Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7317 State: PUBLISHED Published: 2019-02-04T07:00:00 Last Updated: 2024-08-04T20:46:45.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Apr/30 - https://www.debian.org/security/2019/dsa-4435 - https://seclists.org/bugtraq/2019/Apr/36 - https://usn.ubuntu.com/3962-1/ - https://usn.ubuntu.com/3991-1/ - https://seclists.org/bugtraq/2019/May/56 - https://seclists.org/bugtraq/2019/May/59 - https://www.debian.org/security/2019/dsa
//seclists.org/bugtraq/2019/May/56 - https://seclists.org/bugtraq/2019/May/59 - https://www.debian.org/security/2019/dsa-4448 - https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html - https://access.redhat.com/errata/RHSA-2019:1265 - https://access.redhat.com/errata/RHSA-2019:1267 - https://access.redhat.com/errata/RHSA-2019:1269 - https://www.debian.org/security/2019/dsa-4451 - https://seclists.org/bugtraq/2019/May/67 - https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html - https://usn.ubuntu.com/3997-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html - https://access.redhat.com/errata/RHSA-2019:1310 - https://access.redhat.com/errata/
ity-announce/2019-06/msg00002.html - https://access.redhat.com/errata/RHSA-2019:1310 - https://access.redhat.com/errata/RHSA-2019:1308 - https://access.redhat.com/errata/RHSA-2019:1309 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html - http://www.securityfocus.com/bid/108098 - https://usn.ubuntu.com/4080-1/ - https://usn.ubuntu.com/4083-1/ - https://security.gentoo.org/glsa/201908-02 - https://access.redhat.com/errata/RHSA-2019:2494 - https://access.redhat.com/errata/RHSA-2019:2495 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html - http://lists.opensuse.org/ope
A-2019:2495 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2585 - https://access.redhat.com/errata/RHSA-2019:2590 - https://access.redhat.com/errata/RHSA-2019:2592 - https://access.redhat.com/errata/RHSA-2019:2737 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803 - https://github.com/glennrp/libpng/issues/275 - http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.
.com/glennrp/libpng/issues/275 - http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html - https://security.netapp.com/advisory/ntap-20190719-0005/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2019-7319 State: PUBLISHED Published: 2019-11-26T15:22:11 Last Updated: 2024-08-04T20:46:46.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#hue - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-B
s/topics/Security-Bulletin.html#hue - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_o2p_hjm_33b
CVE ID: CVE-2019-7321 State: PUBLISHED Published: 2019-06-13T17:20:13 Last Updated: 2024-09-11T15:43:54.548374 Vendors: n/a Products: n/a Problem Types: n/a Description: Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=700560 - https://github.com/ereisr00/bagofbugz/tree/master/MuPDF/700560 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=2be83b57e77938fddbb06bdffb11979ad89a9c7d
CVE ID: CVE-2019-7323 State: PUBLISHED Published: 2019-02-04T16:00:00Z Last Updated: 2024-09-16T22:10:17.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the LogMXUpdater.class file. Additional Analyst Notes: - CVE Program Container: References: - https://logmx.com/download - https://bmantra.github.io/logmx/logmx.html - https://github.com/bmantra/bmantra.github.io/blob/master/logmx/logmx.html
CVE ID: CVE-2019-7324 State: PUBLISHED Published: 2019-02-04T19:00:00 Last Updated: 2024-08-04T20:46:46.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/83deec2e3621c40d15a06e2491f27571d32fe10f - https://github.com/kanboard/kanboard/releases/tag/v1.2.8 - http://packetstormsecurity.com/files/153093/Kanboard-1.2.7-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/May/41
CVE ID: CVE-2019-7325 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T18:09:22.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2450
CVE ID: CVE-2019-7326 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T01:20:56.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (console.php) because proper filtration is omitted. This relates to the index.php?view=monitor Host Name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2452
CVE ID: CVE-2019-7327 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T19:29:53.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2447
CVE ID: CVE-2019-7328 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T03:18:59.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2449
CVE ID: CVE-2019-7329 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T19:40:31.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2446
CVE ID: CVE-2019-7330 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T17:08:10.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2448
CVE ID: CVE-2019-7331 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T01:35:54.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2451
CVE ID: CVE-2019-7332 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T16:58:21.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter value in the view download (download.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2442
CVE ID: CVE-2019-7333 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T01:01:33.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download (download.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2441
CVE ID: CVE-2019-7334 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T18:04:01.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view export (export.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2443
CVE ID: CVE-2019-7335 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T00:36:33.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2453
CVE ID: CVE-2019-7336 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T01:52:06.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view _monitor_filters.php contains takes in input from the user and saves it into the session, and retrieves it later (insecurely). The values of the MonitorName and Source parameters are being displayed without any output filtration being applied. This relates to the view=cycle value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2457
CVE ID: CVE-2019-7337 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T03:27:55.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2456
CVE ID: CVE-2019-7338 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T20:52:39.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value on the web page without applying any proper filtration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2454
CVE ID: CVE-2019-7339 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T18:33:41.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'level' parameter value in the view log (log.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2460
CVE ID: CVE-2019-7340 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T02:41:31.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2462
CVE ID: CVE-2019-7341 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T03:47:53.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[LinkedMonitors]' parameter value in the view monitor (monitor.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2463
CVE ID: CVE-2019-7342 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T17:28:27.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[AutoExecuteCmd]' parameter value in the view filter (filter.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2461
CVE ID: CVE-2019-7343 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T22:09:01.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2464
CVE ID: CVE-2019-7344 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T22:36:26.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'filter' as it insecurely prints the 'filter[Name]' (aka Filter name) value on the web page without applying any proper filtration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2455
CVE ID: CVE-2019-7345 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T17:42:47.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'options' (options.php) does no input validation for the WEB_TITLE, HOME_URL, HOME_CONTENT, or WEB_CONSOLE_BANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2468
CVE ID: CVE-2019-7346 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T00:25:33.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2469
CVE ID: CVE-2019-7347 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T00:31:48.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records (add/delete Monitors, Users, etc.). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2476
CVE ID: CVE-2019-7348 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T16:27:38.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user (user.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2467
CVE ID: CVE-2019-7349 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T03:02:55.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[V4LCapturesPerFrame]' parameter value in the view monitor (monitor.php) because proper filtration is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2465
CVE ID: CVE-2019-7350 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T02:00:43.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session cookies to the next logged-in user, thereby hijacking the victim's account. This occurs because a set of multiple cookies (between 3 and 5) is being generated when a user successfully logs in, and these sets overlap for successive logins. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2471
CVE ID: CVE-2019-7351 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T00:15:55.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2466
CVE ID: CVE-2019-7352 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-16T17:17:39.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2475
CVE ID: CVE-2019-7353 State: PUBLISHED Published: 2019-05-17T16:04:12 Last Updated: 2024-08-04T20:46:46.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to an authorization issue that allowed users to view confidential issue and merge request titles of other projects. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/56568 - https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/
CVE ID: CVE-2019-7356 State: PUBLISHED Published: 2020-11-04T19:25:52 Last Updated: 2024-08-04T20:46:46.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/commits/develop - https://github.com/ngpentest007/CVE-2019-7356/blob/main/Subrion_4.2.1%20-%20CVE-2019-7356.pdf
CVE ID: CVE-2019-7357 State: PUBLISHED Published: 2020-11-10T19:46:24 Last Updated: 2024-08-04T20:46:46.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/commits/develop - https://github.com/ngpentest007/CVE-2019-7357/blob/main/Subrion_4.2.1%20-%20CVE-2019-7357.pdf
CVE ID: CVE-2019-7358 State: PUBLISHED Published: 2019-04-09T19:22:39 Last Updated: 2024-08-04T20:46:46.191Z Vendors: Autodesk Products: Autodesk AutoCAD LT, Autodesk Civil 3D, Autodesk Advance Steel, Autodesk AutoCAD, Autodesk AutoCAD Architecture, Autodesk AutoCAD Electrical, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, Autodesk AutoCAD P&ID, Autodesk AutoCAD Plant 3D Problem Types: Heap Overflow Description: An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechan
odesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may cause a heap overflow, resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001