Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/ - https://access.redhat.com/errata/RHSA-2019:1467 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html - https://access.redhat.com/errata/RHBA-2019:0764 - https://access.redhat.com/errata/RHBA-2019:0763 - https://lists.fedoraproject.org/archives/list/package-announce%4
764 - https://access.redhat.com/errata/RHBA-2019:0763 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html - https://usn.ubuntu.com/4127-2/ - ht
YJ4L/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html - https://usn.ubuntu.com/4127-2/ - https://usn.ubuntu.com/4127-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/ - https://access.redhat.com/errata/RHSA-2019:2980 - https://access.redhat.com/errata/RHSA-2019:3170 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ - https://lists.fedoraproject.org/archives/list/pack
40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://security.gentoo.org/glsa/202003-26 - https://www.oracle.com/security-alerts/cpujan2020.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html - https://www.oracle.com/security-alerts/cpujul20
l - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://github.com/python/cpython/pull/12201 - https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html - https://bugs.python.org/issue36216 - https://security.netapp.com/advisory/ntap-20190517-0001/
CVE ID: CVE-2019-9637 State: PUBLISHED Published: 2019-03-08T23:00:00 Last Updated: 2024-08-04T21:54:45.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4403 - https://bugs.php.net/bug.php?id=77630 - https://usn.ubuntu.com/3922-1/ - https://support.f5.com/csp/arti
2019/dsa-4403 - https://bugs.php.net/bug.php?id=77630 - https://usn.ubuntu.com/3922-1/ - https://support.f5.com/csp/article/K53825211 - https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922-2/ - https://usn.ubuntu.com/3922-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html - https://security.netapp.com/advisory/ntap-20190502-0007/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://acce
se.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://access.redhat.com/errata/RHSA-2019:3299 - https://www.tenable.com/security/tns-2019-07
CVE ID: CVE-2019-9638 State: PUBLISHED Published: 2019-03-08T23:00:00 Last Updated: 2024-08-04T21:54:45.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4403 - https://bugs.php.net/bug.php?id=77563 - https://usn.ubuntu.com/3922-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922
sn.ubuntu.com/3922-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922-2/ - https://usn.ubuntu.com/3922-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html - https://security.netapp.com/advisory/ntap-20190502-0007/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-9639 State: PUBLISHED Published: 2019-03-08T23:00:00 Last Updated: 2024-08-04T21:54:45.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4403 - https://bugs.php.net/bug.php?id=77659 - https://usn.ubuntu.com/3922-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922-2/ - https://usn.ubuntu.co
ps://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922-2/ - https://usn.ubuntu.com/3922-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html - https://security.netapp.com/advisory/ntap-20190502-0007/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-9640 State: PUBLISHED Published: 2019-03-08T23:00:00 Last Updated: 2024-08-04T21:54:45.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4403 - https://bugs.php.net/bug.php?id=77540 - https://usn.ubuntu.com/3922-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922-2/ - https://usn.ubuntu.com/3922-3/ - http://lists.opensuse.org/opensuse-security-announc
- https://usn.ubuntu.com/3922-2/ - https://usn.ubuntu.com/3922-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html - https://security.netapp.com/advisory/ntap-20190502-0007/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-9641 State: PUBLISHED Published: 2019-03-08T23:00:00 Last Updated: 2024-08-04T21:54:45.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4403 - https://bugs.php.net/bug.php?id=77509 - https://usn.ubuntu.com/3922-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html - https://usn.ubuntu.com/3922-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.h
msg00043.html - https://usn.ubuntu.com/3922-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html - https://usn.ubuntu.com/3922-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html - https://security.netapp.com/advisory/ntap-20190502-0007/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html
CVE ID: CVE-2019-9642 State: PUBLISHED Published: 2019-06-05T16:15:04 Last Updated: 2024-08-04T21:54:45.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php file, as demonstrated by a PoC.php created by the guest account, with execution via a proxy.php?hash=../../../../../var/lib/pydio/data/personal/guest/PoC.php request. This is related to plugins/action.share/src/Store/ShareStore.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pydio/pydio-core/c
e/ShareStore.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pydio/pydio-core/commits/develop/core/src/proxy.php - https://pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-823-security-release
CVE ID: CVE-2019-9644 State: PUBLISHED Published: 2019-03-12T06:00:00 Last Updated: 2024-08-04T21:54:45.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of error messages, though not reproduced with other browsers. This occurs because Internet Explorer's error messages can include the content of any invalid JavaScript that was encountered. Additional Analyst Notes: - CVE Program Container:
include the content of any invalid JavaScript that was encountered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jupyter/notebook/compare/f3f00df...05aa4b2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UP5RLEES2JBBNSNLBR65XM6PCD4EMF7D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMDPJBVXOVO6LYGAT46VZNHH6JKSCURO/
CVE ID: CVE-2019-9646 State: PUBLISHED Published: 2019-03-10T22:00:00Z Last Updated: 2024-09-17T03:27:56.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area." Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/7 - https://security-consulting.icu/blog/2019/02/wordpress-contact-form-email-xss-csrf/ - https://wordpress.org/plugins/contact-form-to-email/#developers
CVE ID: CVE-2019-9647 State: PUBLISHED Published: 2019-06-05T15:52:57 Last Updated: 2024-08-04T21:54:45.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gila CMS 1.9.1 has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152153/Gila-CMS-1.9.1-Cross-Site-Scripting.html - https://gilacms.com/blog
CVE ID: CVE-2019-9648 State: PUBLISHED Published: 2019-03-22T18:49:47 Last Updated: 2024-08-04T21:54:45.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107446 - http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509 - https://www.exploit-db.com/exploits/46535 - https://seclists.org/fulldisclosure/2019/Mar/23 - http://s
?f=15&t=4022509 - https://www.exploit-db.com/exploits/46535 - https://seclists.org/fulldisclosure/2019/Mar/23 - http://seclists.org/fulldisclosure/2019/Aug/21 - http://packetstormsecurity.com/files/154204/CoreFTP-Server-SIZE-Directory-Traversal.html
CVE ID: CVE-2019-9649 State: PUBLISHED Published: 2019-03-22T19:02:43 Last Updated: 2024-08-04T21:54:45.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote attacker can use a directory traversal technique (..\..\) to browse outside the root directory to determine the existence of a file on the operating system, and its last modified date. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107449 - http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509 - https://www.exploit-db.com/exploits/46534 - https://seclists.o
p://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509 - https://www.exploit-db.com/exploits/46534 - https://seclists.org/fulldisclosure/2019/Mar/25 - http://seclists.org/fulldisclosure/2019/Aug/22 - http://packetstormsecurity.com/files/154205/CoreFTP-Server-MDTM-Directory-Traversal.html
CVE ID: CVE-2019-9650 State: PUBLISHED Published: 2019-03-11T01:00:00 Last Updated: 2024-08-04T21:54:45.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event. Additional Analyst Notes: - CVE Program Container: References: - https://community.mybb.com/mods.php?action=changelog&pid=1231 - https://github.com/vintagedaddyo/MyBB_Plugin-Upcoming_Events/pull/1/commits/d0a0e1c6e56f248613e0150344ebea8764bba5fa - https://www.exploit-db.com/exploits/46558/ - http://packetstormsecurity.com/files/152152/MyBB-Upcoming-Events-1.32-Cross-Site-Scripting.html
CVE ID: CVE-2019-9651 State: PUBLISHED Published: 2019-03-11T01:00:00 Last Updated: 2024-08-04T21:54:45.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function's filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions (such as "eval") are blocked but others (such as "system") are not, and because ".php" is blocked but ".PHP" is not blocked. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/155/
CVE ID: CVE-2019-9652 State: PUBLISHED Published: 2019-03-11T01:00:00 Last Updated: 2024-08-04T21:54:45.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the t2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/156/
CVE ID: CVE-2019-9653 State: PUBLISHED Published: 2019-05-31T21:31:41 Last Updated: 2024-08-04T21:54:45.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nuuo.com/DownloadMainpage.php - https://www.nccst.nat.gov.tw/NewsRSS?lang=en&RSSType=mssecurity - https://github.com/grayoneday/CVE-2019-9653
CVE ID: CVE-2019-9656 State: PUBLISHED Published: 2019-03-11T04:00:00 Last Updated: 2024-08-04T21:54:45.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/libofx - https://github.com/libofx/libofx/issues/22 - https://lists.debian.org/debian-lts-announce/2019/11/msg00021.html - https://usn.ubuntu.com/4523-1/
CVE ID: CVE-2019-9657 State: PUBLISHED Published: 2019-07-11T18:54:26 Last Updated: 2024-08-04T21:54:45.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates (used for initiating a VPN session to the Alarm.com infrastructure) on the local camera device. Additional Analyst Notes: - CVE Program Container: References: - https://www.vfxcomputing.com/?CVE-2019-9657
CVE ID: CVE-2019-9658 State: PUBLISHED Published: 2019-03-11T04:00:00 Last Updated: 2024-08-04T21:54:45.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Checkstyle before 8.18 loads external DTDs by default. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/checkstyle/checkstyle/pull/6476 - https://github.com/checkstyle/checkstyle/issues/6474 - https://github.com/checkstyle/checkstyle/issues/6478 - https://checkstyle.org/releasenotes.html#Release_8.18 - https://lists.apache.org/thread.html/7eea10e7be4c21060cb1e79f6524c6e6559ba833b1465cd2870a56b9%40%3Cserver-dev.james.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announc
a833b1465cd2870a56b9%40%3Cserver-dev.james.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEYBAHYAV37WHMOXZYM2ZWF46FHON6YC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJPT54USMGWT3Y6XVXLDEHKRUY2EI4OE/ - https://lists.debian.org/debian-lts-announce/2019/04/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2BMOPJ2XYE4LB2HM7OMSUBBIYEDUTLWE/ - https://lists.apache.org/thread.html/a35a8ccb316d4c2340710f610cba8058e87d5376259b35ef3ed2bf89%40%3Cnotifications.accumulo.apache.org%3E - https://lists.apache.org/thread.htm
40710f610cba8058e87d5376259b35ef3ed2bf89%40%3Cnotifications.accumulo.apache.org%3E - https://lists.apache.org/thread.html/fff26ee7b59360a0264fef4e8ed9454ef652db2c39f2892a9ea1c9cb%40%3Cnotifications.fluo.apache.org%3E - https://lists.apache.org/thread.html/6bf8bbbca826e883f09ba40bc0d319350e1d6d4cf4df7c9e399b2699%40%3Ccommits.fluo.apache.org%3E - https://lists.apache.org/thread.html/994221405e940e148adcfd9cb24ffc6700bed70c7820c55a22559d26%40%3Cnotifications.fluo.apache.org%3E - https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679%40%3Ccommits.nifi.apache.org%3E
CVE ID: CVE-2019-9659 State: PUBLISHED Published: 2019-03-11T15:00:00 Last Updated: 2024-08-04T21:54:45.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659
CVE ID: CVE-2019-9660 State: PUBLISHED Published: 2019-03-11T04:00:00 Last Updated: 2024-08-04T21:54:45.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/12
CVE ID: CVE-2019-9661 State: PUBLISHED Published: 2019-03-11T04:00:00 Last Updated: 2024-08-04T21:54:45.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter, Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/13
CVE ID: CVE-2019-9662 State: PUBLISHED Published: 2019-03-11T04:00:00 Last Updated: 2024-08-04T21:54:45.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jetiben/jtbc/issues/9
CVE ID: CVE-2019-9668 State: PUBLISHED Published: 2019-12-31T16:06:44 Last Updated: 2024-08-04T21:54:45.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in rovinbhandari FTP through 2012-03-28. receive_file in file_transfer_functions.c allows remote attackers to cause a denial of service (daemon crash) via a 0xffff datalen field value. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/152058/robinbhandari-FTP-Remote-Denial-Of-Service.html
CVE ID: CVE-2019-9669 State: PUBLISHED Published: 2019-04-25T18:18:04 Last Updated: 2024-08-04T21:54:45.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerability in the context of the Wordfence WordPress plugin as the firewall rules are not maintained as part of the Wordfence software but rather it is a set of rules hosted on vendor servers and pushed to the plugin with no versioning associated. Bypassing a WAF rule doesn't make a WordPress site vulnerable (speaking in terms of software vulnerabilities) Additional Analyst Notes: - CVE Program
make a WordPress site vulnerable (speaking in terms of software vulnerabilities) Additional Analyst Notes: - CVE Program Container: References: - https://www.edgescan.com/popular-wordpress-waf-bypass-zeroday-discovered-by-edgescan/
CVE ID: CVE-2019-9670 State: PUBLISHED Published: 2019-05-29T21:04:28.000Z Last Updated: 2025-10-21T23:45:36.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://bugzilla.zimbra.com/show_bug.cgi?id=109129 - http://www.rapid7.com/db/modules/exploit/linux/http/zimbra_xxe_rce - http://packetstormsecurity.com/files/152487/Zimbra-Collaboration-Auto