rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-17607 
HongCMS 3.0.0 has XSS via the install/index.php servername parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T21:13:56.000Z
CVE-2019-17608 
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T21:15:35.000Z
CVE-2019-17609 
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T21:17:06.000Z
CVE-2019-17610 
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T21:18:16.000Z
CVE-2019-17611 
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T21:19:31.000Z
CVE-2019-17612 
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the _list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T22:56:35.000Z
CVE-2019-17613 
qibosoft 7 allows remote code execution because do/jf.php makes eval calls. The attacker can use the Point Introduction Management feature to supply PHP code to be evaluated. Alternatively, the attacker can access admin/index.php?lfj=jfadmin&action=addjf via CSRF, as demonstrated by a payload in the content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-15T22:56:23.000Z
CVE-2019-17621 
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T16:09:17.000Z
CVE-2019-17624 
"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an attacker can cause a denial of service (application crash) or possibly have unspecified other impact. Note: It is disputed if the X.Org X Server is involved or if there is a stack overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T10:59:54.000Z
CVE-2019-17625 
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T11:07:36.000Z
CVE-2019-17626 
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T11:29:38.000Z
CVE-2019-17627 
The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy (BLE) traffic during one authorized unlock action, and then calculating the authentication key via simple computations on the hex digits of a valid authentication request. This affects the Yale ZEN-R lock and unspecified other locks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T11:48:53.000Z
CVE-2019-17629 
CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "file manager > upload images" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T12:24:10.000Z
CVE-2019-17630 
CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "News > Add Article" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T12:23:59.000Z
CVE-2019-17631 
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.
Problem types: cwe_id: CWE-285
description: CWE-285: The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-10-17T17:38:26.000Z
CVE-2019-17632 
In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Credits: lang: en
value: This vulnerability was discovered by Jon Are Rakvåg, Security architect, SpareBank 1 Utvikling and Erlend Leiknes, Security Consultant, mnemonic as
Published: 2019-11-25T21:56:15.000Z
CVE-2019-17633 
For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and no TLS is not usually deployed on a public network but is often used for local installations (e.g. on personal laptops). In that case, even if the Che API is not exposed externally, some javascript running in the local browser is able to send requests to it.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: The Eclipse Foundation
product: Eclipse Che
Credits: lang: en
value: This vulnerability was discovered by Michael Grube
Published: 2019-12-19T17:05:12.000Z
CVE-2019-17634 
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to occur. The heap dump could be specially crafted, or could come from a crafted application or from an application processing malicious data. The vulnerability is present whena report is generated and opened from the Memory Analyzer graphical user interface, or when a report generated in batch mode is then opened in Memory Analyzer or by a web browser. The vulnerability could possibly allow code execution on the local system whenthe report is opened in Memory Analyzer.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Memory Analyzer
Credits: lang: en
value: Thanks to Iassen Minov for reporting the issue.
Published: 2020-01-17T18:35:13.000Z
CVE-2019-17635 
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the heap dump is reopened in Memory Analyzer. The user must chose to reopen an already parsed heap dump with an untrusted index for the problem to occur. The problem can be averted if the index files from an untrusted source are deleted and the heap dump is opened and reparsed. Also some local configuration data is subject to a deserialization vulnerability if the local data were to be replaced with a malicious version. This can be averted if the local configuration data stored on the file system cannot be changed by an attacker. The vulnerability could possibly allow code execution on the local system.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: The Eclipse Foundation
product: Eclipse Memory Analyzer
Published: 2020-01-17T18:35:13.000Z
CVE-2019-17636 
In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is "Mini-Browser", published as "@theia/mini-browser" on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of files on the host's filesystem, given their path, without restrictions on the requester's origin. This design is vulnerable to being exploited remotely through a DNS rebinding attack or a drive-by download of a carefully crafted exploit.
Problem types: cwe_id: CWE-345
description: CWE: CWE-345: Insufficient Verification of Data Authenticity
Affected products: vendor: The Eclipse Foundation
product: Eclipse Theia
Published: 2020-03-10T14:30:14.000Z
CVE-2019-17637 
In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference (XXE)
Affected products: vendor: The Eclipse Foundation
product: Eclipse Web Tools Platform
Published: 2020-07-15T14:55:13.000Z
CVE-2019-17638 
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this double release, two threads can acquire the same ByteBuffer from the pool and while thread1 is about to use the ByteBuffer to write response1 data, thread2 fills the ByteBuffer with other data. Thread1 then proceeds to write the buffer that now contains different data. This results in client1, which issued request1 seeing data from another request or response which could contain sensitive data belonging to client2 (HTTP session ids, authentication credentials, etc.). If the Jetty version cannot be upgraded, the vulnerability can be significantly reduced by configuring a responseHeaderSize significantly larger than the requestHeaderSize (12KB responseHeaderSize and 8KB requestHeaderSize).
Problem types: cwe_id: CWE-672
description: CWE-672: Operation on a Resource after Expiration or Release
cwe_id: CWE-675
description: CWE-675: Duplicate Operations on Resource
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2020-07-09T18:10:12.000Z
CVE-2019-17639 
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
Problem types: cwe_id: CWE-843
description: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2020-07-15T21:19:31.000Z
CVE-2019-17640 
In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the current working directory.
Problem types: cwe_id: CWE-23
description: CWE-23: Relative Path Traversal
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vert.x
Published: 2020-10-15T20:30:15.000Z
CVE-2019-17642 
An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/views/scan/ajax/call.php in the Autodiscovery plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T16:55:32.000Z
CVE-2019-17643 
An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides sensitive information via an unauthenticated direct request for include/monitoring/recurrentDowntime/GetXMLHost4Services.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T21:32:43.000Z
CVE-2019-17644 
An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/host/refreshMacroAjax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T21:54:24.000Z
CVE-2019-17645 
An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/service/refreshMacroAjax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T16:34:55.000Z
CVE-2019-17646 
An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/external.php?object=centreon_metric&action=listByService.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T19:49:32.000Z
CVE-2019-17647 
An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T19:33:56.000Z
CVE-2019-17650 
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check.
Problem types: description: Unauthorized code execution
Affected products: vendor: Fortinet
product: FortiClient for Mac OS
Published: 2019-11-21T15:03:58.000Z
CVE-2019-17651 
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiSIEM
Published: 2020-01-28T00:44:30.000Z
CVE-2019-17652 
A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted "StartAvCustomScan" type IPC client requests to the fctsched process due the argv data not been well sanitized.
Problem types: description: Escalation of privilege
Affected products: vendor: Fortinet
product: Fortinet FortiClientLinux
Published: 2020-02-06T15:23:33.000Z
CVE-2019-17653 
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiSIEM
Published: 2020-03-12T22:07:43.000Z
CVE-2019-17654 
An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack.
Problem types: description: Improper Access Control
Affected products: vendor: Fortinet
product: Fortinet FortiManager
Published: 2020-03-15T22:20:58.000Z
CVE-2019-17655 
A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an attacker to retrieve a logged-in SSL VPN user's credentials should that attacker be able to read the session file stored on the targeted device's system.
Problem types: description: Information disclosure
Affected products: vendor: Fortinet
product: Fortinet FortiOS and FortiProxy
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2020-06-16T20:14:55.000Z
CVE-2019-17656 
A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0.0 and below may allow an authenticated remote attacker to crash the service by sending a malformed PUT request to the server. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution.
Problem types: description: Crash of the HTTPD service
Affected products: vendor: Fortinet
product: Fortinet FortiProxy, FortiOS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
version: 3.1
Published: 2021-04-12T14:14:42.000Z
CVE-2019-17657 
An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Fortinet FortiSwitch
vendor: n/a
product: FortiAnalyzer
vendor: n/a
product: FortiManager
vendor: n/a
product: FortiAP-S/W2
Published: 2020-04-07T17:11:07.000Z
CVE-2019-17658 
An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.
Problem types: description: Escalation of privilege
Affected products: vendor: Fortinet
product: Fortinet FortiClientWindows
Published: 2020-03-12T21:26:00.000Z
CVE-2019-17659 
A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.
Problem types: cwe_id: CWE-798
description: Improper access control
Affected products: vendor: Fortinet
product: FortiSIEM
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.6
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:F/RL:X/RC:X
Published: 2025-03-17T13:06:07.828Z
CVE-2019-17660 
A cross-site scripting (XSS) vulnerability in admin/translate/translateheader_view.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T15:28:25.000Z
CVE-2019-17661 
A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers. By choosing formula code as his first or last name, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-08T18:00:17.000Z
CVE-2019-17662 
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T17:24:07.000Z
CVE-2019-17663 
D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T17:55:28.000Z
CVE-2019-17664 
NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try to execute the cmd.exe program from this working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T19:42:11.000Z
CVE-2019-17665 
NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T19:41:54.000Z
CVE-2019-17666 
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T01:47:59.000Z
CVE-2019-17667 
Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T10:49:52.000Z
CVE-2019-17668 
Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T11:05:49.000Z
CVE-2019-17669 
WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:03:06.000Z
CVE-2019-17670 
WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows paths are mishandled during certain validation of relative URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T00:00:00.000Z
CVE-2019-17671 
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:04:04.000Z