rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-17672 
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:03:52.000Z
CVE-2019-17673 
WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:03:42.000Z
CVE-2019-17674 
WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:03:18.000Z
CVE-2019-17675 
WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:03:29.000Z
CVE-2019-17676 
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T12:16:26.000Z
CVE-2019-18177 
In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-26T00:00:00.000Z
CVE-2019-18178 
Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFREE, which (by default) is a macro definition of vPortFree(), but it is reused to flush modified file content from the cache to disk by the function FF_FlushCache().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T19:37:35.000Z
CVE-2019-18179 
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn't have permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T00:00:00.000Z
CVE-2019-18180 Denial of service
Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: ((OTRS)) Community Edition 5.0.x version 5.0.38 and prior versions; 6.0.x version 6.0.23 and prior versions. OTRS AG: OTRS 7.0.x version 7.0.12 and prior versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2019-12-05T14:54:55.931Z
CVE-2019-18181 
In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T18:17:06.000Z
CVE-2019-18182 
pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable a non-default XferCommand and retrieve an attacker-controlled crafted database and package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T14:38:43.000Z
CVE-2019-18183 
pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable the non-default delta feature and retrieve an attacker-controlled crafted database and delta file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T14:36:18.000Z
CVE-2019-18184 
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T15:59:49.000Z
CVE-2019-18187 
Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.
Problem types: description: Arbitrary File Upload with Directory Traversal
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2019-10-28T19:28:32.000Z
CVE-2019-18188 
Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to the IUSR account, which has restricted permission and is unable to make major system changes. An attempted attack requires user authentication.
Problem types: description: Arbitrary File Upload with Command Injection
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
Published: 2019-10-28T19:28:32.000Z
CVE-2019-18189 
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.
Problem types: description: Root Login Bypass with Directory Traversal
Affected products: vendor: Trend Micro
product: Trend Micro Apex One, Trend Micro OfficeScan (OSCE), Trend Micro Worry-Free Business Security (WFBS)
Published: 2019-10-28T19:28:32.000Z
CVE-2019-18190 
Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.
Problem types: description: Unsigned Code Execution
Affected products: vendor: Trend Micro
product: Trend Micro Security (Consumer)
Published: 2019-12-09T18:50:15.000Z
CVE-2019-18191 
A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account.
Problem types: description: Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Deep Security as a Service
Published: 2019-12-16T21:00:15.000Z
CVE-2019-18192 
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T19:06:48.000Z
CVE-2019-18193 
In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain conditions. Fixed included in 3.4.109, 4.0.027.13, 4.0.125 and 5.0.013.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-03T13:30:16.000Z
CVE-2019-18194 
TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-10T17:26:29.000Z
CVE-2019-18195 
An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-28T13:55:04.000Z
CVE-2019-18196 
A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T15:51:29.000Z
CVE-2019-18197 
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-18T20:07:17.000Z
CVE-2019-18198 
In the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress() function in the fib6 suppression feature of net/ipv6/fib6_rules.c, when handling the FIB_LOOKUP_NOREF flag, can be exploited by a local attacker to corrupt memory, aka CID-ca7a03c41753.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-18T21:07:19.000Z
CVE-2019-18199 
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T13:48:56.000Z
CVE-2019-18200 
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, they are prone to keystroke injection attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T14:10:28.000Z
CVE-2019-18201 
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an attacker is able to eavesdrop on sensitive data such as passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T14:19:01.000Z
CVE-2019-18202 
Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-19T00:02:03.000Z
CVE-2019-18203 
On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn and KeyDisplay parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T17:35:31.000Z
CVE-2019-18204 
Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T18:31:06.000Z
CVE-2019-18205 
Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1. The browsing component did not properly sanitize user input (encoded in base64). This also applies to the search functionality for the searchKey parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T18:31:21.000Z
CVE-2019-18206 
A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T18:31:29.000Z
CVE-2019-18207 
In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T18:33:47.000Z
CVE-2019-18209 
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-19T00:50:06.000Z
CVE-2019-18210 
Persistent XSS in /course/modedit.php of Moodle through 3.7.2 allows authenticated users (Teacher and above) to inject JavaScript into the session of another user (e.g., enrolled student or site administrator) via the introeditor[text] parameter. NOTE: the discoverer and vendor disagree on whether Moodle customers have a reasonable expectation that anyone authenticated as a Teacher can be trusted with the ability to add arbitrary JavaScript (this ability is not documented on Moodle's Teacher_role page). Because the vendor has this expectation, they have stated "this report has been closed as a false positive, and not a bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-11T13:43:36.000Z
CVE-2019-18211 
An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T22:13:58.000Z
CVE-2019-18212 
XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T21:05:32.000Z
CVE-2019-18213 
XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with resultant SSRF (as well as SMB connection initiation that can lead to NetNTLM challenge/response capture for password cracking). This occurs in extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T21:06:46.000Z
CVE-2019-18214 
The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-19T13:32:49.000Z
CVE-2019-18215 
An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-18T20:00:48.000Z
CVE-2019-18216 
The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS battery, which reduces the value of a protection mechanism in which booting from a USB device is prohibited. Attackers who have physical laptop access can exhaust the main battery to reset the BIOS configuration, and then achieve direct access to the hard drive by booting a live USB OS without disassembling the laptop. NOTE: the vendor has apparently indicated that this is "normal" and use of the same battery for the BIOS and the overall system is a "new design." However, the vendor apparently plans to "improve" this an unspecified later time
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-20T15:21:24.000Z
CVE-2019-18217 
ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T03:12:31.000Z
CVE-2019-18218 
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T04:41:56.000Z
CVE-2019-18219 
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection within both GET or POST requests, via a crafted URL or via the UpgradeMode POST parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T13:14:41.000Z
CVE-2019-18220 
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests. This behavior could be abused by a remote unauthenticated attacker to trick Sitemagic users into performing unwarranted actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T13:17:10.000Z
CVE-2019-18221 
CoreHR Core Portal before 27.0.7 allows stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T21:12:18.000Z
CVE-2019-18222 
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T00:00:00.000Z
CVE-2019-18223 
ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3) name field in the Role Add form, (4) name or number field in the Edit Group form, (5) tagKey or tagValue field in the Recording Rules Configuration, or (6) txt_69735:/VemailAddress/value or txt_75767:/VemailFrom/value field in callrec/config.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-27T12:48:39.000Z
CVE-2019-18224 
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T16:21:46.000Z
CVE-2019-18225 
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T17:09:23.000Z
CVE-2019-18226 
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
Problem types: cwe_id: CWE-294
description: AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294
Affected products: vendor: n/a
product: Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders
Published: 2019-10-31T21:21:04.000Z
CVE-2019-18227 
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.
Problem types: cwe_id: CWE-611
description: IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
Affected products: vendor: n/a
product: Advantech WISE-PaaS/RMM
Published: 2019-10-31T21:01:42.000Z
CVE-2019-18228 
Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: Honeywell equIP series IP cameras
Published: 2019-10-31T21:09:16.000Z
CVE-2019-18229 
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information.
Problem types: cwe_id: CWE-89
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89
Affected products: vendor: n/a
product: Advantech WISE-PaaS/RMM
Published: 2019-10-31T21:05:02.000Z
CVE-2019-18230 
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: n/a
product: Honeywell equIP & Performance series IP cameras
Published: 2019-10-31T21:15:32.000Z
CVE-2019-18231 
Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request.
Problem types: cwe_id: CWE-319
description: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
Affected products: vendor: n/a
product: Advantech Spectre RT ERT351
Published: 2021-03-17T18:12:07.000Z
CVE-2019-18232 
SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system.
Problem types: cwe_id: CWE-59
description: IMPROPER LINK RESOLUTION BEFORE FILE ACCESS ('LINK FOLLOWING') CWE-59
Affected products: vendor: n/a
product: SafeNet Sentinel LDK License Manager Runtime
Published: 2019-12-11T22:22:42.000Z