CWE-280 Improper Handling of Insufficient Permissions or Privileges
Affected products: vendor: Palo Alto Networks
product: PAN-OS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Christophe Schleypen of NCIA / NCIRC
Published: 2019-12-05T14:11:11.290Z