rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-8900 
A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute arbitrary code upon booting those devices. This vulnerability allows arbitrary code to be executed on the device. Exploiting the vulnerability requires physical access to the device: the device must be plugged in to a computer upon booting, and it must be put into Device Firmware Update (DFU) mode. The exploit is not persistent; rebooting the device overrides any changes to the device's software that were made during an exploited session on the device. Additionally, unless an attacker has access to the device's unlock PIN or fingerprint, an attacker cannot gain access to information protected by Apple's Secure Enclave or Touch ID features.
Affected products: vendor: Apple
product: SecureROM
default_status: unknown
Published: 2025-02-21T21:17:41.417Z
CVE-2019-8901 
This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action.
Problem types: description: An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2020-10-27T20:08:54.000Z
CVE-2019-8902 
An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T14:00:00.000Z
CVE-2019-8903 
index.js in Total.js Platform before 3.2.3 allows path traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T16:00:00.000Z
CVE-2019-8904 
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T17:00:00.000Z
CVE-2019-8905 
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T17:00:00.000Z
CVE-2019-8906 
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T17:00:00.000Z
CVE-2019-8907 
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T17:00:00.000Z
CVE-2019-8908 
An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/gif" header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T18:00:00.000Z
CVE-2019-8909 
An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T18:00:00.000Z
CVE-2019-8910 
An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T18:00:00.000Z
CVE-2019-8911 
An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T18:00:00.000Z
CVE-2019-8912 
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T18:00:00.000Z
CVE-2019-8917 
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T19:00:00.000Z
CVE-2019-8919 
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T20:00:00.000Z
CVE-2019-8920 
iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T17:08:48.000Z
CVE-2019-8921 
An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary heap data. The root cause can be found in the function service_attr_req of sdpd-request.c. The server does not check whether the CSTATE data is the same in consecutive requests, and instead simply trusts that it is the same.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-29T00:00:00.000Z
CVE-2019-8922 
A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer. There are no size checks whatsoever, resulting in a simple heap overflow if one can craft a request where the response is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_request (in sdpd-request.c), which also allocates the response buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-29T00:00:00.000Z
CVE-2019-8923 
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T15:46:15.000Z
CVE-2019-8924 
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T01:06:58.000Z
CVE-2019-8925 
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet (via the parameter schFilePath), allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via any file name, such as a schFilePath=C:\boot.ini value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T01:15:41.000Z
CVE-2019-8926 
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T13:57:40.000Z
CVE-2019-8927 
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc, emailId, excWeekModify, filterFlag, getFilter, mailReport, mset, popup, rep_schedule, rep_Type, schDesc, schName, schSource, selectDeviceDone, task, val10, and val11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T14:05:22.000Z
CVE-2019-8928 
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T14:08:31.000Z
CVE-2019-8929 
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T14:11:40.000Z
CVE-2019-8931 
Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T20:13:40.000Z
CVE-2019-8932 
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-17T20:11:29.000Z
CVE-2019-8933 
In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, clicking on Default Template Management, clicking on New Template, and modifying the filename from ../index.html to ../index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-19T02:00:00.000Z
CVE-2019-8934 
hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T19:11:30.000Z
CVE-2019-8935 
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-19T15:00:00.000Z
CVE-2019-8936 
NTP through 4.2.8p12 has a NULL Pointer Dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T15:37:31.000Z
CVE-2019-8937 
HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T14:55:56.000Z
CVE-2019-8938 
VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:38:49.000Z
CVE-2019-8939 
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-19T16:00:00.000Z
CVE-2019-8942 
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. Exploitation can leverage CVE-2019-8943.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T03:00:00.000Z
CVE-2019-8943 
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T03:00:00.000Z
CVE-2019-8944 
An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T03:00:00.000Z
CVE-2019-8945 
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:37:11.000Z
CVE-2019-8946 
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:36:20.000Z
CVE-2019-8947 
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:35:21.000Z
CVE-2019-8948 
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T04:00:00.000Z
CVE-2019-8950 
The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T04:00:00.000Z
CVE-2019-8951 
An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.62.0019 and newer), Bosch DIVAR IP 5000 (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.80.0033 and newer). Affected software products: Video Recording Manager (VRM) (vulnerable versions: 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.70.0056 and newer; 3.81.0032 and newer), Bosch Video Management System (BVMS) (vulnerable versions: 3.50.00XX; 3.55.00XX; 3.60.00XX; fixed versions: 7.5; 3.70.0056).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T20:51:33.000Z
CVE-2019-8952 
A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files on the system via the network interface. Affected hardware products: Bosch DIVAR IP 2000 (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.62.0019 and newer), Bosch DIVAR IP 5000 (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.80.0033 and newer). Affected software products: Video Recording Manager (VRM) (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; 3.70; 3.71 before 3.71.0032 ; fixed versions: 3.71.0032; 3.81.0032 and newer), Bosch Video Management System (BVMS) (vulnerable versions: 3.50.00XX; 3.55.00XX; 3.60.00XX; 3.70.0056; fixed versions: 7.5; 3.71.0032).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T21:14:34.000Z
CVE-2019-8953 
The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T16:00:00.000Z
CVE-2019-8954 
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-20T17:00:00.000Z
CVE-2019-8955 
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T23:00:00.000Z
CVE-2019-8956 
In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.
Problem types: description: Privilege escalation
Affected products: vendor: UNKNOWN
product: Linux Kernel
Published: 2019-04-01T18:39:32.000Z
CVE-2019-8960 
A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function used in lmadmin.exe can, given a certain message, call itself again and then wait for a further message. With a particular flag set in the original message, but no second message received, the function eventually return an unexpected value which leads to an exception being thrown. The end result can be process termination.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-21T14:20:52.000Z
CVE-2019-8961 
A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading function calls itself recursively given a certain condition in the received message, an unauthenticated remote attacker can repeatedly send messages of that type to cause a stack exhaustion condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-21T14:20:52.000Z
CVE-2019-8963 
A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-29T00:00:00.000Z
CVE-2019-8978 
An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web Tailor 8.8.3, 8.8.4, and 8.9 and Banner Enterprise Identity Services 8.3, 8.3.1, 8.3.2, and 8.4, in conjunction with SSO Manager. This vulnerability allows remote attackers to steal a victim's session (and cause a denial of service) by repeatedly requesting the initial Banner Web Tailor main page with the IDMSESSID cookie set to the victim's UDCID, which in the case tested is the institutional ID. During a login attempt by a victim, the attacker can leverage the race condition and will be issued the SESSID that was meant for this victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T18:37:43.000Z
CVE-2019-8979 
Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T05:00:00.000Z
CVE-2019-8980 
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T05:00:00.000Z
CVE-2019-8981 
tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T01:21:21.000Z
CVE-2019-8982 
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T14:00:00.000Z
CVE-2019-8983 
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T15:00:00.000Z
CVE-2019-8984 
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T15:00:00.000Z
CVE-2019-8985 
On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overflow that does not require authentication. This can cause denial of service (device restart) or remote code execution. This vulnerability can be triggered by a GET request with a long HTTP "Authorization: Basic" header that is mishandled by user_auth->user_ok in /bin/boa.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T19:00:00.000Z
CVE-2019-8986 TIBCO JasperReports Server XML Entity Expansion Vulnerability
The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.
Problem types: description: foo
Affected products: vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server for ActiveMatrix BPM
Credits: lang: en
value: TIBCO would like to extend its appreciation to Julien Szlamowicz and Sebastien Dudek of Synacktiv for discovery of this vulnerability.
Published: 2019-03-07T22:00:00.000Z
CVE-2019-8987 TIBCO Spotfire Data Science Vulnerable to Persistent Cross-Site Scripting
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.
Problem types: description: The impact of these multiple vulnerabilities includes the theoretical possibility that a malicious actor could gain more privileged access to the web server component.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Data Science for AWS
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Data Science
Published: 2019-03-26T17:54:12.271Z