Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7659 State: PUBLISHED Published: 2019-02-09T14:00:00 Last Updated: 2024-08-04T20:54:28.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html - https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_
ists.debian.org/debian-lts-announce/2019/02/msg00027.html - https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29 - https://outpost24.com/blog/gsoap-vulnerability-identified
CVE ID: CVE-2019-7660 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-04T20:54:28.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting (XSS) vulnerability, as demonstrated by admin/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/PHPMyWind/XSS-2
CVE ID: CVE-2019-7661 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-04T20:54:28.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/PHPMyWind/XSS-1
CVE ID: CVE-2019-7662 State: PUBLISHED Published: 2019-02-09T16:00:00 Last Updated: 2024-08-04T20:54:28.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash) via a crafted wasm file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/1872
CVE ID: CVE-2019-7663 State: PUBLISHED Published: 2019-02-09T16:00:00 Last Updated: 2024-08-04T20:54:28.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2833 - https://usn.ubuntu.com/3906-1/ - https://lists.debian.org/debian-lts-announce/
zilla.maptools.org/show_bug.cgi?id=2833 - https://usn.ubuntu.com/3906-1/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00026.html - https://usn.ubuntu.com/3906-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html - https://gitlab.com/libtiff/libtiff/commit/802d3cbf3043be5dce5317e140ccb1c17a6a2d39 - https://security.gentoo.org/glsa/202003-25 - https://www.debian.org/security/2020/dsa-4670
CVE ID: CVE-2019-7664 State: PUBLISHED Published: 2019-02-09T16:00:00 Last Updated: 2024-08-04T20:54:28.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash). Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24084 - https://access.redhat.com/errata/RHSA-2019:2197 - https://access.redhat.com/errata/RHSA-2019:3575
CVE ID: CVE-2019-7665 State: PUBLISHED Published: 2019-02-09T16:00:00 Last Updated: 2024-08-04T20:54:28.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24089 - https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html - https://sourceware.org/ml/elfutils-devel/2019-q1/msg000
s://lists.debian.org/debian-lts-announce/2019/02/msg00036.html - https://sourceware.org/ml/elfutils-devel/2019-q1/msg00049.html - https://usn.ubuntu.com/4012-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html - https://access.redhat.com/errata/RHSA-2019:2197 - https://access.redhat.com/errata/RHSA-2019:3575 - https://lists.debian.org/debian-lts-announce/2021/10/msg00030.html
CVE ID: CVE-2019-7666 State: PUBLISHED Published: 2019-07-01T18:27:36 Last Updated: 2024-08-04T20:54:28.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155262/Prima-FlexAir-Access-Cont
://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155262/Prima-FlexAir-Access-Control-2.3.35-Database-Backup-Predictable-Name.html
CVE ID: CVE-2019-7667 State: PUBLISHED Published: 2019-07-01T18:22:21 Last Updated: 2024-08-04T20:54:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the database backup file name. A malicious actor can exploit this issue to download the database file and disclose login information, which can allow the attacker to bypass authentication and have full access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/
t Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155262/Prima-FlexAir-Access-Control-2.3.35-Database-Backup-Predictable-Name.html
CVE ID: CVE-2019-7668 State: PUBLISHED Published: 2019-07-01T18:20:35 Last Updated: 2024-08-04T20:54:28.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir devices have Default Credentials. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-007
CVE ID: CVE-2019-7669 State: PUBLISHED Published: 2019-07-01T18:18:13 Last Updated: 2024-08-04T20:54:28.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155270/FlexAir-Access-C
7 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155270/FlexAir-Access-Control-2.3.38-Command-Injection.html
CVE ID: CVE-2019-7670 State: PUBLISHED Published: 2019-07-01T18:12:44 Last Updated: 2024-08-04T20:54:28.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155271/FlexAir-Access-Control-2.3.38-Remote-Root.html
CVE ID: CVE-2019-7671 State: PUBLISHED Published: 2019-06-05T18:53:12 Last Updated: 2024-08-04T20:54:28.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user’s browser session in context of an affected site. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://applied-risk.com/index.php/download_file/view/199/165 - https://applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - ht
ew/199/165 - https://applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02 - http://packetstormsecurity.com/files/155274/Prima-Access-Control-2.3.35-Cross-Site-Scripting.html
CVE ID: CVE-2019-7672 State: PUBLISHED Published: 2019-06-05T18:49:42 Last Updated: 2024-08-04T20:54:27.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. The flash version of the web interface contains a hard-coded username and password, which may allow an authenticated attacker to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://applied-risk.com/index.php/download_file/view/199/165 - https://applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02
CVE ID: CVE-2019-7673 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:28.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE ID: CVE-2019-7674 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE ID: CVE-2019-7675 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:28.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE ID: CVE-2019-7676 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:27.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: A weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port 8888 with the admin password for the admin account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pudding2/enphase-energy/blob/master/weak_password_1.png - https://github.com/pudding2/enphase-energy/blob/master/weak_password_2.png - https://github.com/pudding2/enphase-energy/blob/master/weak_password.txt
CVE ID: CVE-2019-7677 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:28.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pudding2/enphase-energy/blob/master/XSS-exp.txt - https://github.com/pudding2/enphase-energy/blob/master/XSS.png
CVE ID: CVE-2019-7678 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:28.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/, include/js, or include/css on TCP port 8888. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pudding2/enphase-energy/blob/master/directory_traversal_1.png - https://github.com/pudding2/enphase-energy/blob/master/directory_traversal_exp.txt
CVE ID: CVE-2019-7684 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-04T20:54:28.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadController#gok4 (com/inxedu/os/common/controller/VideoUploadController.java). The attacker uses the /video/uploadvideo fileType parameter to change the list of acceptable extensions from jpg,gif,png,jpeg to jpg,gif,png,jsp,jpeg. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/inxeduopen/inxedu/issues/IQJUH
CVE ID: CVE-2019-7687 State: PUBLISHED Published: 2019-05-07T18:58:07 Last Updated: 2024-08-04T20:54:28.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151654/Jiofi-4-JMR-1140-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/46363/ - https://drive.google.com/file/d/1EhW-XfjuQfy2scjKWW_heo-7nzKWffW6/view?usp=sharing - https://drive.google.com/file/d/1GlDF8RCRepNLHrgfelTMsjsYUSZvXkhw/view?usp=
uQfy2scjKWW_heo-7nzKWffW6/view?usp=sharing - https://drive.google.com/file/d/1GlDF8RCRepNLHrgfelTMsjsYUSZvXkhw/view?usp=sharing - https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7687-jiofi-4-jmr1140.html
CVE ID: CVE-2019-7690 State: PUBLISHED Published: 2019-05-13T15:58:33 Last Updated: 2024-08-04T20:54:28.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from process memory for the lifetime of the process, even after the user disconnects from the remote SSH server. This affects Passwordless Authentication that has a Password Protected SSH Private Key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yogeshshe1ke/CVE/blob/master/2019-7690/mobaxterm_exploit.py
CVE ID: CVE-2019-7692 State: PUBLISHED Published: 2019-02-10T16:00:00Z Last Updated: 2024-09-16T17:32:36.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call to the PHP fputs function that creates a .php file in the public folder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/cim.md#getshell
CVE ID: CVE-2019-7693 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/raw/nQ648Dif - http://storage.axiositalia.com/Quick_Guide/Manuale_Avviamento.pdf
CVE ID: CVE-2019-7697 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/351
CVE ID: CVE-2019-7698 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AP4_Array<AP4_CttsTableEntry>::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/354
CVE ID: CVE-2019-7699 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/355
CVE ID: CVE-2019-7700 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-merge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/1864
CVE ID: CVE-2019-7701 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/1863
CVE ID: CVE-2019-7702 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/1867
CVE ID: CVE-2019-7703 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/1865
CVE ID: CVE-2019-7704 State: PUBLISHED Published: 2019-02-10T22:00:00 Last Updated: 2024-08-04T20:54:28.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/1866
CVE ID: CVE-2019-7711 State: PUBLISHED Published: 2019-03-26T01:00:24 Last Updated: 2024-08-04T20:54:28.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command "prompt" sets the (user controlled) shell's prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - https://www.ghs.com/products/rtos/integrity.html
CVE ID: CVE-2019-7712 State: PUBLISHED Published: 2019-03-26T01:00:37 Last Updated: 2024-08-04T20:54:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf() without a proper check. An attacker may thus forge a path containing format string modifiers to get a custom format string evaluated. This results in an information leak of memory addresses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - ht
ry addresses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - https://www.ghs.com/products/rtos/integrity.html
CVE ID: CVE-2019-7713 State: PUBLISHED Published: 2019-03-26T01:00:49 Last Updated: 2024-08-04T20:54:28.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or current working directory. Modifier expansion triggers this overflow, causing memory corruption or a crash (and also leaks memory address information). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ck
s memory address information). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - https://www.ghs.com/products/rtos/integrity.html
CVE ID: CVE-2019-7714 State: PUBLISHED Published: 2019-03-26T01:01:00 Last Updated: 2024-08-04T20:54:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - https://www.ghs.com/products/rtos/integrity.html