rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-20018 
A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:11:59.000Z
CVE-2019-20019 
An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:11:43.000Z
CVE-2019-20020 
A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:11:26.000Z
CVE-2019-20021 
A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:11:17.000Z
CVE-2019-20022 
An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:11:07.000Z
CVE-2019-20023 
A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:10:26.000Z
CVE-2019-20024 
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T01:10:55.000Z
CVE-2019-20025 
Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privilege level. An attacker could exploit this vulnerability by using this account to remotely log into an affected device. A successful exploit could allow the attacker to log into the device with manufacturer level access. This vulnerability affects SV9100 PBXes that are running software release 6.0 or higher. This vulnerability does not affect SV9100 software releases prior to 6.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:28:31.000Z
CVE-2019-20026 
The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:28:36.000Z
CVE-2019-20027 
Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:29:23.000Z
CVE-2019-20028 
Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:29:44.000Z
CVE-2019-20029 
An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged account, including an undocumented developer level of access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:29:49.000Z
CVE-2019-20030 
An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:29:58.000Z
CVE-2019-20031 
NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the telephone user interface (TUI), effectively allowing brute force attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:30:02.000Z
CVE-2019-20032 
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:30:06.000Z
CVE-2019-20033 
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-29T17:30:35.000Z
CVE-2019-20041 
wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colon; substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T07:14:52.000Z
CVE-2019-20042 
In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T07:14:37.000Z
CVE-2019-20043 
In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or unsticky via the REST API. For example, the contributor role does not have such rights, but this allowed them to bypass that. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T07:14:16.000Z
CVE-2019-20044 
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T13:09:43.000Z
CVE-2019-20045 
The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. Specially crafted malicious packets could cause disconnection of active authentic connections or reboot of device. This is a different issue than CVE-2019-16879 and CVE-2019-20046.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T16:18:38.000Z
CVE-2019-20046 
The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue than CVE-2019-16879 and CVE-2019-20045.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T16:18:35.000Z
CVE-2019-20047 
An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded in a reversible format. Sessions are stored in /sessions/sess_<sessionid>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T18:19:20.000Z
CVE-2019-20048 
An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with elevated privileges in the Web Directory component on port 389, may upload a PHP file to achieve Remote Code Execution as SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T18:19:04.000Z
CVE-2019-20049 
An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which helps to bypass authentication) with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the __construct() whereas the insecure file upload is in SetSkinImages().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T18:18:22.000Z
CVE-2019-20050 
Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated user should create a new folder with a "tricky" name in the filemanager. The exploit works when the php-fileinfo extension is disabled on the host system. The attacker must include shell metacharacters in the content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-30T15:47:32.000Z
CVE-2019-20051 
A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T21:59:01.000Z
CVE-2019-20052 
A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T21:59:20.000Z
CVE-2019-20053 
An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T21:59:11.000Z
CVE-2019-20054 
In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-28T04:07:15.000Z
CVE-2019-20055 
LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T04:48:08.000Z
CVE-2019-20056 
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T18:10:44.000Z
CVE-2019-20057 
com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T18:28:26.000Z
CVE-2019-20058 
Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T18:50:50.000Z
CVE-2019-20059 
payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. NOTE: this issue exists because of an incomplete fix for CVE-2019-19732.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T12:13:57.000Z
CVE-2019-20060 
MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T12:20:50.000Z
CVE-2019-20061 
The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T12:19:34.000Z
CVE-2019-20062 
MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash (the hash never expires until used).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T12:17:55.000Z
CVE-2019-20063 
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T19:59:59.000Z
CVE-2019-20070 
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:30:04.000Z
CVE-2019-20071 
On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:29:53.000Z
CVE-2019-20072 
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:29:43.000Z
CVE-2019-20073 
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:29:24.000Z
CVE-2019-20074 
On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:29:12.000Z
CVE-2019-20075 
On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:29:02.000Z
CVE-2019-20076 
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-29T23:28:52.000Z
CVE-2019-20077 
The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-05T22:05:17.000Z
CVE-2019-20079 
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T00:04:13.000Z
CVE-2019-20082 
ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-28T12:50:05.000Z
CVE-2019-20085 
TVT NVMS-1000 devices allow GET /.. Directory Traversal
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T02:28:29.000Z
CVE-2019-20086 
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:49:20.000Z
CVE-2019-20087 
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:49:09.000Z
CVE-2019-20088 
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:49:00.000Z
CVE-2019-20089 
GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:48:51.000Z
CVE-2019-20090 
An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:48:23.000Z
CVE-2019-20091 
An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:48:14.000Z
CVE-2019-20092 
An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_EsDescriptor::GetDecoderConfigDescriptor in Ap4EsDescriptor.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:48:06.000Z
CVE-2019-20093 
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:47:57.000Z
CVE-2019-20094 
An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_init_frame at fromgif.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T03:47:49.000Z
CVE-2019-20095 
mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T04:39:55.000Z
CVE-2019-20096 
In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T04:39:35.000Z
CVE-2019-20097 
Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the post-receive hook. A remote attacker with permission to clone and push files to a repository on the victim's Bitbucket Server or Bitbucket Data Center instance, can exploit this vulnerability to execute arbitrary commands on the Bitbucket Server or Bitbucket Data Center systems, using a file with specially crafted content.
Problem types: description: Argument Injection
Affected products: vendor: Atlassian
product: Bitbucket Server
vendor: Atlassian
product: Bitbucket Data Center
Published: 2020-01-15T20:46:56.225Z
CVE-2019-20098 
The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present.
Problem types: description: Cross Site Scripting (CSRF)
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-02-12T14:07:54.363Z
CVE-2019-20099 
The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present.
Problem types: description: Cross Site Scripting (CSRF)
Affected products: vendor: Atlassian
product: Jira Server
Published: 2020-02-12T14:07:54.400Z
CVE-2019-20100 
The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions prior to 5.4.21, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.2, and from version 7.1.0 before version 7.1.3. The vulnerable plugin is used by Atlassian Jira Server and Data Center before version 8.7.0. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present.
Problem types: description: Cross Site Scripting (CSRF)
Affected products: vendor: Atlassian
product: Application Links
vendor: Atlassian
product: Jira Server
Published: 2020-02-12T14:07:54.434Z
CVE-2019-20101 
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/<version>/check endpoint. The affected versions are before version 8.13.3, and from version 8.14.0 before 8.14.1.
Problem types: description: Improper Authorization
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-09-14T05:10:10.380Z
CVE-2019-20102 
The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Confluence Server
Published: 2020-04-22T03:30:15.017Z
CVE-2019-20104 
The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability.
Problem types: description: Improper Restriction of XML External Entity Reference
Affected products: vendor: Atlassian
product: Crowd
Published: 2020-02-06T03:10:24.881Z