rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-15877 
In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory.
Problem types: description: Missing authorization
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-04-28T19:11:36.000Z
CVE-2019-15878 
In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situation due to improper checking in SCTP when an application tries to update an SCTP-AUTH shared key.
Problem types: description: Use after free
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-05-13T15:38:05.000Z
CVE-2019-15879 
In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel memory.
Problem types: description: Use after free
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-05-13T15:38:20.000Z
CVE-2019-15880 
In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocated the size of a kernel buffer based on a user-supplied length allowing an unprivileged process to trigger a kernel panic.
Problem types: description: Use after free
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-05-13T15:38:29.000Z
CVE-2019-15889 
The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T17:07:01.000Z
CVE-2019-15890 
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T16:55:12.000Z
CVE-2019-15891 
An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T20:56:19.000Z
CVE-2019-15892 
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T20:56:18.000Z
CVE-2019-15893 
Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-16T12:40:35.000Z
CVE-2019-15894 
An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code from flash. The fault injection attack does not disable the Flash Encryption feature, so if the ESP32 is configured with the recommended combination of Secure Boot and Flash Encryption, then the impact is minimized. If the ESP32 is configured without Flash Encryption then successful fault injection allows arbitrary code execution. To protect devices with Flash Encryption and Secure Boot enabled against this attack, a firmware change must be made to permanently enable Flash Encryption in the field if it is not already permanently enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-07T15:54:40.000Z
CVE-2019-15895 
search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T12:54:32.000Z
CVE-2019-15896 
An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T15:28:25.000Z
CVE-2019-15897 
beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authentication Bypass via communication with a BeeGFS metadata server (which is typically not exposed to external networks).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-05T15:31:43.000Z
CVE-2019-15898 
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T21:39:04.000Z
CVE-2019-15900 
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The result was that, instead of reporting that the supplied username or group name did not exist, it would execute the command as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-18T15:41:48.000Z
CVE-2019-15901 
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-18T15:44:17.000Z
CVE-2019-15902 
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T05:50:48.000Z
CVE-2019-15903 
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T05:59:16.000Z
CVE-2019-15910 
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:03:19.000Z
CVE-2019-15911 
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:03:38.000Z
CVE-2019-15912 
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:03:50.000Z
CVE-2019-15913 
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:04:01.000Z
CVE-2019-15914 
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:04:14.000Z
CVE-2019-15915 
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T16:03:05.000Z
CVE-2019-15916 
An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T14:58:01.000Z
CVE-2019-15917 
An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:09:20.000Z
CVE-2019-15918 
An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:09:11.000Z
CVE-2019-15919 
An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:08:59.000Z
CVE-2019-15920 
An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:08:47.000Z
CVE-2019-15921 
An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:08:34.000Z
CVE-2019-15922 
An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:08:26.000Z
CVE-2019-15923 
An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:08:18.000Z
CVE-2019-15924 
An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T18:08:07.000Z
CVE-2019-15925 
An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T20:33:45.000Z
CVE-2019-15926 
An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T20:33:34.000Z
CVE-2019-15927 
An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T20:33:11.000Z
CVE-2019-15929 
In Craft CMS through 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, leading to the possibility of a brute force attempt on them.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-24T15:53:00.000Z
CVE-2019-15930 
Intesync Solismed 3.3sp allows Clickjacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:37:32.000Z
CVE-2019-15931 
Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:38:23.000Z
CVE-2019-15932 
Intesync Solismed 3.3sp has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:39:21.000Z
CVE-2019-15933 
Intesync Solismed 3.3sp has SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:39:58.000Z
CVE-2019-15934 
Intesync Solismed 3.3sp has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:40:41.000Z
CVE-2019-15935 
Intesync Solismed 3.3sp has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:41:46.000Z
CVE-2019-15936 
Intesync Solismed 3.3sp allows Insecure File Upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:42:30.000Z
CVE-2019-15937 
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T14:06:54.000Z
CVE-2019-15938 
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T14:06:37.000Z
CVE-2019-15939 
An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T15:04:06.000Z
CVE-2019-15940 
Victure PC530 devices allow unauthenticated TELNET access as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T12:29:37.000Z
CVE-2019-15941 
OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T19:39:40.000Z
CVE-2019-15942 
FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T15:38:40.000Z
CVE-2019-15943 
vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a memset call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T11:31:01.000Z
CVE-2019-15944 
In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T19:34:54.000Z
CVE-2019-15945 
OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T16:07:03.000Z
CVE-2019-15946 
OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T16:07:28.000Z
CVE-2019-15947 
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T16:25:23.000Z
CVE-2019-15948 
Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects CC256xC-BT-SP 1.2, CC256xB-BT-SP 1.8, and WL18xx-BT-SP 4.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T15:06:29.000Z
CVE-2019-15949 
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T16:50:38.000Z
CVE-2019-15950 
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T15:42:48.000Z
CVE-2019-15952 
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the directive will be server side processed. Thus, if a user can control the content of a .html file, then they can inject a payload with a malicious template directive to gain Remote Command Execution. The exploit will work only with the .html extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T18:32:03.000Z
CVE-2019-15953 
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertical and horizontal privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T18:31:53.000Z
CVE-2019-15954 
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: <script total>global.process.mainModule.require(child_process).exec(RCE);</script>
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T18:31:43.000Z
CVE-2019-15955 
An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random values inside it. If an attacker can discover a session cookie owned by an admin, then it is possible to brute force it with O(n)=2n instead of O(n)=n^x complexity, and steal the admin password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T18:31:34.000Z
CVE-2019-15956 Cisco Web Security Appliance Unauthorized Device Reset Vulnerability
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific URL in the web management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could have a twofold impact: the attacker could either change the administrator password, gaining privileged access, or reset the network configuration details, causing a denial of service (DoS) condition. In both scenarios, manual intervention is required to restore normal operations.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Cisco
product: Cisco Web Security Appliance (WSA)
Published: 2019-11-26T03:11:43.562Z
CVE-2019-15957 Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Command Injection Vulnerability
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system. When processed, the commands will be executed with root privileges. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by providing malicious input to a specific field in the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as the root user.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Cisco
product: Cisco Small Business RV Series Router Firmware
Published: 2020-09-23T00:27:26.557Z