rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-9931 
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T21:41:25.000Z
CVE-2019-9932 
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T21:36:25.000Z
CVE-2019-9933 
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T21:37:02.000Z
CVE-2019-9934 
Various Lexmark products have Incorrect Access Control (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T15:52:10.000Z
CVE-2019-9935 
Various Lexmark products have Incorrect Access Control (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T15:53:19.000Z
CVE-2019-9936 
In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-22T07:07:04.000Z
CVE-2019-9937 
In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-22T07:07:21.000Z
CVE-2019-9938 
The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-22T07:07:32.000Z
CVE-2019-9939 
The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-22T07:07:41.000Z
CVE-2019-9942 
A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-23T14:31:53.000Z
CVE-2019-9943 
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-17T16:12:42.000Z
CVE-2019-9944 
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-17T16:10:25.000Z
CVE-2019-9945 
SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid user credentials. If customers have not followed SoftNAS deployment best practices and expose SoftNAS StorageCenter ports directly to the internet, this vulnerability allows an attacker to gain access to the Webadmin interface to create new users or execute arbitrary commands with administrative privileges, compromising both the platform and the data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-23T15:03:06.000Z
CVE-2019-9946 
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-02T17:22:52.000Z
CVE-2019-9947 
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-23T17:06:47.000Z
CVE-2019-9948 
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-23T17:07:08.000Z
CVE-2019-9949 
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitrary file write by abusing symlinks. Specifically, this occurs by uploading a tar archive that contains a symbolic link, then uploading another archive that writes a file to the link using the "cgi_untar" command. Other commands might also be susceptible. Code can be executed because the "name" parameter passed to the cgi_unzip command is not sanitized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T13:22:27.000Z
CVE-2019-9950 
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file checks credentials against /etc/shadow. However, the "nobody" account (which can be used to access the control panel API as a low-privilege logged-in user) has a default empty password, allowing an attacker to modify the My Cloud EX2 Ultra web page source code and obtain access to the My Cloud as a non-Admin My Cloud device user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T17:17:57.000Z
CVE-2019-9951 
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. The page web/jquery/uploader/uploadify.php can be accessed without any credentials, and allows uploading arbitrary files to any location on the attached storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T17:26:16.000Z
CVE-2019-9955 
On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T19:38:59.000Z
CVE-2019-9956 
In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-23T23:14:54.000Z
CVE-2019-9957 
Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The XSS payload is stored by creating a new user account, and setting the username to an XSS payload. The stored payload can then be triggered by accessing the "Set Security Levels" or "View User/Group Relationships" page. If the attacker does not currently have permission to create a new user, another vulnerability such as CSRF must be exploited first.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T18:14:12.000Z
CVE-2019-9958 
CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T18:10:08.000Z
CVE-2019-9959 
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-22T14:18:19.000Z
CVE-2019-9960 
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T00:27:05.000Z
CVE-2019-9961 
A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T18:45:13.000Z
CVE-2019-9962 
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:21:42.000Z
CVE-2019-9963 
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:21:53.000Z
CVE-2019-9964 
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:22:10.000Z
CVE-2019-9965 
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:22:21.000Z
CVE-2019-9966 
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:22:30.000Z
CVE-2019-9967 
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:22:45.000Z
CVE-2019-9968 
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:22:53.000Z
CVE-2019-9969 
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x385399.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:23:05.000Z
CVE-2019-9970 
Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T01:52:33.000Z
CVE-2019-9971 
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-07T17:56:52.000Z
CVE-2019-9972 
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-07T17:57:00.000Z
CVE-2019-9974 
diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T18:01:44.000Z
CVE-2019-9975 
DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T18:08:07.000Z
CVE-2019-9976 
The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T18:17:14.000Z
CVE-2019-9977 
The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T13:39:42.000Z
CVE-2019-9978 
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-24T14:47:26.000Z
CVE-2020-0001 
In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-140055304
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:25:12.000Z
CVE-2020-0002 
In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142602711
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:26:11.000Z
CVE-2020-0003 
In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-140195904
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:30:02.000Z
CVE-2020-0004 
In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120847476
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:31:15.000Z
CVE-2020-0005 
In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141552859
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:22:01.000Z
CVE-2020-0006 
In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to remote information disclosure in the NFC server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-139738828
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:32:49.000Z
CVE-2020-0007 
In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141890807
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:33:59.000Z
CVE-2020-0008 
In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142558228
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T18:34:50.000Z
CVE-2020-0009 
In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-08T15:31:49.000Z
CVE-2020-0010 
In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137014293References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:53:17.000Z
CVE-2020-0011 
In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648045References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:55:25.000Z
CVE-2020-0012 
In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648844
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:55:33.000Z
CVE-2020-0014 
It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-128674520
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:20:09.000Z
CVE-2020-0015 
In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139017101
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:20:24.000Z