rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-18784 
SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T02:13:46.000Z
CVE-2019-18785 
SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T00:31:02.000Z
CVE-2019-18786 
In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T02:29:34.000Z
CVE-2019-18790 
An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls can be hijacked as a result. The only thing that needs to be known is the peer's name; authentication details such as passwords do not need to be known. This vulnerability is only exploitable when the nat option is set to the default, or auto_force_rport.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-22T16:22:55.000Z
CVE-2019-18791 
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-13T15:01:54.000Z
CVE-2019-18792 
An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake FIN packet is injected just before the PUSH ACK packet we want to bypass. The PUSH ACK packet (containing the data) will be ignored by Suricata because it overlaps the FIN packet (the sequence and ack number are identical in the two packets). The client will ignore the fake FIN packet because the ACK flag is not set. Both linux and windows clients are ignoring the injected packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T17:52:54.000Z
CVE-2019-18793 
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T19:23:06.000Z
CVE-2019-18794 
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-16T12:50:47.000Z
CVE-2019-18795 
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-16T12:51:22.000Z
CVE-2019-18796 
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-16T12:51:42.000Z
CVE-2019-18797 
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T15:07:28.000Z
CVE-2019-18798 
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T15:07:20.000Z
CVE-2019-18799 
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T15:07:09.000Z
CVE-2019-18800 
Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Viber protocol traffic is encrypted. TCP data packet 9 on port 4244 from the victim's device contains cleartext information such as the device model and OS version, IMSI, and 20 bytes of udid in a binary format, which is located at offset 0x14 of this packet. Then, the attacker installs Viber on his device, initiates the registration process for any phone number, but doesn't enter a pin from SMS. Instead, he closes Viber. Next, the attacker rewrites his udid with the victim's udid, modifying the viber_udid file, which is located in the Viber preferences folder. (The udid is stored in a hexadecimal format.) Finally, the attacker starts Viber again and enters the pin from SMS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T15:34:07.000Z
CVE-2019-18801 
An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy's access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T12:20:00.000Z
CVE-2019-18802 
An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass "example.com" matchers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T12:21:26.000Z
CVE-2019-18804 
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T05:25:46.000Z
CVE-2019-18805 
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T13:08:05.000Z
CVE-2019-18806 
A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:30:08.000Z
CVE-2019-18807 
Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:29:59.000Z
CVE-2019-18808 
A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:29:46.000Z
CVE-2019-18809 
A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:29:36.000Z
CVE-2019-18810 
A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka CID-a0ecd6fdbf5d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:29:27.000Z
CVE-2019-18811 
A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:29:19.000Z
CVE-2019-18812 
A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:29:08.000Z
CVE-2019-18813 
A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:28:59.000Z
CVE-2019-18814 
An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T15:28:46.000Z
CVE-2019-18815 
PopojiCMS 2.0.1 allows refer= Open Redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T16:08:24.000Z
CVE-2019-18816 
po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T16:08:17.000Z
CVE-2019-18817 
Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T14:01:26.000Z
CVE-2019-18818 
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T21:02:58.000Z
CVE-2019-18819 
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x00000000000003a7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T20:43:21.000Z
CVE-2019-18820 
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T20:43:02.000Z
CVE-2019-18821 
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T20:43:11.000Z
CVE-2019-18822 
A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which the program runs - by default, the callrec account) to elevate privileges to root by abusing the callrec-rs@.service. The callrec-rs@.service starts the /opt/callrec/bin/rs binary with root privileges, and this binary is owned by callrec. It can be replaced by a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-14T17:18:09.000Z
CVE-2019-18823 
HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-27T14:07:26.000Z
CVE-2019-18824 
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T13:47:47.000Z
CVE-2019-18825 
Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Base Unit implements encryption at rest using encryption keys which are shared across all ClickShare Base Units of models CS-100 & CSE-200.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T13:49:22.000Z
CVE-2019-18826 
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T16:13:09.000Z
CVE-2019-18827 
On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T16:15:00.000Z
CVE-2019-18828 
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access via debug interfaces, which are by default not enabled on production devices) of the embedded Linux on the ClickShare Button is using a weak password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T16:17:12.000Z
CVE-2019-18829 
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'Clickshare_For_Windows.exe' binary on the ClickShare Button (R9861500D01) loads a number of DLL files dynamically without verifying their integrity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T13:50:54.000Z
CVE-2019-18830 
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code execution on the ClickShare Button with the privileges of the user 'nobody'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T16:19:45.000Z
CVE-2019-18831 
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button firmware contains the private key of a test device-certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T16:21:08.000Z
CVE-2019-18832 
Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable (OTP) AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T13:51:58.000Z
CVE-2019-18833 
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2).. The encryption key of the media content which is shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An attacker who is able to perform a Man-in-the-Middle attack between the TLS connection, is able to obtain the encryption key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T13:53:06.000Z
CVE-2019-18834 
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-23T19:42:47.000Z
CVE-2019-18835 
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T23:12:07.000Z
CVE-2019-18836 
Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-11T00:17:35.000Z
CVE-2019-18837 
An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpath.c.
Problem types: description: Directory Traversal
Affected products: vendor: crun
product: crun
Published: 2019-11-13T20:01:16.000Z
CVE-2019-18838 
An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated "Invalid request" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request's Host header causes a NULL pointer dereference, resulting in abnormal termination of the Envoy process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T12:22:33.000Z
CVE-2019-18839 
FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T14:41:56.000Z
CVE-2019-18840 
In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location index is mishandled. Because a pointer is overwritten, there is an invalid free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-09T12:58:52.000Z
CVE-2019-18841 
Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-11T00:05:37.000Z
CVE-2019-18842 
A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by opening a Wi-Fi access point nearby with a malicious SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T20:18:49.000Z
CVE-2019-18844 
The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T19:12:37.000Z
CVE-2019-18845 
The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via ZwOpenSection and ZwMapViewOfSection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-09T17:05:16.000Z
CVE-2019-18846 
OX App Suite through 7.10.2 allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T20:53:19.000Z
CVE-2019-18847 
Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T13:47:52.000Z
CVE-2019-18848 
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T14:23:54.000Z
CVE-2019-18849 
In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-11T03:21:55.000Z
CVE-2019-18850 
TrevorC2 v1.1/v1.2 fails to prevent fingerprinting primarily via a discrepancy between response headers when responding to different HTTP methods, also via predictible responses when accessing and interacting with the "SITE_PATH_QUERY".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T12:42:03.000Z
CVE-2019-18852 
Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842 C1 v3.00.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-11T13:42:47.000Z