rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-7589 Kantech EntraPass Improper Input Validation
A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.
Problem types: cwe_id: CWE-20
description: CWE-20 - Improper Input Validation
Affected products: vendor: Johnson Controls
product: Kantech EntraPass Corporate Edition
vendor: Johnson Controls
product: Kantech EntraPass Global Edition
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Joachim Kerschbaumer
Published: 2020-03-10T19:32:39.000Z
CVE-2019-7590 exacqVision Server Unquoted Service Path
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.
Problem types: cwe_id: CWE-428
description: CWE-428 Unquoted Search Path or Element
description: The exacqVision Server unquoted service path privilege escalation vulnerability is possible in the Windows operating system.
Affected products: vendor: Exacq Technologies, Inc.
product: exacqVision Server
Credits: lang: en
value: Gjoko 'LiquidWorm' Krstic
Published: 2019-07-19T20:56:07.852Z
CVE-2019-7593 Metasys use of shared RSA key pairs
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).
Problem types: cwe_id: CWE-323
description: CWE-323: Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: Johnson Controls
product: Metasys versions prior to 9.0
Credits: lang: en
value: harpocrates.ghost@protonmail.com
Published: 2019-08-20T18:22:43.000Z
CVE-2019-7594 Metasys use of hardcoded RC2 key
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).
Problem types: cwe_id: CWE-321
description: CWE-321 Use of Hard-coded Cryptographic Key
Affected products: vendor: Johnson Controls
product: Metasys versions prior to 9.0
Credits: lang: en
value: harpocrates.ghost@protonmail.com
Published: 2019-08-20T18:24:56.000Z
CVE-2019-7608 
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation
Affected products: vendor: Elastic
product: Kibana
Published: 2019-03-25T18:34:06.000Z
CVE-2019-7609 
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Elastic
product: Kibana
Published: 2019-03-25T00:00:00.000Z
CVE-2019-7610 
Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Elastic
product: Kibana
Published: 2019-03-25T18:34:06.000Z
CVE-2019-7611 
A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the _aliases, _shrink, or _split endpoints are used . If the elasticsearch.yml file has xpack.security.dls_fls.enabled set to false, certain permission checks are skipped when users perform one of the actions mentioned above, to make existing data available under a new index/alias name. This could result in an attacker gaining additional permissions against a restricted index.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2019-03-25T18:34:06.000Z
CVE-2019-7612 
A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.
Problem types: cwe_id: CWE-209
description: CWE-209: Information Exposure Through an Error Message
Affected products: vendor: Elastic
product: Logstash
Published: 2019-03-25T18:34:06.000Z
CVE-2019-7613 
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.
Problem types: cwe_id: CWE-778
description: CWE-778: Insufficient Logging
Affected products: vendor: Elastic
product: Logstash
Published: 2019-03-25T18:34:06.000Z
CVE-2019-7614 
A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2019-07-30T21:15:47.000Z
CVE-2019-7615 
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'server_ca_cert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the middle style attack against the Ruby agent.
Problem types: cwe_id: CWE-295
description: CWE-295: Improper Certificate Validation
Affected products: vendor: Elastic
product: Elastic APM agent for Ruby
Published: 2019-07-30T21:15:47.000Z
CVE-2019-7616 
Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.
Problem types: cwe_id: CWE-918
description: CWE-918: Server-Side Request Forgery (SSRF)
Affected products: vendor: Elastic
product: Kibana
Published: 2019-07-30T21:15:47.000Z
CVE-2019-7617 
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Elastic
product: Elastic APM agent for Python
Published: 2019-08-22T16:12:10.000Z
CVE-2019-7618 
A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user.
Problem types: cwe_id: CWE-538
description: CWE-538: File and Directory Information Exposure
Affected products: vendor: Elastic
product: Elastic Code
Published: 2019-10-01T17:52:42.000Z
CVE-2019-7619 
Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2019-10-30T13:37:42.000Z
CVE-2019-7620 
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to the port the Logstash beats input could send a specially crafted network packet that would cause Logstash to stop responding.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: Elastic
product: Logstash
Published: 2019-10-30T13:38:40.000Z
CVE-2019-7621 
Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the coordinate and region map visualizations. An attacker with the ability to create coordinate map visualizations could create a malicious visualization. If another Kibana user views that visualization or a dashboard containing the visualization it could execute JavaScript in the victimï¿½s browser.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Kibana
Published: 2019-12-18T19:50:12.000Z
CVE-2019-7628 
Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle attackers to read these e-mails and gain access to Pagure on behalf of other users. This issue is found in the API token expiration reminder cron job in files/api_key_expire_mail.py; disabling that job is also a viable solution. (E-mailing a substring of the API key was an attempted, but rejected, solution.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T03:00:00.000Z
CVE-2019-7629 
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T20:00:00.000Z
CVE-2019-7630 
An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T16:59:12.000Z
CVE-2019-7632 
LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter. The lifesize default password for the cli account may sometimes be used for authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T05:00:00.000Z
CVE-2019-7634 
SUAP V2 allows XSS during the update of user information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T12:59:54.000Z
CVE-2019-7635 
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T00:00:00.000Z
CVE-2019-7636 
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T00:00:00.000Z
CVE-2019-7637 
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T11:00:00.000Z
CVE-2019-7638 
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T00:00:00.000Z
CVE-2019-7639 
An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29. If PermitPAMUserChange is set to yes in the /etc/gsissh/sshd_config file, logins succeed with a valid username and an incorrect password, even though a failure entry is recorded in the /var/log/messages file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T11:00:00.000Z
CVE-2019-7642 
D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-25T21:29:04.000Z
CVE-2019-7644 
Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker, they can forge an arbitrary JWT token that will be accepted by the vulnerable application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T19:44:18.000Z
CVE-2019-7646 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the add_package module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T15:02:01.000Z
CVE-2019-7648 
controller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on base64 in an attempt to protect password storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T17:00:00.000Z
CVE-2019-7649 
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-17T21:00:00.000Z
CVE-2019-7651 
EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\EPP device are not properly protected, leading to unintended impersonation or object creation. This vulnerability has been fixed in version 2018.12 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-08T22:00:00.000Z
CVE-2019-7652 
TheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2, has SSRF. To exploit the vulnerability, an attacker must create a new analysis, select URL for Data Type, and provide an SSRF payload like "http://127.0.0.1:22" in the Data parameter. The result can be seen in the main dashboard. Thus, it is possible to do port scans on localhost and intranet hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-09T20:48:57.000Z
CVE-2019-7653 
The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T03:00:00.000Z
CVE-2019-7654 
Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as adding another admin user via enginemanager/server/user/edit.htm in the Server->Users component. This issue was resolved in Wowza Streaming Engine 4.8.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T15:18:25.000Z
CVE-2019-7655 
Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value field in enginemanager/server/serversetup/edit_adv.htm of the Server Setup configuration or the (2) host field in enginemanager/j_spring_security_check of the login form. This issue was resolved in Wowza Streaming Engine 4.8.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T15:25:24.000Z
CVE-2019-7656 
A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/local/WowzaStreamingEngine/bin/* core program files. By injecting a payload into one of those files, it will run with the same privileges as the Wowza server, root. For example, /usr/local/WowzaStreamingEngine/bin/tune.sh could be replaced with a Trojan horse. This issue was resolved in Wowza Streaming Engine 4.8.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T15:21:50.000Z
CVE-2019-7659 
Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T14:00:00.000Z
CVE-2019-7660 
An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting (XSS) vulnerability, as demonstrated by admin/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-7661 
An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2019-7662 
An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash) via a crafted wasm file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T16:00:00.000Z
CVE-2019-7663 
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T16:00:00.000Z
CVE-2019-7664 
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T16:00:00.000Z
CVE-2019-7665 
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T16:00:00.000Z
CVE-2019-7666 
Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:27:36.000Z
CVE-2019-7667 
Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the database backup file name. A malicious actor can exploit this issue to download the database file and disclose login information, which can allow the attacker to bypass authentication and have full access to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:22:21.000Z
CVE-2019-7668 
Prima Systems FlexAir devices have Default Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:20:35.000Z
CVE-2019-7669 
Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:18:13.000Z
CVE-2019-7670 
Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-01T18:12:44.000Z
CVE-2019-7671 
Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user’s browser session in context of an affected site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:53:12.000Z
CVE-2019-7672 
Prima Systems FlexAir, Versions 2.3.38 and prior. The flash version of the web interface contains a hard-coded username and password, which may allow an authenticated attacker to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:49:42.000Z
CVE-2019-7673 
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T22:00:00.000Z
CVE-2019-7674 
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-09T22:00:00.000Z