rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-18912 
A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution.
Problem types: description: Potential instability of solution
Affected products: vendor: n/a
product: HP LaserJet Enterprise Printers
Published: 2021-11-09T14:55:11.000Z
CVE-2019-18913 
A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
Problem types: description: Possible Arbitrary Code Execution, Denial of Service, Information Disclosure.
Affected products: vendor: HP Inc.
product: HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.
Published: 2020-01-31T03:04:11.000Z
CVE-2019-18914 
A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers
Published: 2021-11-09T14:10:15.000Z
CVE-2019-18915 
A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to execute arbitrary code via an HP System Event Utility system service.
Problem types: description: Execution of Arbitrary Code.
Affected products: vendor: n/a
product: HP System Event Utility
Published: 2020-02-12T23:04:31.000Z
CVE-2019-18916 
A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client.
Problem types: description: elevation of privilege
Affected products: vendor: n/a
product: HP Color LaserJet Pro MFP M277 printers
Published: 2021-11-09T13:58:27.000Z
CVE-2019-18917 
A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.
Problem types: description: Account lockout bypass.
Affected products: vendor: n/a
product: HP ENVY 5000 All-in-One Printer series (M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A); HP DeskJet Ink Advantage 5000 All-in-One Printer series (M2U86A - M2U89B)
Published: 2020-03-16T19:53:54.000Z
CVE-2019-18922 
A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-29T18:51:44.000Z
CVE-2019-18923 
Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from go-camo's origin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T21:11:01.000Z
CVE-2019-18924 
Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T16:15:26.000Z
CVE-2019-18925 
Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T16:15:53.000Z
CVE-2019-18926 
Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the web page, allowing a malicious user to conduct a Cross Site Scripting attack against users of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T16:15:42.000Z
CVE-2019-18928 
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-15T03:45:16.000Z
CVE-2019-18929 
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T15:50:18.000Z
CVE-2019-18930 
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification logic in one of functions in libscheddl.so, and download_mgr.cgi makes it possible to enter large-sized f_idx inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T15:47:08.000Z
CVE-2019-18931 
Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T15:34:46.000Z
CVE-2019-18932 
log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T17:52:21.000Z
CVE-2019-18933 
In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication (e.g., GitHub or Google SSO) in an organization that also allows password authentication could have their personal API key stolen by an unprivileged attacker, allowing nearly full access to the user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T22:45:15.000Z
CVE-2019-18934 
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-19T17:30:01.000Z
CVE-2019-18935 
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (As of 2020.1.114, a default setting prevents the exploit. In 2019.3.1023, but not earlier versions, a non-default setting can prevent exploitation.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T00:00:00.000Z
CVE-2019-18936 
UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches an inconsistent state) via input data that triggers an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-21T00:08:23.000Z
CVE-2019-18937 
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi script, which executes TCL script content from an HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T18:50:42.000Z
CVE-2019-18938 
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T18:52:33.000Z
CVE-2019-18939 
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T18:53:08.000Z
CVE-2019-18942 Stored cross site scripting
Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Micro Focus
product: Solutions Business Manager
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2021-02-26T03:30:59.295Z
CVE-2019-18943 XML External Entity processing
Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.
Problem types: cwe_id: CWE-611
description: CWE-611 Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: Micro Focus
product: Solutions Business Manager
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2021-02-26T03:32:59.312Z
CVE-2019-18944 
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.
Problem types: cwe_id: CWE-80
description: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Affected products: vendor: Micro Focus
product: Solutions Business Manager
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2021-02-26T03:28:07.976Z
CVE-2019-18945 privilege escalation
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: Micro Focus
product: Solutions Business Manager
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2021-02-26T03:12:06.000Z
CVE-2019-18946 Session fixation
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.
Problem types: cwe_id: CWE-384
description: CWE-384 Session Fixation
Affected products: vendor: Micro Focus
product: Solutions Business Manager
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2021-02-26T03:04:38.890Z
CVE-2019-18947 information disclosure
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Micro Focus
product: Solutions Business Manager
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2021-02-26T03:07:45.666Z
CVE-2019-18948 
An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T16:52:56.000Z
CVE-2019-18949 
SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution via a chain of webpage redirections targeted to the user's browser configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T02:30:09.000Z
CVE-2019-18951 
SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T22:38:07.000Z
CVE-2019-18952 
SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T22:38:17.000Z
CVE-2019-18954 
Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious attacker can manipulate internal attributes by adding additional attributes to user input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T23:39:46.000Z
CVE-2019-18955 
The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T17:00:39.000Z
CVE-2019-18956 
Divisa Proxia Suite 9 < 9.12.16, 9.11.19, 9.10.26, 9.9.8, 9.8.43 and 9.7.10, 10.0 < 10.0.32, and 10.1 < 10.1.5, SparkSpace 1.0 < 1.0.30, 1.1 < 1.1.2, and 1.2 < 1.2.4, and Proxia PHR 1.0 < 1.0.30 and 1.1 < 1.1.2 allows remote code execution via untrusted Java deserialization. The proxia-error cookie is insecurely deserialized in every request (GET or POST). Thus, an unauthenticated attacker can easily craft a seria1.0lized payload in order to execute arbitrary code via the prepareError function in the com.divisait.dv2ee.controller.MVCControllerServlet class of the dv2eemvc.jar component. allows remote code execution via untrusted Java deserialization. The proxia-error cookie is insecurely deserialized in every request (GET or POST). Thus, an unauthenticated attacker can easily craft a serialized payload in order to execute arbitrary code via the prepareError function in the com.divisait.dv2ee.controller.MVCControllerServlet class of the dv2eemvc.jar component. Affected products include Proxia Premium Edition 2017 and Sparkspace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T15:08:14.000Z
CVE-2019-18957 
Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T13:57:47.000Z
CVE-2019-18958 
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T14:07:01.000Z
CVE-2019-18960 
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T12:25:02.000Z
CVE-2019-18976 
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-22T16:59:19.000Z
CVE-2019-18978 
An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:21:24.000Z
CVE-2019-18979 
Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T20:25:28.000Z
CVE-2019-18980 
On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. The only requirement is that the attacker have network access to the bulb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T21:03:01.000Z
CVE-2019-18981 
Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-15T04:22:51.000Z
CVE-2019-18982 
bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-15T04:22:34.000Z
CVE-2019-18985 
Pimcore before 6.2.2 lacks brute force protection for the 2FA token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-15T04:21:57.000Z
CVE-2019-18986 
Pimcore before 6.2.2 allow attackers to brute-force (guess) valid usernames by using the 'forgot password' functionality as it returns distinct messages for invalid password and non-existing users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-15T04:21:43.000Z
CVE-2019-18987 
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-15T05:08:00.000Z
CVE-2019-18988 
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the current version of the product. If an attacker were to know this key, they could decrypt protect information stored in the registry or configuration files of TeamViewer. With versions before v9.x , this allowed for attackers to decrypt the Unattended Access password to the system (which allows for remote login to the system as well as headless file browsing). The latest version still uses the same key for OptionPasswordAES but appears to have changed how the Unattended Access password is stored. While in most cases an attacker requires an existing session on a system, if the registry/configuration keys were stored off of the machine (such as in a file share or online), an attacker could then decrypt the required password to login to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-07T15:09:36.000Z
CVE-2019-18989 
A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T17:22:54.000Z
CVE-2019-18990 
A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T17:26:28.000Z