stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2019-7159 (severity: HIGH, weakness: NVD-CWE-Other)
OX App Suite 7.10.1 and earlier allows Information Exposure.
CVE-2019-7160 (severity: CRITICAL, weakness: CWE-22)
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.
CVE-2019-7161 (severity: HIGH, weakness: CWE-798)
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
CVE-2019-7162 (severity: CRITICAL, weakness: NVD-CWE-Other)
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retrieve internal information from the system and modify the product installation.
CVE-2019-7163 (severity: CRITICAL, weakness: CWE-287)
The web interface of Alcatel LINKZONE MW40-V-V1.0 MW40_LU_02.00_02 devices is vulnerable to an authentication bypass that allows an unauthenticated user to have access to the web interface without knowing the administrator's password.
CVE-2019-7164 (severity: CRITICAL, weakness: CWE-89)
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
CVE-2019-7165 (severity: CRITICAL, weakness: CWE-119)
A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.
CVE-2019-7167 (severity: HIGH, weakness: CWE-754)
Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced certain bypass elements. Availability of these elements allowed a cheating prover to bypass a consistency check, and consequently transform the proof of one statement into an ostensibly valid proof of a different statement, thereby breaking the soundness of the proof system. This misled the original Sprout zk-SNARK verifier into accepting the correctness of a transaction.
CVE-2019-7168 (severity: MEDIUM, weakness: CWE-79)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.
CVE-2019-7169 (severity: MEDIUM, weakness: CWE-79)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3.
CVE-2019-7170 (severity: MEDIUM, weakness: CWE-79)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocabularies.
CVE-2019-7171 (severity: MEDIUM, weakness: CWE-79)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8.
CVE-2019-7172 (severity: MEDIUM, weakness: CWE-79)
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.
CVE-2019-7173 (severity: MEDIUM, weakness: CWE-79)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4.
CVE-2019-7174 (severity: CRITICAL, weakness: NVD-CWE-Other)
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.
CVE-2019-7175 (severity: HIGH, weakness: CWE-401)
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
CVE-2019-7176 (severity: LOW, weakness: NVD-CWE-Other)
An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility.
CVE-2019-7177 (severity: HIGH, weakness: CWE-94)
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.
CVE-2019-7178 (severity: HIGH, weakness: CWE-20)
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.
CVE-2019-7181 (severity: HIGH, weakness: CWE-119)
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
CVE-2019-7183 (severity: CRITICAL, weakness: CWE-59)
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.
CVE-2019-7184 (severity: MEDIUM, weakness: CWE-79)
This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.
CVE-2019-7185 (severity: MEDIUM, weakness: CWE-79)
This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.
CVE-2019-7192 (severity: CRITICAL, weakness: CWE-863)
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
CVE-2019-7193 (severity: CRITICAL, weakness: CWE-20)
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
CVE-2019-7194 (severity: CRITICAL, weakness: CWE-22)
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
CVE-2019-7195 (severity: CRITICAL, weakness: CWE-22)
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
CVE-2019-7197 (severity: MEDIUM, weakness: CWE-79)
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.
CVE-2019-7198 (severity: CRITICAL, weakness: CWE-77)
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later
CVE-2019-7201 (severity: HIGH, weakness: CWE-428)
An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108.
CVE-2019-7211 (severity: MEDIUM, weakness: CWE-79)
SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment.
CVE-2019-7212 (severity: HIGH, weakness: CWE-798)
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
CVE-2019-7213 (severity: MEDIUM, weakness: CWE-22)
SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.
CVE-2019-7214 (severity: CRITICAL, weakness: CWE-502)
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
CVE-2019-7215 (severity: MEDIUM, weakness: CWE-613)
Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie can be reused to maintain access to the account, even if the account credentials and permissions are changed.
CVE-2019-7216 (severity: HIGH, weakness: NVD-CWE-Other)
An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php.
CVE-2019-7217 (severity: HIGH, weakness: CWE-203)
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.
CVE-2019-7218 (severity: MEDIUM, weakness: CWE-287)
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using username/otp combination only (phase 2 of 2FA).
CVE-2019-7219 (severity: MEDIUM, weakness: CWE-79)
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.
CVE-2019-7220 (severity: MEDIUM, weakness: CWE-79)
X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.
CVE-2019-7221 (severity: HIGH, weakness: CWE-416)
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVE-2019-7222 (severity: MEDIUM, weakness: NVD-CWE-Other)
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
CVE-2019-7223 (severity: MEDIUM, weakness: CWE-79)
InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255.
CVE-2019-7225 (severity: HIGH, weakness: CWE-798)
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags (MODBUS coils) mapping to the HMI. These credentials are the idal123 password for the IdalMaster account, and the exor password for the exor account. These credentials are used over both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device. This affects ABB CP635 HMI, CP600 HMIClient, Panel Builder 600, IDAL FTP server, IDAL HTTP server, and multiple other HMI components.
CVE-2019-7226 (severity: HIGH, weakness: CWE-287)
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the username and cleartext password of the user. An attacker can then supply an IDALToken value in a cookie, which will allow them to perform privileged operations such as restarting the service with /cgi/restart. A GET request to /cgi/loginDefaultUser may result in "1 #S_OK IDALToken=532c8632b86694f0232a68a0897a145c admin admin" or a similar response.
CVE-2019-7227 (severity: HIGH, weakness: CWE-22)
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default credential pair exor/exor to become an authenticated attacker.
CVE-2019-7228 (severity: HIGH, weakness: CWE-134)
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
CVE-2019-7229 (severity: HIGH, weakness: CWE-494)
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
CVE-2019-7230 (severity: HIGH, weakness: CWE-134)
The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
CVE-2019-7231 (severity: MEDIUM, weakness: CWE-119)
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that terminates the server.
CVE-2019-7232 (severity: HIGH, weakness: CWE-787)
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured Exception Handler (SEH) address. An unauthenticated attacker can submit a Host header value of 2047 bytes or more to overflow the buffer and overwrite the SEH address, which can then be leveraged to execute attacker-controlled code on the server.
CVE-2019-7233 (severity: HIGH, weakness: CWE-476)
In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
CVE-2019-7234 (severity: CRITICAL, weakness: CWE-22)
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
CVE-2019-7235 (severity: HIGH, weakness: CWE-22)
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
CVE-2019-7236 (severity: HIGH, weakness: CWE-22)
An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.
CVE-2019-7237 (severity: HIGH, weakness: CWE-22)
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
CVE-2019-7238 (severity: CRITICAL, weakness: NVD-CWE-Other)
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
CVE-2019-7240 (severity: HIGH, weakness: CWE-665)
An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
CVE-2019-7244 (severity: HIGH, weakness: CWE-665)
An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
CVE-2019-7245 (severity: HIGH, weakness: CWE-665)
An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
CVE-2019-7246 (severity: MEDIUM, weakness: NVD-CWE-Other)
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
CVE-2019-7247 (severity: CRITICAL, weakness: NVD-CWE-Other)
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
CVE-2019-7249 (severity: CRITICAL, weakness: CWE-367)
In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.
CVE-2019-7250 (severity: MEDIUM, weakness: CWE-79)
An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin.
CVE-2019-7251 (severity: MEDIUM, weakness: CWE-190)
An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.
CVE-2019-7252 (severity: CRITICAL, weakness: CWE-1188)
Linear eMerge E3-Series devices have Default Credentials.
CVE-2019-7253 (severity: CRITICAL, weakness: CWE-22)
Linear eMerge E3-Series devices allow Directory Traversal.
CVE-2019-7254 (severity: HIGH, weakness: CWE-22)
Linear eMerge E3-Series devices allow File Inclusion.
CVE-2019-7255 (severity: MEDIUM, weakness: CWE-79)
Linear eMerge E3-Series devices allow XSS.
CVE-2019-7256 (severity: CRITICAL, weakness: CWE-78)
Linear eMerge E3-Series devices allow Command Injections.
CVE-2019-7257 (severity: CRITICAL, weakness: CWE-434)
Linear eMerge E3-Series devices allow Unrestricted File Upload.
CVE-2019-7258 (severity: HIGH, weakness: CWE-863)
Linear eMerge E3-Series devices allow Privilege Escalation.
CVE-2019-7259 (severity: HIGH, weakness: CWE-200)
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
CVE-2019-7260 (severity: CRITICAL, weakness: CWE-522)
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
CVE-2019-7261 (severity: CRITICAL, weakness: CWE-798)
Linear eMerge E3-Series devices have Hard-coded Credentials.
CVE-2019-7262 (severity: HIGH, weakness: CWE-352)
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7263 (severity: CRITICAL, weakness: CWE-18)
Linear eMerge E3-Series devices have a Version Control Failure.
CVE-2019-7264 (severity: CRITICAL, weakness: CWE-787)
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
CVE-2019-7265 (severity: CRITICAL, weakness: CWE-798)
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
CVE-2019-7266 (severity: CRITICAL, weakness: CWE-565)
Linear eMerge 50P/5000P devices allow Authentication Bypass.
CVE-2019-7267 (severity: CRITICAL, weakness: CWE-22)
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
CVE-2019-7268 (severity: CRITICAL, weakness: CWE-434)
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
CVE-2019-7269 (severity: CRITICAL, weakness: CWE-78)
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
CVE-2019-7270 (severity: HIGH, weakness: CWE-352)
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7271 (severity: CRITICAL, weakness: CWE-522)
Nortek Linear eMerge 50P/5000P devices have Default Credentials.
CVE-2019-7272 (severity: MEDIUM, weakness: CWE-862)
Optergy Proton/Enterprise devices allow Username Disclosure.
CVE-2019-7273 (severity: HIGH, weakness: CWE-352)
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7274 (severity: CRITICAL, weakness: CWE-434)
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
CVE-2019-7275 (severity: MEDIUM, weakness: CWE-601)
Optergy Proton/Enterprise devices allow Open Redirect.
CVE-2019-7276 (severity: CRITICAL, weakness: NVD-CWE-Other)
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
CVE-2019-7277 (severity: MEDIUM, weakness: NVD-CWE-Other)
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
CVE-2019-7278 (severity: MEDIUM, weakness: CWE-269)
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
CVE-2019-7279 (severity: HIGH, weakness: CWE-798)
Optergy Proton/Enterprise devices have Hard-coded Credentials.
CVE-2019-7280 (severity: HIGH, weakness: CWE-613)
Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.
CVE-2019-7281 (severity: HIGH, weakness: CWE-352)
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
CVE-2019-7282 (severity: MEDIUM, weakness: NVD-CWE-Other)
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.
CVE-2019-7283 (severity: HIGH, weakness: NVD-CWE-Other)
An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.
CVE-2019-7284 (severity: MEDIUM, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing.