rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19822 
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T17:55:12.000Z
CVE-2019-19823 
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T17:49:21.000Z
CVE-2019-19824 
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T17:03:58.000Z
CVE-2019-19825 
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. (Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform router actions via HTTP requests with Basic Authentication.) This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T16:50:28.000Z
CVE-2019-19826 
The Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize calls in handlers/views_handler_filter_dynamic_fields.inc, as demonstrated by PHP object injection, involving a field_names object and an Archive_Tar object, for file deletion. Code execution might also be possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T22:21:59.000Z
CVE-2019-19829 
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T17:15:19.000Z
CVE-2019-19830 
_core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T04:33:32.000Z
CVE-2019-19832 
Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. (The frmUserName value must have a unique name.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T17:12:49.000Z
CVE-2019-19833 
In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in applications that do not have a user login area).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T17:08:42.000Z
CVE-2019-19834 
Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T18:09:32.000Z
CVE-2019-19835 
SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T12:44:48.000Z
CVE-2019-19836 
AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T18:13:49.000Z
CVE-2019-19837 
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T12:26:59.000Z
CVE-2019-19838 
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T13:41:10.000Z
CVE-2019-19839 
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T13:42:32.000Z
CVE-2019-19840 
A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T20:32:36.000Z
CVE-2019-19841 
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T20:29:54.000Z
CVE-2019-19842 
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T20:31:11.000Z
CVE-2019-19843 
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T18:48:04.000Z
CVE-2019-19844 
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T18:07:11.000Z
CVE-2019-19845 
In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T03:48:08.000Z
CVE-2019-19846 
In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T03:49:04.000Z
CVE-2019-19847 
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T15:04:52.000Z
CVE-2019-19848 
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T16:02:50.000Z
CVE-2019-19849 
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension ext:lowlevel (Backend Module: DB Check) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension ext:sys_action installed, with a valid backend user who has limited privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T16:03:31.000Z
CVE-2019-19850 
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backend user who has administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T16:03:15.000Z
CVE-2019-19851 
An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Debug/Test page of the Superfecta module at the admin/config.php?display=superfecta URI. This affects Superfecta through 13.0.4.7, 14.x through 14.0.24, and 15.x through 15.0.2.20.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T15:07:37.000Z
CVE-2019-19852 
An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T20:36:44.000Z
CVE-2019-19854 
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. It does not use CSRF Tokens to mitigate against CSRF; it uses the Origin header (which must match the request origin). This is problematic in conjunction with XSS: one can escalate privileges from User level to Administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T22:51:42.000Z
CVE-2019-19855 
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T22:50:28.000Z
CVE-2019-19856 
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allows stored XSS via the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T22:49:10.000Z
CVE-2019-19857 
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the Change Password screen. Thus, requiring the admin to enter an Old Password value on the Change Password screen does not enhance security. This is problematic in conjunction with XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T22:47:27.000Z
CVE-2019-19858 
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the author parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T22:46:09.000Z
CVE-2019-19859 
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T22:43:59.000Z
CVE-2019-19865 
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T15:23:26.000Z
CVE-2019-19866 
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T15:22:24.000Z
CVE-2019-19869 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by using the IosHttp service and the JSON interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T14:06:07.000Z
CVE-2019-19872 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T14:08:11.000Z
CVE-2019-19873 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T16:18:34.000Z
CVE-2019-19874 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T16:20:06.000Z
CVE-2019-19875 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T16:21:13.000Z
CVE-2019-19876 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T16:22:13.000Z
CVE-2019-19877 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T16:23:21.000Z
CVE-2019-19878 
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T16:24:00.000Z
CVE-2019-19879 
HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T16:29:17.000Z
CVE-2019-19880 
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T05:07:13.000Z
CVE-2019-19882 
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing --disable-account-tools-setuid, and without a PAM configuration suitable for use with setuid account management tools. This combination leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used by unprivileged local users to escalate privileges to root in multiple ways. This issue became much more relevant in approximately December 2019 when an unrelated bug was fixed (i.e., the chmod calls to suidusbins were fixed in the upstream Makefile which is now included in the release version 4.8).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T15:07:59.000Z
CVE-2019-19885 
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-16T12:55:30.000Z
CVE-2019-19886 
Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T21:59:09.000Z
CVE-2019-19887 
bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T18:40:43.000Z
CVE-2019-19888 
jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T18:40:33.000Z
CVE-2019-19889 
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T18:52:52.000Z
CVE-2019-19890 
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T18:53:05.000Z
CVE-2019-19891 
An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful exploit may allow the attacker to intercept sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-13T17:39:53.000Z
CVE-2019-19893 
In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T20:55:25.000Z
CVE-2019-19894 
In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renaming and replacing %SYSTEMDRIVE%\IXP\DATA\IXPAS.IXP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T20:55:15.000Z
CVE-2019-19895 
In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement and execute code in the context of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T20:55:06.000Z
CVE-2019-19896 
In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of directories and files (e.g., bat-scripts), which allows execution of code in the context of NT AUTHORITY\SYSTEM on the target server and clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T20:54:56.000Z
CVE-2019-19897 
In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT AUTHORITY\SYSTEM context of the target system by using the Execute Command Line function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T20:54:44.000Z
CVE-2019-19898 
In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T20:54:30.000Z
CVE-2019-19899 
Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessible via the public static java.lang.Class java.lang.Class.forName(java.lang.Module,java.lang.String) signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T23:24:01.000Z