Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-17662 State: PUBLISHED Published: 2019-10-16T17:24:07 Last Updated: 2024-08-05T01:47:13.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://redteamzone.com/ThinVNC/ - https://github.com/shashankmangal2/Exploits/blob/master/ThinVNC-RemoteAccess/POC.py - h
tps://redteamzone.com/ThinVNC/ - https://github.com/shashankmangal2/Exploits/blob/master/ThinVNC-RemoteAccess/POC.py - https://github.com/bewest/thinvnc/issues/5 - http://packetstormsecurity.com/files/154896/ThinVNC-1.0b1-Authentication-Bypass.html
CVE ID: CVE-2019-17663 State: PUBLISHED Published: 2019-10-16T17:55:28 Last Updated: 2024-08-05T01:47:13.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-116
CVE ID: CVE-2019-17664 State: PUBLISHED Published: 2019-10-16T19:42:11 Last Updated: 2024-08-05T01:47:13.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try to execute the cmd.exe program from this working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NationalSecurityAgency/ghidra/issues/107
CVE ID: CVE-2019-17665 State: PUBLISHED Published: 2019-10-16T19:41:54 Last Updated: 2024-08-05T01:47:13.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NationalSecurityAgency/ghidra/issues/286
CVE ID: CVE-2019-17666 State: PUBLISHED Published: 2019-10-17T01:47:59 Last Updated: 2024-08-05T01:47:13.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2019/10/16/1226 - https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/ - https://twitter.com/nicowaisman/status/1184864519316758535 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
.com/nicowaisman/status/1184864519316758535 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRBP4O6D2SQ2NHCRHTJONGCZLWOIV5MN/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html - https://security.netapp.com/advisory/ntap-20191031-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html - https://usn.ubuntu.com/4185-1/ - https://usn.ubuntu.com/4183-1/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - https://usn.ubuntu.com/4186-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.co
g/debian-lts-announce/2020/01/msg00013.html - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - https://access.redhat.com/errata/RHSA-2020:0543 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://access.redhat.com/errata/RHSA-2020:0661 - https://access.redhat.com/errata/RHSA-2020:0740
CVE ID: CVE-2019-17667 State: PUBLISHED Published: 2019-10-17T10:49:52 Last Updated: 2024-08-05T01:47:13.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2019/10/comtech-stored-xss-heights-remote.html
CVE ID: CVE-2019-17668 State: PUBLISHED Published: 2019-10-17T11:05:49 Last Updated: 2024-08-05T01:47:13.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector. Additional Analyst Notes: - CVE Program Container: References: - https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11 - https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/ - https://news.ycombinator.com/item?id=21280205
CVE ID: CVE-2019-17669 State: PUBLISHED Published: 2019-10-17T12:03:06 Last Updated: 2024-08-05T01:47:13.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters. Additional Analyst Notes: - CVE Program Container: References: - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://core.trac.wordpress.org/changeset/46475 - https://github.com/WordPress/WordPress/commit/608d39faed
ty-release/ - https://core.trac.wordpress.org/changeset/46475 - https://github.com/WordPress/WordPress/commit/608d39faed63ea212b6c6cdf9fe2bef92e2120ea - https://wpvulndb.com/vulnerabilities/9912 - https://lists.debian.org/debian-lts-announce/2019/11/msg00000.html - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-17670 State: PUBLISHED Published: 2019-10-17T00:00:00 Last Updated: 2024-08-05T01:47:13.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows paths are mishandled during certain validation of relative URLs. Additional Analyst Notes: - CVE Program Container: References: - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://core.trac.wordpress.org/changeset/46472 - https://github.com/WordPress/WordPress/commit/9db44754b9e4044690a6c32fd74b9d
//core.trac.wordpress.org/changeset/46472 - https://github.com/WordPress/WordPress/commit/9db44754b9e4044690a6c32fd74b9d5fe26b07b2 - https://wpvulndb.com/vulnerabilities/9912 - https://lists.debian.org/debian-lts-announce/2019/11/msg00000.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00010.html
CVE ID: CVE-2019-17671 State: PUBLISHED Published: 2019-10-17T12:04:04 Last Updated: 2024-08-05T01:47:13.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9909 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://core.trac.wordpress.org/changeset/46474 - https://github.com/WordPress/WordPress/commit/f82ed753cf0032
elease/ - https://core.trac.wordpress.org/changeset/46474 - https://github.com/WordPress/WordPress/commit/f82ed753cf00329a5e41f2cb6dc521085136f308 - https://lists.debian.org/debian-lts-announce/2019/11/msg00000.html - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-17672 State: PUBLISHED Published: 2019-10-17T12:03:52 Last Updated: 2024-08-05T01:47:13.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9910 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-17673 State: PUBLISHED Published: 2019-10-17T12:03:42 Last Updated: 2024-08-05T01:47:13.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9911 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://core.trac.wordpress.org/changeset/46478 - https://github.com/WordPress/WordPress/commit/b224c251
rity-release/ - https://core.trac.wordpress.org/changeset/46478 - https://github.com/WordPress/WordPress/commit/b224c251adfa16a5f84074a3c0886270c9df38de - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-17674 State: PUBLISHED Published: 2019-10-17T12:03:18 Last Updated: 2024-08-05T01:47:13.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9908 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-17675 State: PUBLISHED Published: 2019-10-17T12:03:29 Last Updated: 2024-08-05T01:47:13.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9913 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html - https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ - https://core.trac.wordpress.org/changeset/46477 - https://github.com/WordPress/WordPress/commit/b
-4-security-release/ - https://core.trac.wordpress.org/changeset/46477 - https://github.com/WordPress/WordPress/commit/b183fd1cca0b44a92f0264823dd9f22d2fd8b8d0 - https://lists.debian.org/debian-lts-announce/2019/11/msg00000.html - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-17676 State: PUBLISHED Published: 2019-10-17T12:16:26 Last Updated: 2024-08-05T01:47:13.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anx1ang/notes/issues/1
CVE ID: CVE-2019-18177 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T17:18:48.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX276688/citrix-application-delivery-controller-citrix-gateway-and-citrix-sdwan-wanop-appliance-security-update
CVE ID: CVE-2019-18178 State: PUBLISHED Published: 2019-11-04T19:37:35 Last Updated: 2024-08-05T01:47:13.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFREE, which (by default) is a macro definition of vPortFree(), but it is reused to flush modified file content from the cache to disk by the function FF_FlushCache(). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/freertos/bugs/199/
CVE ID: CVE-2019-18179 State: PUBLISHED Published: 2020-01-06T00:00:00 Last Updated: 2024-08-05T01:47:13.546Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn't have permissions. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2019-14-security-update-for-otrs
es: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2019-14-security-update-for-otrs-framework/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2019-18180 State: PUBLISHED Published: 2019-12-05T14:54:55.931744Z Last Updated: 2024-09-16T19:24:26.216Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: ((OTRS)) Community Edition 5.0.x version 5.0.38 and prior versions; 6.0.x version 6.0.23 and prior versions. OTRS AG: OTRS 7.0.x version 7.0.12 and prior versions. Additional Analyst Notes:
.0.x version 6.0.23 and prior versions. OTRS AG: OTRS 7.0.x version 7.0.12 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2019-15-security-update-for-otrs-framework/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2019-18181 State: PUBLISHED Published: 2019-12-19T18:17:06 Last Updated: 2024-08-05T01:47:13.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices/security-advisories/9001-security-advisory-44
CVE ID: CVE-2019-18182 State: PUBLISHED Published: 2020-02-24T14:38:43 Last Updated: 2024-08-05T01:47:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable a non-default XferCommand and retrieve an attacker-controlled crafted database and package. Additional Analyst Notes: - CVE Program Container: References: - https://git.archlinux.org/pacman.git/tree/src/pacman/conf.c?h=v5.1.3#n263 - https://git.archlinux.org/pacman.git/commit/?id=808a4f15ce82d2ed7eeb06de7
man.git/tree/src/pacman/conf.c?h=v5.1.3#n263 - https://git.archlinux.org/pacman.git/commit/?id=808a4f15ce82d2ed7eeb06de73d0f313620558ee - https://github.com/alpinelinux/alpine-secdb/blob/master/v3.11/community.yaml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K53C45EDWBU3UCN3IRIGR5EZUNWXS7BW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TTUXXUW5OCOASIRMJK4RHEPLEA33Y6C/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KIDJ4XKBZRRVRFFGKUA3ZU6NFIP5JUG3/
CVE ID: CVE-2019-18183 State: PUBLISHED Published: 2020-02-24T14:36:18 Last Updated: 2024-08-05T01:47:13.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable the non-default delta feature and retrieve an attacker-controlled crafted database and delta file. Additional Analyst Notes: - CVE Program Container: References: - https://git.archlinux.org/pacman.git/tree/lib/libalpm/sync.c?h=v5.1.3#n767 - https://git.archlinux.org/pacman.git/commit/?id=c0e9be7973be6c81b2
rg/pacman.git/tree/lib/libalpm/sync.c?h=v5.1.3#n767 - https://git.archlinux.org/pacman.git/commit/?id=c0e9be7973be6c81b22fde91516fb8991e7bb07b - https://github.com/alpinelinux/alpine-secdb/blob/master/v3.11/community.yaml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K53C45EDWBU3UCN3IRIGR5EZUNWXS7BW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TTUXXUW5OCOASIRMJK4RHEPLEA33Y6C/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KIDJ4XKBZRRVRFFGKUA3ZU6NFIP5JUG3/
CVE ID: CVE-2019-18184 State: PUBLISHED Published: 2019-11-27T15:59:49 Last Updated: 2024-08-05T01:47:13.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function. Additional Analyst Notes: - CVE Program Container: References: - https://www.quantumleap.it/news/advisory/ - https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO - https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
CVE ID: CVE-2019-18187 State: PUBLISHED Published: 2019-10-28T19:28:32.000Z Last Updated: 2025-10-29T13:21:30.943Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Arbitrary File Upload with Directory Traversal Description: Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user a
e account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000151730
CVE ID: CVE-2019-18188 State: PUBLISHED Published: 2019-10-28T19:28:32 Last Updated: 2024-08-05T01:47:13.496Z Vendors: Trend Micro Products: Trend Micro Apex One Problem Types: Arbitrary File Upload with Command Injection Description: Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to the IUSR account, which has restricted permission and is unable to make major system changes. An attempted attack requires user authentication. Additional Analyst Notes: - CVE
s unable to make major system changes. An attempted attack requires user authentication. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000151731
CVE ID: CVE-2019-18189 State: PUBLISHED Published: 2019-10-28T19:28:32 Last Updated: 2024-08-05T01:47:13.759Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro OfficeScan (OSCE), Trend Micro Worry-Free Business Security (WFBS) Problem Types: Root Login Bypass with Directory Traversal Description: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicr
s not require authentication. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000151732
CVE ID: CVE-2019-18190 State: PUBLISHED Published: 2019-12-09T18:50:15 Last Updated: 2024-08-05T01:47:13.766Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Unsigned Code Execution Description: Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx
CVE ID: CVE-2019-18191 State: PUBLISHED Published: 2019-12-16T21:00:15 Last Updated: 2024-08-05T01:47:13.566Z Vendors: Trend Micro Products: Trend Micro Deep Security as a Service Problem Types: Privilege Escalation Description: A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000157758