rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19335 
During installation of an OpenShift 4 cluster, the `openshift-install` command line tool creates an `auth` directory, with `kubeconfig` and `kubeadmin-password` files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions. ose-installer as shipped in Openshift 4.2 is vulnerable.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: Red Hat
product: openshift/installer
Published: 2020-03-18T15:45:41.000Z
CVE-2019-19336 
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: ovirt-engine
Published: 2020-03-19T13:11:16.000Z
CVE-2019-19337 
A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: Ceph Storage
Published: 2019-12-23T16:18:04.000Z
CVE-2019-19338 
A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability.
Problem types: cwe_id: CWE-385
description: CWE-385
cwe_id: CWE-203
description: CWE-203
Affected products: vendor: [UNKNOWN]
product: Linux Kernel
Published: 2020-07-13T16:04:00.000Z
CVE-2019-19339 
It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor, resulting in a severe DoS scenario by halting the processor. System software like OS OR Virtual Machine Monitor (VMM) use virtual memory system for storing program instructions and data in memory. Virtual Memory system uses Paging structures like Page Tables and Page Directories to manage system memory. The processor's Memory Management Unit (MMU) uses Paging structure entries to translate program's virtual memory addresses to physical memory addresses. The processor stores these address translations into its local cache buffer called - Translation Lookaside Buffer (TLB). TLB has two parts, one for instructions and other for data addresses. System software can modify its Paging structure entries to change address mappings OR certain attributes like page size etc. Upon such Paging structure alterations in memory, system software must invalidate the corresponding address translations in the processor's TLB cache. But before this TLB invalidation takes place, a privileged guest user may trigger an instruction fetch operation, which could use an already cached, but now invalid, virtual to physical address translation from Instruction TLB (ITLB). Thus accessing an invalid physical memory address and resulting in halting the processor due to the Machine Check Error (MCE) on Page Size Change.
Problem types: cwe_id: CWE-805
description: CWE-805
Affected products: vendor: Red Hat
product: kpatch:
Published: 2020-01-17T18:08:53.000Z
CVE-2019-19340 
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to the system.
Problem types: cwe_id: CWE-1188
description: CWE-1188
Affected products: vendor: Red Hat
product: Tower
Published: 2019-12-19T20:16:46.000Z
CVE-2019-19341 
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the SECRET_KEY and the database backup. Any user with access to the Tower server, and knowledge of when a backup is run, could retrieve every credential stored in Tower. Access to data is the highest threat with this vulnerability.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: RedHat
product: Tower
Published: 2019-12-19T20:24:18.000Z
CVE-2019-19342 
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '#' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password.
Problem types: cwe_id: CWE-209
description: CWE-209
Affected products: vendor: Red Hat
product: Tower
Published: 2019-12-19T20:20:01.000Z
CVE-2019-19343 
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: Undertow
Published: 2021-03-23T20:23:20.000Z
CVE-2019-19344 
There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: Red Hat
product: samba
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2020-01-21T00:00:00.000Z
CVE-2019-19345 
A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: [UNKNOWN]
product: openshift/mediawiki-apb
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-03-20T14:00:33.000Z
CVE-2019-19346 
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: Openshift Enterprise
product: openshift/mariadb-apb
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-04-02T19:12:29.000Z
CVE-2019-19348 
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: Openshift Enterprise
product: openshift/apb-base
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-04-02T19:14:08.000Z
CVE-2019-19349 
An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: operator-framework/operator-metering
Published: 2021-03-24T15:32:35.000Z
CVE-2019-19350 
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: openshift/ansible-service-broker
Published: 2021-03-24T15:36:09.000Z
CVE-2019-19351 
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: Red Hat
product: openshift
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-03-18T16:33:50.000Z
CVE-2019-19352 
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: operator-framework/presto
Published: 2021-03-24T16:02:59.000Z
CVE-2019-19353 
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: operator-framework/hive
Published: 2021-03-24T16:07:14.000Z
CVE-2019-19354 
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: operator-framework/hadoop
Published: 2021-03-24T16:19:47.000Z
CVE-2019-19355 
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as shipped in Openshift 4.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: Red Hat
product: openshift
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-03-18T16:35:00.000Z
CVE-2019-19356 
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-07T22:49:07.000Z
CVE-2019-19362 
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history (but does not exit the application), this data is not wiped from main memory, and therefore could be read by a local user with the same or greater privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T02:52:34.000Z
CVE-2019-19363 
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-24T17:12:18.000Z
CVE-2019-19364 
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current directory; by doing so, an attacker can quickly escalate its privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T18:42:20.000Z
CVE-2019-19366 
A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T19:19:34.000Z
CVE-2019-19367 
A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T19:19:24.000Z
CVE-2019-19368 
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-16T15:55:02.000Z
CVE-2019-19370 
A cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel MiCollab application before 9.0.15 for Android could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the file upload interface. A successful exploit could allow an attacker to execute arbitrary scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T17:54:00.000Z
CVE-2019-19371 
A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T17:55:01.000Z
CVE-2019-19372 
A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later reported that there was not a "fully working exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T14:57:58.000Z
CVE-2019-19373 
An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can trigger arbitrary unserialization of a PHP object from a packages/cms/page_templates/page_remote_content/page_remote_content.inc POST parameter during processing of a Remote Content page type. This unserialization can be used to trigger the inclusion of arbitrary files on the filesystem (local file inclusion), and results in remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T19:04:12.000Z
CVE-2019-19374 
An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can delete arbitrary files from the server during interaction with the File Upload field type, when a custom form exists. (This is related to an information disclosure issue within the File Upload field type that allows users to view the full path to uploaded files, including the product's web root directory.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T19:10:15.000Z
CVE-2019-19375 
In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versions 2019.6.14 and 2019.9.8.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T16:16:36.000Z
CVE-2019-19376 
In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T16:16:46.000Z
CVE-2019-19377 
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-29T15:55:05.000Z
CVE-2019-19378 
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-29T16:03:14.000Z
CVE-2019-19379 
In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T16:47:08.000Z
CVE-2019-19381 
oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scripting (XSS) via an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T13:02:38.000Z
CVE-2019-19382 
Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:22:04.000Z
CVE-2019-19383 
freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-03T19:06:07.000Z
CVE-2019-19384 
A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the fax_uuid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T23:56:17.000Z
CVE-2019-19385 
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T23:56:08.000Z
CVE-2019-19386 
A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T23:56:00.000Z
CVE-2019-19387 
A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T23:55:51.000Z
CVE-2019-19388 
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T23:55:43.000Z
CVE-2019-19389 
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T20:15:55.000Z
CVE-2019-19390 
The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T16:27:20.000Z
CVE-2019-19391 
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and > options are mishandled. NOTE: The LuaJIT project owner states that the debug libary is unsafe by definition and that this is not a vulnerability. When LuaJIT was originally developed, the expectation was that the entire debug library had no security guarantees and thus it made no sense to assign CVEs. However, not all users of later LuaJIT derivatives share this perspective
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-29T15:18:49.000Z