yahoo-inc/cve-impacts huggingface dataset:
CVE-2019-1616: A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Cisco Fabric Services packets. An attacker could exploit this vulnerability by sending a crafted Cisco Fabric Services packet to an affected device. A successful exploit could allow the attacker to cause a buffer overflow, resulting in process crashes and a DoS condition on the device. MDS 9000 Series Multilayer Switches are affected running software versions prior to 6.2(25), 8.1(1b), 8.3(1). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected running software versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5) Nexus 7000 and 7700 Series Switches are affected running software versions prior to 6.2(22) and 8.2(3). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5). UCS 6200, 6300, and 6400 Fabric Interconnects are affected running software versions prior to 3.2(3j) and 4.0(2a).
Key phrases: denial of service (DoS), cause a buffer overflow, denial of service (dos) condition, process crashes
CVE-2019-16160: An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service.
Key phrases: crash the service, integer underflow
CVE-2019-16161: Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.
Key phrases: null pointer dereference
CVE-2019-16162: Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
Key phrases: out-of-bounds read, out of bounds read
CVE-2019-16163: Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
Key phrases: Stack Exhaustion in regcomp.c because of recursion in, stack exhaustion
CVE-2019-16164: MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c.
Key phrases: null pointer dereference
CVE-2019-16165: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.
Key phrases: use-after-free, use after free
CVE-2019-16166: GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2019-16167: sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
Key phrases: memory corruption, integer overflow
CVE-2019-16168: In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
Key phrases: crash
CVE-2019-1617: A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to an incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled. An attacker could exploit this vulnerability by sending a stream of FCoE frames from an adjacent host to an affected device. An exploit could allow the attacker to cause packet amplification to occur, resulting in the saturation of interfaces and a DoS condition. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5) and 9.2(2).
Key phrases: denial of service (DoS), cause a denial of service (DoS), cause packet amplification to occur, saturation of interfaces
CVE-2019-16170: An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control.
Key phrases: incorrect access control
CVE-2019-16171: In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.
Key phrases: xss
CVE-2019-16172: LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion.
Key phrases: stored xss, escalate privilege
CVE-2019-16173: LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This occurs in application/core/Survey_Common_Action.php,
Key phrases: reflected xss, escalate privilege
CVE-2019-16174: An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity.
Key phrases: import specially crafted XML files and execute code, xml injection, compromise data integrity
CVE-2019-16175: A clickjacking vulnerability was found in Limesurvey before 3.17.14.
Key phrases: clickjacking
CVE-2019-16176: A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application in the filesystem.
Key phrases: discover the path to the application in the, path disclosure
CVE-2019-16177: In Limesurvey before 3.17.14, the entire database is exposed through browser caching.
Key phrases: browser caching
CVE-2019-16178: A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via titles, stored cross-site scripting (xss)
CVE-2019-16179: Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.
CVE-2019-1618: A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to an incorrect permissions setting. An attacker could exploit this vulnerability by replacing valid agent files with malicious code. A successful exploit could result in the execution of code supplied by the attacker. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running versions prior to 7.0(3)I7(5).
Key phrases: execute arbitrary code, execute arbitrary code as root
CVE-2019-16180: Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used.
Key phrases: bruteforce the login form and enumerate usernames when
CVE-2019-16181: In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.
CVE-2019-16182: A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML via extensions of uploaded files.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via extensions, reflected cross-site scripting (xss)
CVE-2019-16183: In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions.
Key phrases: integrity
CVE-2019-16184: A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file.
Key phrases: inject commands via their survey responses that will, csv injection
CVE-2019-16185: In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.
CVE-2019-16186: In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.
CVE-2019-16187: Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script.
Key phrases: access a cookie value via a client-, anti-csrf cookie, httponly flag
CVE-2019-16188: HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source, the content of any file in the local file system (to which the victim as read access) can be exfiltrated to a remote listener under the attacker's control. The product does not disable external XML Entity Processing, which can lead to information disclosure and denial of services attacks.
Key phrases: xml external entity (xxe), information disclosure, denial of services
CVE-2019-1619: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session management on affected DCNM software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.
Key phrases: execute arbitrary actions, bypass authentication, gain administrative access, bypass authentication and execute arbitrary actions with administrative, gain administrative access on the affected device
CVE-2019-16190: SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folder_view.php or category_view.php.
Key phrases: Authentication Bypass, folder_view.php or category_view.php, authentication bypass
CVE-2019-16192: upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code through module management files
CVE-2019-16193: In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature.
Key phrases: iframe element, cross frame scripting (xfs)
CVE-2019-16194: SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.
Key phrases: attacks via the svc_id parameter in include/, sql injection
CVE-2019-16195: Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount alias and name fields.
Key phrases: XSS via myAccount alias and name fields, xss
CVE-2019-16197: In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.
Key phrases: xss
CVE-2019-16198: KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter.
Key phrases: ../ directory traversal, .. directory traversal
CVE-2019-16199: eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process.
Key phrases: the web interface via an HTTP POST request, remote code execution
CVE-2019-1620: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device.
Key phrases: upload arbitrary files, upload arbitrary files on an affected device, write arbitrary files on the filesystem and execute, execute code, root privilege
CVE-2019-16200: GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the http_cgi_write function under http-cgi.c; however, exploitation might show svz_envblock_add in libserveez/passthrough.c as the location of the heap-based buffer over-read.
Key phrases: information leak, heap-based buffer over-read, buffer over read
CVE-2019-16201: WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
Key phrases: denial of service
CVE-2019-16202: MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
Key phrases: 2.4.115, privilege escalation
CVE-2019-16203: Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when configuring the ESRS client.
CVE-2019-16204: Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server.
Key phrases: external passwords, common secrets, authentication keys
CVE-2019-16205: A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal.
Key phrases: brute-force a valid session ID
CVE-2019-16206: The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the trace and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.
Key phrases: access sensitive information, plaintext account credentials
CVE-2019-16207: Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges.
Key phrases: gain privileges, access a back-end database and gain, hard-coded password, hard coded password
CVE-2019-16208: Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services (Radius, TACAS, etc.).
Key phrases: decrypt passwords used with several services (Radius, weakness
CVE-2019-16209: A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections.
Key phrases: perform a man-in-the-, man-in-the-middle, man in the middle
CVE-2019-1621: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download arbitrary files from the underlying filesystem of the affected device.
Key phrases: download arbitrary files, gain access, gain access to sensitive files on an affected, download arbitrary files from the underlying filesystem of
CVE-2019-16210: Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save.
Key phrases: plain text database connection password
CVE-2019-16211: Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability.
Key phrases: plaintext password storage
CVE-2019-16212: A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process.
Key phrases: bypass the authentication, conduct an LDAP injection, bypass the authentication process, ldap injection, bypass authentication
CVE-2019-16213: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system with root privileges.
Key phrases: execute arbitrary commands, execute arbitrary commands on the system, root privilege
CVE-2019-16214: Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence (which introduces a single-line comment), followed by very brief comment text, the \\\\r character, and code that has security-critical functionality. In many popular environments, this code is displayed on a separate line, and thus a reader may infer that the code is executed. However, the code is NOT executed, because language/compiler/ir_to_bytecode/src/parser.rs allows the comment to continue after the \\\\r character.
Key phrases: continue after the \\\\r character, execute code
CVE-2019-16215: The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages.
Key phrases: exponential backtracking, arbitrary amount of cpu time, future messages
CVE-2019-16216: Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack is only effective against browsers lacking support for Content-Security-Policy such as Internet Explorer 11. On a Zulip server using the S3 uploads backend, the attack is confined to the origin of the configured S3 uploads hostname and cannot reach the Zulip server itself.
Key phrases: cross-site scripting
CVE-2019-16217: WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.
Key phrases: XSS in media uploads because wp_ajax_upload_attachment is mishandled, xss
CVE-2019-16218: WordPress before 5.2.3 allows XSS in stored comments.
Key phrases: XSS in stored comments, xss
CVE-2019-16219: WordPress before 5.2.3 allows XSS in shortcode previews.
Key phrases: XSS in shortcode previews, xss
CVE-2019-1622: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.
Key phrases: retrieve sensitive information from an affected device, download log files and diagnostic information from the, improper access control
CVE-2019-16220: In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect.
Key phrases: open redirect
CVE-2019-16221: WordPress before 5.2.3 allows reflected XSS in the dashboard.
Key phrases: reflected XSS in the dashboard, reflected xss
CVE-2019-16222: WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.
Key phrases: cross-site scripting (xss)
CVE-2019-16223: WordPress before 5.2.3 allows XSS in post previews by authenticated users.
Key phrases: XSS in post previews by authenticated users, xss
CVE-2019-16224: An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Key phrases: invalid write operation
CVE-2019-16225: An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Key phrases: invalid write operation
CVE-2019-16226: An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Key phrases: invalid write operation
CVE-2019-16227: An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Key phrases: invalid write operation
CVE-2019-16228: An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
Key phrases: divide-by-zero error
CVE-2019-16229: drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id
Key phrases: null pointer dereference
CVE-2019-1623: A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. An attacker with administrator-level credentials could exploit this vulnerability by injecting crafted arguments during command execution. A successful exploit could allow the attacker to perform arbitrary code execution as root on an affected product.
Key phrases: perform arbitrary code execution, inject arbitrary commands as the root user, perform arbitrary code execution as root on an, insufficient input validation, command execution
CVE-2019-16230: drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics card occurs during boot. It is not attacker controllable and OOM at that time is highly unlikely
Key phrases: null pointer dereference, attacker controllable
CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Key phrases: null pointer dereference
CVE-2019-16232: drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Key phrases: null pointer dereference
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Key phrases: null pointer dereference
CVE-2019-16234: drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
Key phrases: null pointer dereference
CVE-2019-16235: Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
CVE-2019-16236: Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
Key phrases: roster push authorization
CVE-2019-16237: Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
CVE-2019-16238: Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.
Key phrases: xss, session hijacking
CVE-2019-16239: process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
Key phrases: buffer overflow
CVE-2019-1624: A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the vManage Web UI. A successful exploit could allow the attacker to execute commands with root privileges.
Key phrases: inject arbitrary commands, inject arbitrary commands that are executed with root, execute commands with root privileges, insufficient input validation
CVE-2019-16240: A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Key phrases: buffer overflow, information disclosure
CVE-2019-16241: On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. This file would typically be created via Android Debug Bridge (adb) over USB.
Key phrases: special file, specific file, authentication bypass
CVE-2019-16242: On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named omamock that is vulnerable to OS command injection. An attacker with physical access to the device can abuse this vulnerability to execute arbitrary OS commands as the root user via the application's UI.
Key phrases: execute arbitrary OS commands, os command injection, arbitrary os command
CVE-2019-16243: On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. (This web API is normally used by the system application to trigger firmware updates via OmaService.js.)
Key phrases: view and edit the device's firmware over, unprivileged javascript
CVE-2019-16244: OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.
Key phrases: bypass the security filters, bypass the security filters and access hidden objects, bypass security
CVE-2019-16245: OMERO before 5.6.1 makes the details of each user available to all users.
CVE-2019-16246: Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution.
Key phrases: unauthenticated code execution, local file inclusion (lfi)
CVE-2019-16247: Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b.
Key phrases: user mode write av
CVE-2019-16248: The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previously sent image (analogous to supported functionality in which a sender can remove a recipient's copy of a previously sent message).
CVE-2019-16249: OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.
Key phrases: out-of-bounds read, out of bounds read
CVE-2019-1625: A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow the attacker to make configuration changes to the system as the root user.
Key phrases: elevate lower-level privileges to the root, make configuration changes to the system as the, execute commands
CVE-2019-16250: includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets (CSS) token sequence.
Key phrases: unauthenticated options changes and injection of a Cascading, injection of a cascading style sheets (css) token sequence
CVE-2019-16251: plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
Key phrases: authenticated options changes
CVE-2019-16252: Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data.
Key phrases: sniff and manipulate all API requests, missing ssl certificate validation, man in the middle
CVE-2019-16253: The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755.
Key phrases: escalate privileges
CVE-2019-16254: Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.
Key phrases: insert a newline character to split a header, http response splitting, untrusted input, crlf vector
CVE-2019-16255: Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
Key phrases: Shell#[] or Shell#test in lib, code injection
CVE-2019-16256: Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.
Key phrases: retrieve location and IMEI information
CVE-2019-16257: Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.
Key phrases: retrieve location and IMEI information
CVE-2019-16258: The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface.
Key phrases: gain root access, gain root access by manipulating the U-, physical access
CVE-2019-1626: A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An attacker could exploit this vulnerability by logging in to the vManage Web UI and sending crafted HTTP requests to vManage. A successful exploit could allow attackers to gain elevated privileges and make changes to the configuration that they would not normally be authorized to make.
Key phrases: gain elevated privileges, gain elevated privileges on an affected vManage device, gain elevated privileges and make changes to the
CVE-2019-16261: Tripp Lite PDUMH15AT 12.04.0053 devices allow unauthenticated POST requests to the /Forms/ directory, as demonstrated by changing the manager or admin password, or shutting off power to an outlet. NOTE: the vendor's position is that a newer firmware version, fixing this vulnerability, had already been released before this vulnerability report about 12.04.0053.
Key phrases: the /Forms/ directory, unauthenticated post requests, shutting off power to an outlet
CVE-2019-16263: The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.
Key phrases: implementation errors
CVE-2019-16264: In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database.
Key phrases: access the database, sql injection
CVE-2019-16265: CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.
Key phrases: buffer overflow
CVE-2019-16268: Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen.
Key phrases: HTML injection via the Description field on the, html injection
CVE-2019-1627: A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from the configuration data that is stored on the affected system. The vulnerability is due to insufficient protection of data in the configuration file. An attacker could exploit this vulnerability by downloading the configuration file. An exploit could allow the attacker to use the sensitive information from the file to elevate privileges.
Key phrases: gain unauthorized access, gain unauthorized access to sensitive user information from, use the sensitive information from the file to, elevate privileges
CVE-2019-16271: DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.
Key phrases: read saved whiteboard image PDF documents via storage
CVE-2019-16272: On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.
Key phrases: for firmware reflash and Android Debug Bridge (
CVE-2019-16273: DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the Android OS.
Key phrases: arbitrary code execution and system administration, unauthenticated root shell access, execute commands
CVE-2019-16274: DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
Key phrases: unencrypted http
CVE-2019-16275: hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.
Key phrases: an incorrect indication of disconnection in certain situations, denial of service
CVE-2019-16276: Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
Key phrases: HTTP Request Smuggling, http request smuggling
CVE-2019-16277: PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2019-16278: Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.
Key phrases: achieve remote code execution via a crafted HTTP, directory traversal
CVE-2019-16279: A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request.
Key phrases: trigger a denial of service via a crafted, memory error
CVE-2019-1628: A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checking. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. An exploit could allow the attacker to cause a buffer overflow, resulting in a process crash and DoS condition on the device.
Key phrases: denial of service (DoS), cause a buffer overflow, denial of service (dos) condition, crash
CVE-2019-16281: Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.
Key phrases: api token validation
CVE-2019-16282: In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Items/Customers fields parameter to inject arbitrary JavaScript.
Key phrases: inject arbitrary JavaScript, persistent cross site scripting (xss)
CVE-2019-16283: A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution.
Key phrases: arbitrary code execution
CVE-2019-16284: A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.
Key phrases: execute arbitrary SMM, elevation of privilege, arbitrary code, elevation privilege
CVE-2019-16285: If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive.
Key phrases: physical access, sensitive information
CVE-2019-16286: An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by changing browser preferences to launch a separate process that in turn can execute arbitrary commands.
Key phrases: execute arbitrary commands, bypass the OS application filter
CVE-2019-16287: In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed commands with elevated privileges.
Key phrases: application filter bypass, gain privileged, executed commands with elevated privileges, privileged access, execute commands
CVE-2019-16288: On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.
Key phrases: crash
CVE-2019-16289: The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.
Key phrases: authenticated XSS via the winp_item parameter, authenticated xss
CVE-2019-1629: A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the affected device. An exploit could allow the attacker to fill up the filesystem or upload malicious scripts.
Key phrases: upload arbitrary data, have write access and upload arbitrary data to, fill up the filesystem or upload malicious scripts, file upload
CVE-2019-16293: The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.
Key phrases: execute arbitrary OS commands, execute arbitrary OS commands via a crafted value, arbitrary os command
CVE-2019-16294: SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.
Key phrases: remote code execution or denial of service via
CVE-2019-16295: Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim.
Key phrases: stored xss
CVE-2019-16297: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Key phrases: code execution
CVE-2019-16298: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Key phrases: code execution
CVE-2019-16299: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types: HOST_ADDED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Key phrases: code execution
CVE-2019-1630: A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.
Key phrases: denial of service (DoS), cause a buffer overflow, denial of service (dos) condition
CVE-2019-16300: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOST_REMOVED. In combination with other applications, this could lead to the absence of intended code execution.
Key phrases: code execution
CVE-2019-16301: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the following event types: HOST_MOVED. In combination with other applications, this could lead to the absence of intended code execution.
Key phrases: code execution
CVE-2019-16302: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event types: HOST_MOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Key phrases: code execution
CVE-2019-16303: A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils). This allows an attacker (if able to obtain their own password reset URL) to compute the value for all other password resets for other accounts, thus allowing privilege escalation or account takeover.
Key phrases: obtain their own password, obtain their own password reset URL) to, privilege escalation or account takeover, insecure source of randomness
CVE-2019-16305: In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI.
Key phrases: command injection, command execution
CVE-2019-16307: A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter (webExMeetingLogin.jsp) and meetingKey parameter (deleteWebExMeetingCheck.jsp).
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected cross-site scripting (xss)
CVE-2019-16309: FlameCMS 3.3.5 has SQL injection in account/login.php via accountName.
Key phrases: sql injection
CVE-2019-1631: A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow an attacker to view sensitive system data.
Key phrases: access potentially sensitive system usage information, view sensitive system data, successful exploit
CVE-2019-16310: NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.
Key phrases: xss
CVE-2019-16311: NIUSHOP V1.11 has CSRF via search&#95;info to index.php.
Key phrases: csrf
CVE-2019-16312: s-cms V3.0 has XSS in index.php?type=text via the S_id parameter.
Key phrases: xss