Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-8259 State: PUBLISHED Published: 2019-03-05T15:00:00Z Last Updated: 2024-09-16T20:59:11.748Z Vendors: UltraVNC Products: UltraVNC Problem Types: CWE-665 Description: UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03
nalyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-005-ultravnc-memory-leak/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8260 State: PUBLISHED Published: 2019-03-05T15:00:00Z Last Updated: 2024-09-16T20:22:40.235Z Vendors: UltraVNC Products: UltraVNC Problem Types: CWE-125 Description: UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-006-ultravnc-out-of-bound-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics
travnc-out-of-bound-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8261 State: PUBLISHED Published: 2019-03-05T15:00:00Z Last Updated: 2024-09-17T03:12:34.003Z Vendors: UltraVNC Products: UltraVNC Problem Types: CWE-125 Description: UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-007-ultravnc-out-of-bound-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cer
19-007-ultravnc-out-of-bound-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8262 State: PUBLISHED Published: 2019-03-05T15:00:00Z Last Updated: 2024-09-16T16:49:03.600Z Vendors: UltraVNC Products: UltraVNC Problem Types: CWE-122 Description: UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-008-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pd
03/01/klcert-19-008-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8263 State: PUBLISHED Published: 2019-03-05T15:00:00Z Last Updated: 2024-09-16T23:56:07.697Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-121 Description: UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This vulnerability has been fixed in revision 1206. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of
r: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-010-ultravnc-stack-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8264 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T19:51:49.467Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-788 Description: UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-011-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://cert-portal.siemens.com/productce
/03/01/klcert-19-011-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8265 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T17:07:55.620Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-788 Description: UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-012-ultravnc-access-of-memory-location-after-end-of-buff
kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-012-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8266 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T23:05:39.052Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-788 Description: UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-adv
8. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-013-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8267 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T16:48:26.336Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-125 Description: UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1208. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-014-ultravnc-out-of-bounds-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095
ories/2019/03/01/klcert-19-014-ultravnc-out-of-bounds-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8268 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-17T01:16:16.319Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-193 Description: UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1207. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-015-ultravnc-off-by-one-error/ - https://cert-p
ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-015-ultravnc-off-by-one-error/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8269 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-17T00:30:43.266Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-121 Description: UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow/ - https://cert-portal.siemens.com/product
cert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8270 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T16:34:02.833Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-125 Description: UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-017-ultravnc-out-of-bounds-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pd
es/2019/03/01/klcert-19-017-ultravnc-out-of-bounds-read/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8271 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T23:26:16.493Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-122 Description: UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-018-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/s
sories/2019/03/01/klcert-19-018-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8272 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T16:43:07.206Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-193 Description: UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-019-ultravnc-off-by-one-error/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-ce
t-19-019-ultravnc-off-by-one-error/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8273 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T23:16:03.189Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-122 Description: UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-020-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/produc
klcert-advisories/2019/03/01/klcert-19-020-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8274 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T19:35:36.652Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-122 Description: UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-021-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productc
cert-advisories/2019/03/01/klcert-19-021-ultravnc-heap-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8275 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-17T03:12:37.776Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-170 Description: UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-022-ultravnc-improper-null-termination/ - https://cert-portal.siemens.com/productc
lcert-advisories/2019/03/01/klcert-19-022-ultravnc-improper-null-termination/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8276 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-16T18:33:31.486Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-121 Description: UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-023-ultravnc-stack-based-buffer-overflow/ - https://cert-portal.siemens.com/product
cert-advisories/2019/03/01/klcert-19-023-ultravnc-stack-based-buffer-overflow/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE ID: CVE-2019-8277 State: PUBLISHED Published: 2019-03-09T00:00:00 Last Updated: 2024-08-04T21:17:30.165Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-665 Description: UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/20
nal Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-024-ultravnc-improper-initialization/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8278 State: PUBLISHED Published: 2019-03-02T01:00:00Z Last Updated: 2024-09-16T17:43:33.373Z Vendors: Kaspersky Lab Products: Invision Power Board Problem Types: Stored XSS Description: Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107258 - https://scriptinjection.blogspot.com/2019/02/invision-power-board-331-348-stored-xss.html
CVE ID: CVE-2019-8279 State: PUBLISHED Published: 2019-03-02T01:00:00Z Last Updated: 2024-09-17T00:21:56.165Z Vendors: Kaspersky Lab Products: Vanilla Forums Problem Types: Multiple XSS Description: Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum. Additional Analyst Notes: - CVE Program Container: References: - https://scriptinjection.blogspot.com/2019/02/vanilla-forums-25-stored-xss-in-any.html
CVE ID: CVE-2019-8280 State: PUBLISHED Published: 2019-03-09T00:00:00Z Last Updated: 2024-09-17T01:40:44.392Z Vendors: Kaspersky Lab Products: UltraVNC Problem Types: CWE-788 Description: UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://cert-portal.siemens.com/productcert/pdf/
klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/ - https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-161-06 - https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2019-8282 State: PUBLISHED Published: 2019-06-07T14:21:01 Last Updated: 2024-08-04T21:17:31.269Z Vendors: n/a Products: Sentinel LDK RTE Problem Types: CWE-300 Description: Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by malicious one. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/06/05/klcert-19-029-gemalto-admin-control-center-uses-cleartext-communication-with-www3-safenet-inc-com/
CVE ID: CVE-2019-8283 State: PUBLISHED Published: 2019-06-07T14:18:05 Last Updated: 2024-08-04T21:17:30.496Z Vendors: n/a Products: Sentinel LDK RTE Problem Types: CWE-1004 Description: Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/06/05/klcert-19-030-hasplm-cookie-without-httponly-attribute/
CVE ID: CVE-2019-8285 State: PUBLISHED Published: 2019-05-08T17:45:04 Last Updated: 2024-08-04T21:17:30.597Z Vendors: n/a Products: Kaspersky Lab Antivirus Engine Problem Types: Heap-based Buffer Overflow Description: Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary code execution Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#080519 - http://www.securityfocus.com/bid/108284
CVE ID: CVE-2019-8286 State: PUBLISHED Published: 2019-07-18T18:34:15 Last Updated: 2024-08-04T21:17:30.549Z Vendors: Kaspersky Products: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security Problem Types: Information Disclosure Description: Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6 Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12
nal Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719 - http://www.securityfocus.com/bid/109300