rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-3943 
MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk).
Problem types: cwe_id: CWE-23
description: CWE-23 Path Traversal
Affected products: vendor: MikroTik
product: RouterOS
Published: 2019-04-10T20:01:00.000Z
CVE-2019-3944 
Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Parrot ANAFI
Published: 2020-04-01T16:07:39.000Z
CVE-2019-3945 
Web server running on Parrot ANAFI can be crashed due to the SDK command "Common_CurrentDateTime" being sent to control service with larger than expected date length.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Parrot ANAFI
Published: 2020-04-01T16:07:36.000Z
CVE-2019-3946 
Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Fuji Electric V-Server
Published: 2019-06-12T14:06:52.000Z
CVE-2019-3947 
Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.
Problem types: description: Plaintext storage of credentials
Affected products: vendor: n/a
product: Fuji Electric V-Server
Published: 2019-06-12T14:06:57.000Z
CVE-2019-3948 
The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000000.1.R, Dahua NVR5XX-4KS2 V3.216.0000006.0.R, Dahua NVR4XXX-4KS2 V3.216.0000006.0.R, and NVR2XXX-4KS2 do not require authentication to access the HTTP endpoint /videotalk. An unauthenticated, remote person can connect to this endpoint and potentionally listen to the audio of the capturing device.
Problem types: description: CWE 285 - Improper Access Control (Authorization)
Affected products: vendor: n/a
product: Dahua IPC-XXBXX
vendor: n/a
product: Dahua IPC HX5X3X and HX4X3X
vendor: n/a
product: Dahua DH-IPC HX883X and DH-IPC-HX863X
vendor: n/a
product: Dahua DH-SD4XXXXX
vendor: n/a
product: Dahua DH-SD5XXXXX
vendor: n/a
product: Dahua DH-SD6XXXXX
vendor: n/a
product: Dahua NVR5XX-4KS2
vendor: n/a
product: Dahua NVR4XXX-4KS2
Published: 2019-07-29T21:47:27.000Z
CVE-2019-3949 
Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device.
Problem types: description: Networking Misconfiguration
Affected products: vendor: Arlo
product: Basestation firmware
Published: 2019-07-09T17:18:31.000Z
CVE-2019-3950 
Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.
Problem types: description: Insufficient UART Protections
Affected products: vendor: Arlo
product: Basestation firmware
Published: 2019-07-09T17:18:56.000Z
CVE-2019-3951 
Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack buffer overflow to code execution.
Affected products: vendor: n/a
product: Advantech WebAccess/SCADA
Published: 2019-12-12T20:32:10.000Z
CVE-2019-3953 
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 10012 RPC call.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: n/a
product: Advantech WebAccess/SCADA
Published: 2019-06-18T22:53:01.000Z
CVE-2019-3954 
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: n/a
product: Advantech WebAccess/SCADA
Published: 2019-06-18T23:16:31.000Z
CVE-2019-3955 
Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the server not properly validating RsaPubKeyLen during key negotiation. An unauthenticated remote attacker can cause a heap buffer overflow by specifying a large RsaPubKeyLen, which could cause a denial of service.
Problem types: description: Unauth Remote Heap Buffer Overflow
Affected products: vendor: n/a
product: Solarwinds Dameware Remote Mini Controller
Published: 2019-06-07T20:00:55.000Z
CVE-2019-3956 
Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information.
Problem types: description: Unauth Remote Buffer Over-read
Affected products: vendor: n/a
product: Solarwinds Dameware Remote Mini Controller
Published: 2019-06-07T20:01:28.000Z
CVE-2019-3957 
Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information.
Problem types: description: Unauth Remote Buffer Over-read
Affected products: vendor: n/a
product: Solarwinds Dameware Remote Mini Controller
Published: 2019-06-07T20:02:03.000Z
CVE-2019-3958 
Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.
Problem types: description: Authenticated Persistent Cross-site Scripting
Affected products: vendor: n/a
product: WallacePOS
Published: 2019-07-31T17:26:38.000Z
CVE-2019-3959 
Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
Problem types: description: Cross-site Request Forgery
Affected products: vendor: n/a
product: WallacePOS
Published: 2019-07-31T17:22:38.000Z
CVE-2019-3960 
Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uploading a malicious PHP file.
Problem types: description: Authenticated Unrestricted File Upload RCE
Affected products: vendor: n/a
product: WallacePOS
Published: 2019-07-31T17:20:04.000Z
CVE-2019-3961 
Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users browser session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Tenable
product: Tenable Nessus
Published: 2019-06-25T20:27:56.000Z
CVE-2019-3962 
Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated, local attacker to exploit this vulnerability by convincing another targeted Nessus user to view a malicious URL and use Nessus to send fraudulent messages. Successful exploitation could allow the authenticated adversary to inject arbitrary text into the feed status, which will remain saved post session expiration.
Problem types: description: Content Injection
Affected products: vendor: Tenable
product: Nessus
Published: 2019-07-01T19:39:06.000Z
CVE-2019-3963 
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter. This could allow an attacker to execute arbitrary code in the context of a user's session.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: OpenEMR
Published: 2019-08-20T17:55:35.000Z
CVE-2019-3964 
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter. This could allow an attacker to execute arbitrary code in the context of a user's session.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: OpenEMR
Published: 2019-08-20T17:55:54.000Z
CVE-2019-3965 
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the document_id parameter. This could allow an attacker to execute arbitrary code in the context of a user's session.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: OpenEMR
Published: 2019-08-20T17:56:03.000Z
CVE-2019-3966 
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the foreign_id parameter. This could allow an attacker to execute arbitrary code in the context of a user's session.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: OpenEMR
Published: 2019-08-20T17:56:11.000Z
CVE-2019-3967 
In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host system.
Problem types: description: Directory traversal
Affected products: vendor: n/a
product: OpenEMR
Published: 2019-08-20T17:56:20.000Z
CVE-2019-3968 
In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: OpenEMR
Published: 2019-08-20T18:01:03.000Z
CVE-2019-3969 
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgent such as writing to the registry with SYSTEM privileges.
Problem types: description: Improper Privilege Management
Affected products: vendor: Comodo
product: Comodo Antivirus
Published: 2019-07-17T20:33:44.000Z
CVE-2019-3970 
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.
Problem types: description: Arbitrary File Write
Affected products: vendor: n/a
product: Comodo Antivirus
Published: 2019-07-17T20:34:21.000Z
CVE-2019-3971 
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Comodo Antivirus
Published: 2019-07-17T20:35:01.000Z
CVE-2019-3972 
Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>_CisSharedMemBuff". This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Comodo Antivirus
Published: 2019-07-17T20:40:37.000Z
CVE-2019-3973 
Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port "cmdServicePort". A low privileged process can crash CmdVirth.exe to decrease the port's connection count followed by process hollowing a CmdVirth.exe instance with malicious code to obtain a handle to "cmdServicePort". Once this occurs, a specially crafted message can be sent to "cmdServicePort" using "FilterSendMessage" API. This can trigger an out-of-bounds write if lpOutBuffer parameter in FilterSendMessage API is near the end of specified buffer bounds. The crash occurs when the driver performs a memset operation which uses a size beyond the size of buffer specified, causing kernel crash.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Comodo Antivirus
Published: 2019-07-17T20:41:32.000Z
CVE-2019-3974 
Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwritten arbitrarily, potentially creating a denial of service condition.
Problem types: description: Arbitrary File Overwrite
Affected products: vendor: n/a
product: Tenable Nessus
Published: 2019-08-15T18:58:14.000Z
CVE-2019-3975 
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message.
Problem types: description: Unauthenticated Remote Stack Buffer Overflow
Affected products: vendor: Advantech
product: WebAccess/SCADA
Published: 2019-09-10T15:55:33.000Z
CVE-2019-3976 
RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field. If an authenticated user installs a malicious package then a directory could be created and the developer shell could be enabled.
Problem types: cwe_id: CWE-23
description: CWE-23 Relative path traversal.
Affected products: vendor: n/a
product: MikroTik RouterOS
Published: 2019-10-28T21:32:40.000Z
CVE-2019-3977 
RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can trick the router into "upgrading" to an older version of RouterOS and possibly reseting all the system's usernames and passwords.
Problem types: cwe_id: CWE-494
description: CWE-494 Insufficient checks on origin
Affected products: vendor: n/a
product: MikroTik RouterOS
Published: 2019-10-28T21:34:37.000Z
CVE-2019-3978 
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: n/a
product: MikroTik RouterOS
Published: 2019-10-28T21:32:57.000Z
CVE-2019-3979 
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even when the records are unrelated to the domain that was queried. Therefore, a remote attacker controlled DNS server can poison the router's DNS cache via malicious responses with additional and untrue records.
Problem types: description: Unrelated Data Attack (see: https://www.sans.org/reading-room/whitepapers/dns/security-issues-dns-1069)
Affected products: vendor: n/a
product: MikroTik RouterOS
Published: 2019-10-28T21:33:25.000Z
CVE-2019-3980 
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.
Problem types: description: Unauthenticated Remote Code Execution.
Affected products: vendor: n/a
product: SolarWinds Dameware Remote Mini Remote Client Agent Service
Published: 2019-10-08T19:40:07.000Z
CVE-2019-3981 
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: MikroTik
product: WinBox
Published: 2020-01-14T18:13:57.000Z
CVE-2019-3982 
Nessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to improper validation of specific imported scan types. An authenticated, remote attacker could potentially exploit this vulnerability to cause a Nessus scanner to become temporarily unresponsive.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Tenable Nessus
Published: 2019-10-23T18:55:07.000Z
CVE-2019-3983 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections.
Problem types: description: Insufficient UART Protections
Affected products: vendor: n/a
product: Amazon's Blink XT2 Sync Module
Published: 2019-12-11T22:39:21.000Z
CVE-2019-3984 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.
Problem types: description: Arbitrary Remote Code Execution
Affected products: vendor: Amazon
product: Blink XT2 Sync Module firmware
Published: 2019-12-31T17:45:56.000Z
CVE-2019-3985 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Amazon's Blink XT2 Sync Module
Published: 2019-12-11T22:39:18.000Z
CVE-2019-3986 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Amazon's Blink XT2 Sync Module
Published: 2019-12-11T22:39:13.000Z
CVE-2019-3987 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Amazon's Blink XT2 Sync Module
Published: 2019-12-11T22:39:10.000Z
CVE-2019-3988 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Amazon's Blink XT2 Sync Module
Published: 2019-12-11T22:39:06.000Z
CVE-2019-3989 
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Amazon's Blink XT2 Sync Module
Published: 2019-12-11T22:38:08.000Z
CVE-2019-3990 
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality.
Problem types: description: User Enumeration
Affected products: vendor: n/a
product: Harbor
Published: 2019-12-03T16:55:15.000Z
CVE-2019-3992 
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data, the attacker may gain access to valid admin usernames and, in older versions of ELOG, passwords.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Disclosure
Affected products: vendor: n/a
product: ELOG
Published: 2019-12-17T21:55:51.000Z
CVE-2019-3993 
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Disclosure
Affected products: vendor: n/a
product: ELOG
Published: 2019-12-17T21:59:00.000Z
CVE-2019-3994 
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: n/a
product: ELOG
Published: 2019-12-17T21:59:06.000Z
CVE-2019-3995 
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: n/a
product: ELOG
Published: 2019-12-17T21:59:13.000Z
CVE-2019-3996 
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.
Problem types: cwe_id: CWE-441
description: CWE-441 Unintended Proxy
Affected products: vendor: n/a
product: ELOG
Published: 2019-12-17T21:59:22.000Z
CVE-2019-3997 
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
Problem types: description: Unauthenticated Keypad Pairing Vulnerability
Affected products: vendor: n/a
product: SimpliSafe SS3
Published: 2020-01-16T22:11:01.000Z
CVE-2019-3998 
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to.
Problem types: description: Unauthenticated Wi-Fi Configuration Modification
Affected products: vendor: n/a
product: SimpliSafe SS3 Base Station
Published: 2020-02-13T20:01:54.000Z
CVE-2019-3999 
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges.
Problem types: description: Unauthenticated OS Command Injection
Affected products: vendor: n/a
product: Druva inSync Windows Client
Published: 2020-02-25T18:15:03.000Z
CVE-2019-4000 
Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges.
Problem types: description: Authenticated Python Code Injection
Affected products: vendor: n/a
product: Druva inSync Mac OS Client
Published: 2020-02-25T20:28:45.000Z