rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-18425 
An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86 PV emulation. When emulating certain PV guest operations, descriptor table accesses are performed by the emulating code. Such accesses should respect the guest specified limits, unless otherwise guaranteed to fail in such a case. Without this, emulation of 32-bit guest user mode calls through call gates would allow guest user mode to install and then use descriptors of their choice, as long as the guest kernel did not itself install an LDT. (Most OSes don't install any LDT by default). 32-bit PV guest user mode can elevate its privileges to that of the guest kernel. Xen versions from at least 3.2 onwards are affected. Only 32-bit PV guest user mode can leverage this vulnerability. HVM, PVH, as well as 64-bit PV guests cannot leverage this vulnerability. Arm systems are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T13:39:17.000Z
CVE-2019-18426 
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
Affected products: vendor: Facebook
product: WhatsApp Desktop
Published: 2020-01-21T20:30:15.000Z
CVE-2019-18446 
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has Insecure Permissions (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:50:38.000Z
CVE-2019-18447 
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:49:30.000Z
CVE-2019-18448 
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:48:36.000Z
CVE-2019-18449 
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:47:20.000Z
CVE-2019-18450 
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:44:33.000Z
CVE-2019-18451 
An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:43:03.000Z
CVE-2019-18452 
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:41:12.000Z
CVE-2019-18453 
An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:35:36.000Z
CVE-2019-18454 
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:31:19.000Z
CVE-2019-18455 
An issue was discovered in GitLab Community and Enterprise Edition 11 through 12.4 when building Nested GraphQL queries. It has a large or infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:26:48.000Z
CVE-2019-18456 
An issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the Search feature provided by Elasticsearch integration.. It has Insecure Permissions (issue 1 of 4).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:04:44.000Z
CVE-2019-18457 
An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:43:07.000Z
CVE-2019-18458 
An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 2 of 4).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:40:29.000Z
CVE-2019-18459 
An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions (issue 3 of 4).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:24:35.000Z
CVE-2019-18460 
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:47:52.000Z
CVE-2019-18461 
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:44:48.000Z
CVE-2019-18462 
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:44:02.000Z
CVE-2019-18463 
An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 4 of 4).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:39:15.000Z
CVE-2019-18464 
In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database or may be able to alter the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T16:25:49.000Z
CVE-2019-18465 
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects only certain SSH (SFTP) configurations, and is applicable only if the MySQL database is being used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T16:11:10.000Z
CVE-2019-18466 
An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-28T12:37:00.000Z
CVE-2019-18567 Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service
Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.
Problem types: cwe_id: CWE-362
description: CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)
Affected products: vendor: Bromium
product: Bromium client
Credits: lang: en
value: Nicolas DELHAYE from AIRBUS
Published: 2020-02-03T17:55:36.028Z
CVE-2019-18568 Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.
Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user.
Problem types: cwe_id: CWE-680
description: CWE-680 Integer Overflow to Buffer Overflow
Affected products: vendor: AVIRA
product: Antivirus Free Antivirus
Credits: lang: en
value: Nicolas Delhaye from AIRBUS
Published: 2019-12-31T19:28:32.868Z
CVE-2019-18571 
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module [MAL]. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted URL with scripts. When victim users access the module through their browsers, the malicious code gets injected and executed by the web browser in the context of the vulnerable web application.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Dell
product: RSA Identity Governance & Lifecycle
Published: 2019-12-18T20:50:13.968Z
CVE-2019-18572 
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can connect to the JMX agent and monitor and manage the Java application.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Dell
product: RSA Identity Governance & Lifecycle
Published: 2019-12-18T20:50:14.414Z
CVE-2019-18573 
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote attacker can gain access to victim’s session and perform arbitrary actions with privileges of the user within the compromised session.
Problem types: cwe_id: CWE-598
description: CWE-598: Information Exposure Through Query Strings in GET Request
Affected products: vendor: Dell
product: RSA Identity Governance & Lifecycle
Published: 2019-12-18T20:50:14.868Z
CVE-2019-18574 
RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console administrators open the affected report, the injected scripts could potentially be executed in their browser.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Dell
product: RSA Authentication Manager
Published: 2019-12-03T20:20:15.995Z
CVE-2019-18575 
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Dell
product: Dell Command Configure (DCC)
Published: 2019-12-06T20:40:13.655Z
CVE-2019-18576 
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may use the exposed passwords to gain access to XtremIO with the privileges of the compromised user.
Problem types: cwe_id: CWE-532
description: CWE-532: Inclusion of Sensitive Information in Log Files
Affected products: vendor: Dell
product: XtremIO
Published: 2020-03-13T20:30:20.768Z
CVE-2019-18577 
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability. A malicious local user with XtremIO xinstall privileges may exploit this vulnerability to gain root access.
Problem types: cwe_id: CWE-732
description: CWE-732: Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Dell
product: XtremIO
Published: 2020-03-13T20:30:21.170Z
CVE-2019-18578 
Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious HTML or JavaScript code in application fields. When victim users access the injected page through their browsers, the malicious code may be executed by the web browser in the context of the vulnerable web application.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Dell
product: XtremIO
Published: 2020-03-13T20:30:21.567Z
CVE-2019-18579 
Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's system can obtain read or write access to main memory via a DMA attack during platform boot.
Problem types: cwe_id: CWE-16
description: CWE-16: Configuration
Affected products: vendor: Dell
product: CPG BIOS
Published: 2019-12-16T19:45:13.370Z
CVE-2019-18580 
Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Dell
product: EMC Storage M&R
Published: 2019-11-26T16:36:16.220Z
CVE-2019-18581 
Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to alter the application’s allowable list of OS commands. This may lead to arbitrary OS command execution as the regular user runs the DPA service on the affected system.
Problem types: cwe_id: CWE-862
description: CWE-862: Missing Authorization
Affected products: vendor: Dell
product: Data Protection Advisor
Published: 2020-03-18T18:20:15.481Z
CVE-2019-18582 
Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to inject malicious report generation scripts in the server. This may lead to OS command execution as the regular user runs the DPA service on the affected system.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Dell
product: Data Protection Advisor
Published: 2020-03-18T18:20:15.872Z
CVE-2019-18588 
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users' sessions.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Dell
product: Unisphere for PowerMax
Published: 2020-01-10T18:20:11.404Z
CVE-2019-18601 
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Debug RPC calls to crash a database server within the SVOTE_Debug RPC handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T13:40:31.000Z
CVE-2019-18602 
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T13:41:48.000Z
CVE-2019-18603 
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T13:41:35.000Z
CVE-2019-18604 
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T00:00:00.000Z
CVE-2019-18608 
Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order (e.g., its payment status or shipping fee) by adding additional attributes to user-input during the PUT /ajax/cart operation for a checkout, because of getValidDocumentForUpdate in api/server/services/orders/orders.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T14:56:33.000Z
CVE-2019-18609 
An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-01T21:50:08.000Z
CVE-2019-18610 
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-22T17:31:16.000Z
CVE-2019-18611 
An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available via the MediaWiki API was potentially visible to users with various levels of access to this extension. Said users should not have been able to view these oversighted edit summaries via the MediaWiki API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T15:41:24.000Z
CVE-2019-18612 
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously hidden (restricted) AbuseFilter filters were viewable (or their differences were viewable) to unprivileged users, thus disclosing potentially sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T15:41:04.000Z
CVE-2019-18614 
On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384 bytes, but everything else is still configured to the usual size of 1092 (which was used for everything in the previous CYW20719 and later CYW20819 evaluation board). To trigger the overflow, an attacker can either send packets over the air or as unprivileged local user. Over the air, the minimal PoC is sending "l2ping -s 600" to the target address prior to any pairing. Locally, the buffer overflow is immediately triggered by opening an ACL or SCO connection to a headset. This occurs because, in WICED Studio 6.2 and 6.4, BT_ACL_HOST_TO_DEVICE_DEFAULT_SIZE and BT_ACL_DEVICE_TO_HOST_DEFAULT_SIZE are set to 384.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-16T13:42:29.000Z
CVE-2019-18615 
In CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain text for certain API calls, potentially leading to user password exposure. This only affects CVP environments where: 1. Devices have enable mode passwords which are different from the user's login password, OR 2. There are configlet builders that use the Device class and specify username and password explicitly Application logs are not accessible or visible from the CVP GUI. Application logs can only be read by authorized users with privileged access to the VM hosting the CVP application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T16:39:44.000Z
CVE-2019-18618 
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-22T13:21:29.000Z
CVE-2019-18619 
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-22T13:15:53.000Z
CVE-2019-18622 
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-22T20:32:52.000Z
CVE-2019-18623 
Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-08T17:48:43.000Z
CVE-2019-18624 
Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO (aka Right to Left Override) approach, as demonstrated by misinterpretation of malicious%E2%80%AEtxt.apk as maliciouskpa.txt. This affects 44.1.2254.142553, 44.1.2254.142659, and 44.1.2254.143214.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T17:12:22.000Z