rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19741 
Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's executable file instead of its in-memory process (which can be significantly different from the executable file due to, for example, DLL injection). Data transmitted over the pipe is encrypted using a static key. Instead of hooking the pipe communication directly via WriteFileEx(), this can be bypassed by hooking the EVP_EncryptUpdate() function of libeay32.dll. The pipe takes the command CreateDirectory to create a directory and adjust the directory DACL. Calls to this function can be intercepted, the directory and the DACL can be replaced, and the manipulated DACL is written. Arbitrary DACL write is further achieved by creating a hardlink in a user-controlled directory that points to (for example) a service binary. The DACL is then written to this service binary, which results in escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T15:44:15.000Z
CVE-2019-19742 
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T12:19:49.000Z
CVE-2019-19743 
On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T16:35:38.000Z
CVE-2019-19745 
Contao 4.0 through 4.8.5 allows PHP local file inclusion. A back end user with access to the form generator can upload arbitrary files and execute them on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T14:17:35.000Z
CVE-2019-19746 
make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T02:22:33.000Z
CVE-2019-19747 
NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which allows an attacker with access to the Neuvector portal to authenticate as any valid LDAP user by providing a valid username and an empty password (provided that the active directory server has not been configured to reject empty passwords).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:41:24.000Z
CVE-2019-19748 
The Work Time Calendar app before 4.7.1 for Jira allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T02:36:13.000Z
CVE-2019-19750 
minerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T00:00:00.000Z
CVE-2019-19751 
easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-30T00:00:00.000Z
CVE-2019-19752 
nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-30T00:00:00.000Z
CVE-2019-19753 
SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using public IPv4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-30T00:00:00.000Z
CVE-2019-19754 
HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-09-26, the vendor indicated that they would consider fixing this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-30T00:00:00.000Z
CVE-2019-19755 
ethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated that they plan to fix this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-30T00:00:00.000Z
CVE-2019-19756 
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update. Affected logs are only accessible to authorized users in the First Failure Data Capture (FFDC) service log and log files on LXCA.
Problem types: cwe_id: CWE-532
description: CWE-532 Information Exposure Through Log Files
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.9
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Published: 2020-03-13T15:40:14.275Z
CVE-2019-19757 
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to be executed in the user's web browser if a specially crafted link is visited. The JavaScript code is executed on the user's system, not executed on LXCA itself.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Published: 2020-02-14T17:10:23.967Z
CVE-2019-19758 
A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page.
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: Lenovo
product: EZ Media & Backup Center ix2
vendor: Lenovo
product: EZ Media & Backup Center ix2-dl
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Lenovo thanks Mostafa Noureldin for reporting this issue.
Published: 2020-02-14T17:10:24.379Z
CVE-2019-19766 
The Bitwarden server through 1.32.0 has a potentially unwanted KDF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T18:07:17.000Z
CVE-2019-19767 
The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T19:39:40.000Z
CVE-2019-19768 
In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T19:38:59.000Z
CVE-2019-19769 
In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T19:39:20.000Z
CVE-2019-19770 
In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T19:39:10.000Z
CVE-2019-19771 
The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T19:49:40.000Z
CVE-2019-19772 
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-06T21:01:54.000Z
CVE-2019-19773 
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-06T21:01:24.000Z
CVE-2019-19774 
An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data stored in the database, and recover the MD5 hashes of the accounts used to authenticate the ManageEngine platform to the managed machines on the network (most often administrative accounts). Specifically, this bypasses these restrictions: a query cannot mention password, and a query result cannot have a password column.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T18:00:22.000Z
CVE-2019-19775 
The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T03:27:06.000Z
CVE-2019-19777 
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T01:05:52.000Z
CVE-2019-19778 
An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T01:06:17.000Z
CVE-2019-19781 
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T13:06:46.000Z
CVE-2019-19782 
The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T05:05:15.000Z
CVE-2019-19783 
An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploading is allowed (3.x) or certain non-default sieve options are enabled (2.x), a user with a mail account on the service can use a sieve script containing a fileinto directive to create any mailbox with administrator privileges, because of folder mishandling in autosieve_createfolder() in imap/lmtp_sieve.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T13:06:54.000Z
CVE-2019-19785 
ATasm 1.06 has a stack-based buffer overflow in the to_comma() function in asm.c via a crafted .m65 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T15:04:23.000Z
CVE-2019-19786 
ATasm 1.06 has a stack-based buffer overflow in the parse_expr() function in setparse.c via a crafted .m65 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T15:03:41.000Z
CVE-2019-19787 
ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a crafted .m65 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T15:03:14.000Z
CVE-2019-19788 
Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction from a third-party context.
Problem types: description: Bypass a restriction or similar
Affected products: vendor: Opera Software AS
product: Opera for Android
Published: 2019-12-18T21:31:10.000Z
CVE-2019-19789 
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T12:43:29.000Z
CVE-2019-19790 
Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart. All RadChart versions were affected. To avoid this vulnerability, you must remove RadChart's HTTP handler from a web.config (its type is Telerik.Web.UI.ChartHttpHandler).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T17:06:38.000Z
CVE-2019-19791 
In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints (when some LemonLDAP::NG setup options are used). For example, an attacker can insert index.fcgi/index.fcgi into a URL to bypass a Require directive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-29T00:00:00.000Z
CVE-2019-19792 
A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-03T14:32:48.000Z
CVE-2019-19793 
In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T17:34:26.000Z
CVE-2019-19794 
The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T21:46:59.000Z
CVE-2019-19795 
samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T21:59:13.000Z
CVE-2019-19796 
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T21:59:29.000Z
CVE-2019-19797 
read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-15T19:53:41.000Z
CVE-2019-19799 
Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T16:18:12.000Z
CVE-2019-19800 
Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T16:06:41.000Z
CVE-2019-19801 
In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-17T01:55:00.000Z
CVE-2019-19802 
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-17T02:00:30.000Z
CVE-2019-19805 
_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different amount of time to return depending on whether an email address is configured for the account name provided. This can be used by an attacker to enumerate accounts by guessing email addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T17:05:02.000Z
CVE-2019-19806 
_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the account name provided. This can be used by an attacker to enumerate accounts by guessing email addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T17:07:08.000Z
CVE-2019-19807 
In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a different purpose after refactoring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-15T22:59:14.000Z
CVE-2019-19810 
Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote unauthenticated attacker can exploit this vulnerability by sending crafted RMI requests to execute arbitrary code on the target host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-28T10:23:08.000Z
CVE-2019-19813 
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T05:43:52.000Z
CVE-2019-19814 
In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T05:27:41.000Z
CVE-2019-19815 
In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T06:29:27.000Z
CVE-2019-19816 
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T05:58:39.000Z
CVE-2019-19817 
The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T20:08:00.000Z
CVE-2019-19818 
The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T20:07:23.000Z
CVE-2019-19819 
The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T20:07:49.000Z
CVE-2019-19820 
An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402405 using METHOD_NEITHER results in a read primitive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T20:07:36.000Z
CVE-2019-19821 
A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages (community, essential, professional) in versions : 2.5.4, 2.6.3, 2.7.0
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T17:15:50.000Z