rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-16985 
In FusionPBX up to v4.5.7, the file app\xml_cdr\xml_cdr_delete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T15:27:06.000Z
CVE-2019-16986 
In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download of it. (resources\secure_download.php is also affected.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T15:38:00.000Z
CVE-2019-16987 
In FusionPBX up to v4.5.7, the file app\contacts\contact_import.php uses an unsanitized "query_string" variable coming from the URL, which is reflected in HTML, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T15:33:32.000Z
CVE-2019-16988 
In FusionPBX up to v4.5.7, the file app\basic_operator_panel\resources\content.php uses an unsanitized "eavesdrop_dest" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T15:49:28.000Z
CVE-2019-16989 
In FusionPBX up to v4.5.7, the file app\conferences_active\conference_interactive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T15:41:32.000Z
CVE-2019-16990 
In FusionPBX up to v4.5.7, the file app/music_on_hold/music_on_hold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname (base64 encoded) and allows a download of it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T14:20:53.000Z
CVE-2019-16991 
In FusionPBX up to v4.5.7, the file app\edit\filedelete.php uses an unsanitized "file" variable coming from the URL, which is reflected in HTML, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T15:45:12.000Z
CVE-2019-16992 
The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-29T23:52:58.000Z
CVE-2019-16993 
In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting them.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T11:30:40.000Z
CVE-2019-16994 
In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:03:39.000Z
CVE-2019-16995 
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:03:53.000Z
CVE-2019-16996 
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:44:06.000Z
CVE-2019-16997 
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:44:23.000Z
CVE-2019-16999 
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:35:39.000Z
CVE-2019-17000 
An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypass in a cross-origin frame if the document's policy explicitly allowed data: URIs. This vulnerability affects Firefox < 70.
Problem types: description: CSP bypass using object tag with data: URI
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T20:04:33.000Z
CVE-2019-17001 
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting). This is a separate bypass from CVE-2019-17000.*Note: This flaw only affected Firefox 69 and was not present in earlier versions.*. This vulnerability affects Firefox < 70.
Problem types: description: CSP bypass using object tag when script-src 'none' is specified
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:41:25.000Z
CVE-2019-17002 
If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox < 70.
Problem types: description: upgrade-insecure-requests was not being honored for links dragged and dropped
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:13:48.000Z
CVE-2019-17003 
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
Problem types: description:  Improper parsing of QR codes in address bar could lead to XSS
Affected products: vendor: Mozilla
product: Firefox for iOS
Published: 2023-02-16T00:00:00.000Z
CVE-2019-17005 
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Buffer overflow in plain text serializer
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:14:57.000Z
CVE-2019-17006 
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Problem types: description: missing length checks for cryptographic primitives
Affected products: vendor: Mozilla
product: NSS
Published: 2020-10-22T20:24:25.000Z
CVE-2019-17007 
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
Problem types: description: CERT_DecodeCertPackage() crash with Netscape Certificate Sequences
Affected products: vendor: Mozilla
product: NSS
Published: 2020-10-22T20:28:17.000Z
CVE-2019-17008 
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Use-after-free in worker destruction
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:17:04.000Z
CVE-2019-17009 
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Updater temporary files accessible to unprivileged processes
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:22:53.000Z
CVE-2019-17010 
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Use-after-free when performing device orientation checks
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:23:23.000Z
CVE-2019-17011 
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Use-after-free when retrieving a document in antitracking
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:23:58.000Z
CVE-2019-17012 
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
Problem types: description: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:24:43.000Z
CVE-2019-17013 
Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 71.
Problem types: description: Memory safety bugs fixed in Firefox 71
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:25:08.000Z
CVE-2019-17014 
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox < 71.
Problem types: description: Dragging and dropping a cross-origin resource, incorrectly loaded as an image, could result in information disclosure
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:25:39.000Z
CVE-2019-17015 
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Problem types: description: Memory corruption in parent process during new content process initialization on Windows
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:26:15.000Z
CVE-2019-17016 
When pasting a &lt;style&gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Problem types: description: Bypass of @namespace CSS sanitization during pasting
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:27:03.000Z
CVE-2019-17017 
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Problem types: description: Type Confusion in XPCVariant.cpp
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:27:36.000Z
CVE-2019-17018 
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox < 72.
Problem types: description: Windows Keyboard in Private Browsing Mode may retain word suggestions
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:28:09.000Z
CVE-2019-17019 
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 72.
Problem types: description: Python files could be inadvertently executed upon opening a download
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:28:47.000Z
CVE-2019-17020 
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not be applied to the contents of the XSL stylesheet. If the XSL sheet e.g. includes JavaScript, it would bypass any of the restrictions of the Content Security Policy applied to the XML document. This vulnerability affects Firefox < 72.
Problem types: description: Content Security Policy not applied to XSL stylesheets applied to XML documents
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:29:16.000Z
CVE-2019-17021 
During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Problem types: description: Heap address disclosure in parent process during content process initialization on Windows
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:29:40.000Z
CVE-2019-17022 
When pasting a &lt;style&gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &lt; and &gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Problem types: description: CSS sanitization does not escape HTML tags
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:30:09.000Z
CVE-2019-17023 
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox < 72.
Problem types: description: NSS may negotiate TLS 1.2 or below after a TLS 1.3 HelloRetryRequest had been sent
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:30:29.000Z
CVE-2019-17024 
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Problem types: description: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:31:03.000Z
CVE-2019-17025 
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 72.
Problem types: description: Memory safety bugs fixed in Firefox 72
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-08T21:31:26.000Z
CVE-2019-17026 
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.
Problem types: description: IonMonkey type confusion with StoreElementHole and FallibleStoreElement
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox
Published: 2020-03-02T04:05:03.000Z
CVE-2019-17040 
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T13:06:43.000Z
CVE-2019-17041 
An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in the parser for AIX log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon) but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-07T15:31:17.000Z
CVE-2019-17042 
An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-07T15:34:04.000Z
CVE-2019-17043 
An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:51:28.000Z
CVE-2019-17044 
An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:47:06.000Z
CVE-2019-17045 
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T14:04:48.000Z
CVE-2019-17046 
Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T14:04:57.000Z
CVE-2019-17049 
NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T18:37:21.000Z
CVE-2019-17050 
An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T18:51:51.000Z
CVE-2019-17051 
Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T19:05:56.000Z
CVE-2019-17052 
ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T13:11:56.000Z
CVE-2019-17053 
ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T13:11:31.000Z
CVE-2019-17054 
atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T13:11:06.000Z
CVE-2019-17055 
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T13:10:41.000Z
CVE-2019-17056 
llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T13:10:14.000Z
CVE-2019-17057 
Footy Tipping Software AFL Web Edition 2019 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-18T15:18:28.000Z