rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-9748 
In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer. This can lead to a segmentation fault in uncompress_nlabel in mdns.c and a crash of the server (depending on the memory protection of the CPU and the operating system), or disclosure of memory content via error messages or a server response. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T19:00:00.000Z
CVE-2019-9749 
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After processing a crafted packet, the plugin's mqtt_packet_drop function (in /plugins/in_mqtt/mqtt_prot.c) executes the memmove() function with a negative size parameter. That leads to a crash of the whole Fluent Bit server via a SIGSEGV signal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T19:00:00.000Z
CVE-2019-9750 
In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01 Unauthorized" response is mishandled. NOTE: the vendor states "While this is an interesting attack, there is no plan for maintainer to fix, as we are migrating to IoTivity Lite."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T19:00:00.000Z
CVE-2019-9751 
An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. This is related to Kernel/Output/Template/Document.pm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T22:00:00.000Z
CVE-2019-9752 
An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T22:00:00.000Z
CVE-2019-9753 
An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ Articles, Service Catalogue Items, ITSM Configuration Items.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T18:05:33.000Z
CVE-2019-9754 
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 1 byte out of bounds write in the end_macro function in tccpp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-13T22:00:00.000Z
CVE-2019-9755 
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T14:57:27.000Z
CVE-2019-9756 
An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a different vulnerability than CVE-2019-9732.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-17T16:11:22.000Z
CVE-2019-9757 
An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T16:30:50.000Z
CVE-2019-9758 
An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators from security/permissions.view, security/addUsers.view, or wiki/Administration/page.view in the admin panel, leading to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T16:40:27.000Z
CVE-2019-9759 
An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_handle.php run_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-02T13:22:44.000Z
CVE-2019-9760 
FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. Long responses can also crash the FTP client with memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T01:00:00.000Z
CVE-2019-9761 
An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T01:00:00.000Z
CVE-2019-9762 
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T01:00:00.000Z
CVE-2019-9763 
An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendor subsequently patched this).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T17:02:44.000Z
CVE-2019-9764 
HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T13:05:51.000Z
CVE-2019-9765 
In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9766 
Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9767 
Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wma file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9768 
Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9769 
PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9770 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9771 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9772 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9773 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9774 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9775 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9776 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than CVE-2019-9779).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9777 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9778 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9779 
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than CVE-2019-9776).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T07:00:00.000Z
CVE-2019-9785 
gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a javascript:window.parent.top.require('child_process').execFile substring in the onerror attribute of an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T14:00:00.000Z
CVE-2019-9787 
WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access, which allows arbitrary changes to .php files. This is related to wp-admin/includes/ajax-actions.php and wp-includes/comment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-14T16:00:00.000Z
CVE-2019-9788 
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Memory safety bugs fixed in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9789 
Mozilla developers and community members reported memory safety bugs present in Firefox 65. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 66.
Problem types: description: Memory safety bugs fixed in Firefox 66
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9790 
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Use-after-free when removing in-use DOM elements
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9791 
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the constructor function is entered through on-stack replacement (OSR). This allows for possible arbitrary reading and writing of objects during an exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9792 
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9793 
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully controlled, incorrect range in circumstances where users have explicitly disabled Spectre mitigations. *Note: Spectre mitigations are currently enabled for all users by default settings.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Improper bounds checks when Spectre mitigations are disabled
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9794 
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Command line arguments not discarded during execution
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9795 
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Type-confusion in IonMonkey JIT compiler
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9796 
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leaves a dangling pointer to the driver's observer array. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Use-after-free with SMIL animation controller
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9797 
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox < 66.
Problem types: description: Cross-origin theft of images with createImageBitmap
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9798 
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party applications to execute a man-in-the-middle attack if a malicious code was written to that location and loaded. *Note: This issue only affects Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.
Problem types: description: Library is loaded from world writable APITRACE_LIB location
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9799 
Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox < 66.
Problem types: description: Information disclosure via IPC channel messages
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9800 
Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.
Problem types: description: Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and Thunderbird 60.7
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2019-07-23T13:26:14.000Z
CVE-2019-9801 
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
Problem types: description: Windows programs that are not 'URL Handlers' are exposed to web content
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9802 
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.
Problem types: description: Chrome process information leak
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9803 
The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox < 66.
Problem types: description: Upgrade-Insecure-Requests incorrectly enforced for same-origin navigation
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9804 
In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash on macOS. *Note: This issue only affects macOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.
Problem types: description: Code execution through 'Copy as cURL' in Firefox Developer Tools on macOS
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9805 
A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential memory corruption. This vulnerability affects Firefox < 66.
Problem types: description: Potential use of uninitialized memory in Prio
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:22.000Z
CVE-2019-9806 
A vulnerability exists during authorization prompting for FTP transaction where successive modal prompts are displayed and cannot be immediately dismissed. This allows for a denial of service (DOS) attack. This vulnerability affects Firefox < 66.
Problem types: description: Denial of service through successive FTP authorization prompts
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:13:23.000Z
CVE-2019-9807 
When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox < 66.
Problem types: description: Text sent through FTP connection can be incorporated into alert messages
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-04-26T16:10:51.000Z