rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-7290 
An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sandboxed process may be able to circumvent sandbox restrictions.
Problem types: description: A sandboxed process may be able to circumvent sandbox restrictions
Affected products: vendor: Apple
product: Shortcuts
Published: 2019-12-18T17:33:16.000Z
CVE-2019-7291 
A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.
Problem types: description: An attacker in a privileged position may be able to perform a denial of service attack
Affected products: vendor: Apple
product: AirPort Base Station Firmware Update
vendor: Apple
product: AirPort Base Station Firmware Update
Published: 2020-10-27T19:24:01.000Z
CVE-2019-7292 
A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory.
Problem types: description: Processing maliciously crafted web content may result in the disclosure of process memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-12-18T17:33:16.000Z
CVE-2019-7293 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to read kernel memory.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2019-12-18T17:33:16.000Z
CVE-2019-7295 
typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T21:00:00.000Z
CVE-2019-7296 
typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T21:00:00.000Z
CVE-2019-7297 
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T22:00:00.000Z
CVE-2019-7298 
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of ' /bin/telnetd' for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-01T06:00:00.000Z
CVE-2019-7299 
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T19:42:49.000Z
CVE-2019-7300 
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-01T09:00:00.000Z
CVE-2019-7301 
Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metacharacters in the index.cgi?action=View_Cert certname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-01T09:00:00.000Z
CVE-2019-7303 Snapd seccomp filter TIOCSTI ioctl bypass
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.
Problem types: cwe_id: CWE-628
description: CWE-628
Affected products: vendor: Canonical
product: snapd
Credits: lang: en
value: Jann Horn
Published: 2019-04-23T15:57:32.592Z
CVE-2019-7304 Local privilege escalation via snapd socket
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
Problem types: description: Type confusion when performing access control check
Affected products: vendor: Canonical
product: snapd
Credits: lang: en
value: Chris Moberly
Published: 2019-04-23T15:57:32.649Z
CVE-2019-7305 eXtplorer exposes /usr and /etc/extplorer over HTTP
Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information disclosure and potentially remote code execution on the web server. This issue affects all versions of eXtplorer in Ubuntu and Debian
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Canonical
product: eXtplorer
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Sander Bos
Published: 2020-04-09T23:50:11.945Z
CVE-2019-7306 Byobu apport hook uploads user's ~/.screenrc
Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu
Problem types: description: TODO
Affected products: vendor: Canonical
product: byobu
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Sander Bos
Published: 2020-04-17T01:45:14.788Z
CVE-2019-7307 Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml
Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.
Problem types: cwe_id: CWE-367
description: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: Ubuntu
product: apport
Credits: lang: en
value: Kevin Backhouse of Semmle Security Research Team
Published: 2019-08-29T14:40:18.750Z
CVE-2019-7308 
kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-01T22:00:00.000Z
CVE-2019-7309 
In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-03T02:00:00.000Z
CVE-2019-7310 
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-03T03:00:00.000Z
CVE-2019-7311 
An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router. The admin password is stored in base64 cleartext in an "admin-auth" cookie. An attacker sniffing the network at the time of login could acquire the router's admin password. Alternatively, gaining physical access to the victim's computer soon after an administrative login could result in compromise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T15:41:42.000Z
CVE-2019-7312 
Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-03T08:00:00.000Z
CVE-2019-7313 
www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-03T08:00:00.000Z
CVE-2019-7314 
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T02:00:00.000Z
CVE-2019-7315 
Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability (4.x versions exist only for other Genie Access products).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T18:31:55.000Z
CVE-2019-7316 
An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T07:00:00.000Z
CVE-2019-7317 
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T07:00:00.000Z
CVE-2019-7319 
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:22:11.000Z
CVE-2019-7321 
Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-13T17:20:13.000Z
CVE-2019-7323 
GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the LogMXUpdater.class file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T16:00:00.000Z
CVE-2019-7324 
app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7325 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7326 
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (console.php) because proper filtration is omitted. This relates to the index.php?view=monitor Host Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7327 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7328 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7329 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7330 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7331 
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7332 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter value in the view download (download.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7333 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download (download.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7334 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view export (export.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7335 
Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7336 
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view _monitor_filters.php contains takes in input from the user and saves it into the session, and retrieves it later (insecurely). The values of the MonitorName and Source parameters are being displayed without any output filtration being applied. This relates to the view=cycle value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7337 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7338 
Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value on the web page without applying any proper filtration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7339 
POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'level' parameter value in the view log (log.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7340 
POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7341 
Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[LinkedMonitors]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7342 
POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[AutoExecuteCmd]' parameter value in the view filter (filter.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7343 
Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7344 
Reflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'filter' as it insecurely prints the 'filter[Name]' (aka Filter name) value on the web page without applying any proper filtration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7345 
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'options' (options.php) does no input validation for the WEB_TITLE, HOME_URL, HOME_CONTENT, or WEB_CONSOLE_BANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7346 
A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7347 
A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records (add/delete Monitors, Users, etc.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7348 
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user (user.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z
CVE-2019-7349 
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[V4LCapturesPerFrame]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T19:00:00.000Z