Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13133 State: PUBLISHED Published: 2019-07-01T19:27:14 Last Updated: 2024-08-04T23:41:10.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1600 - https://github.com/ImageMagick/ImageMagick/commit/fe3066122ef72c82415811d25e9e3fad622c0a99 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13134 State: PUBLISHED Published: 2019-07-01T19:27:24 Last Updated: 2024-08-04T23:41:10.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1600 - https://github.com/ImageMagick/ImageMagick/commit/fe3066122ef72c82415811d25e9e3fad622c0a99 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13135 State: PUBLISHED Published: 2019-07-01T19:27:35 Last Updated: 2024-08-04T23:41:10.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1599 - https://github.com/ImageMagick/ImageMagick6/commit/1e59b29e520d2beab73e8c78aacd5f1c0d76196d - https://github.com/ImageMagick/ImageMagick/commit/cdb383749ef7b68a38891440af8cc23e0115306d - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/open
40af8cc23e0115306d - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://support.f5.com/csp/article/K20336394 - https://support.f5.com/csp/article/K20336394?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2019-13136 State: PUBLISHED Published: 2019-07-01T19:27:46 Last Updated: 2024-08-04T23:41:10.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1602 - https://github.com/ImageMagick/ImageMagick/commit/fe5f4b85e6b1b54d3b4588a77133c06ade46d891 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://support.f5.com/csp/article/K03512441?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-13137 State: PUBLISHED Published: 2019-07-01T19:27:56 Last Updated: 2024-08-04T23:41:10.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1601 - https://github.com/ImageMagick/ImageMagick/commit/35ccb468ee2dcbe8ce9cf1e2f1957acc27f54c34 - https://github.com/ImageMagick/ImageMagick6/commit/7d11230060fa9c8f67e53c85224daf6648805c7b - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-13139 State: PUBLISHED Published: 2019-08-22T19:47:43 Last Updated: 2024-08-04T23:41:10.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build" command would be able to gain command execution. An issue exists in the way "docker build" processes remote git URLs, and results in command injection into the underlying "git clone" command, leading to code execution in the context of the user executing the "docker build" command. This occurs because git ref can be misinterpreted as a flag. Additional Analyst Notes: - CVE Program Container: References: - ht
urs because git ref can be misinterpreted as a flag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moby/moby/pull/38944 - https://docs.docker.com/engine/release-notes/#18094 - https://staaldraad.github.io/post/2019-07-16-cve-2019-13139-docker-build/ - https://www.debian.org/security/2019/dsa-4521 - https://security.netapp.com/advisory/ntap-20190910-0001/ - https://seclists.org/bugtraq/2019/Sep/21 - https://access.redhat.com/errata/RHBA-2019:3092
CVE ID: CVE-2019-13140 State: PUBLISHED Published: 2019-09-16T16:24:48 Last Updated: 2024-08-04T23:41:10.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47390 - https://twitter.com/GerardFuguet/status/1169298861782896642 - http://packetstormsecurity.com/files/154494/Inteno-IOPSYS-Gateway-3DES-
er.com/GerardFuguet/status/1169298861782896642 - http://packetstormsecurity.com/files/154494/Inteno-IOPSYS-Gateway-3DES-Key-Extraction-Improper-Access.html - https://www.exploit-db.com/docs/47397
CVE ID: CVE-2019-13142 State: PUBLISHED Published: 2019-07-09T17:42:51 Last Updated: 2024-08-04T23:41:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege. Additional Analyst Notes: - CVE Program Container: References: - https://posts.specterops.io/cve-2019-13142-razer-surround-1-1-63-0-eop-f18c52b8be0c
CVE ID: CVE-2019-13143 State: PUBLISHED Published: 2019-08-06T17:38:23 Last Updated: 2024-08-04T23:41:10.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the lock. The user ID, name, and MAC address are trivially obtained from APIs found within the Android or iOS application. With only the MAC address of the lock, any attacker can transfer ownership of the lock from the current user, over
tion. With only the MAC address of the lock, any attacker can transfer ownership of the lock from the current user, over to the attacker's account. Thus rendering the lock completely inaccessible to the current user. Additional Analyst Notes: - CVE Program Container: References: - http://blog.securelayer7.net/fb50-smart-lock-vulnerability-disclosure/
CVE ID: CVE-2019-13144 State: PUBLISHED Published: 2019-07-05T12:02:03 Last Updated: 2024-08-04T23:41:10.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mytinytodo.net/history.php
CVE ID: CVE-2019-13145 State: REJECTED Published: 2019-10-05T18:12:27 Last Updated: 2019-10-05T18:12:27 Description: No description available.
CVE ID: CVE-2019-13146 State: PUBLISHED Published: 2019-07-09T17:58:40 Last Updated: 2024-08-04T23:41:10.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://rubygems.org/gems/field_test - https://github.com/ankane/field_test
otes: - CVE Program Container: References: - https://rubygems.org/gems/field_test - https://github.com/ankane/field_test/issues/17 - http://www.securityfocus.com/bid/109114
CVE ID: CVE-2019-13147 State: PUBLISHED Published: 2019-07-01T00:00:00.000Z Last Updated: 2025-11-03T19:25:23.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/issues/54 - https://lists.debian.org/debian-lts-announce/2023/11/msg00006.html
CVE ID: CVE-2019-13148 State: PUBLISHED Published: 2019-07-02T12:16:16 Last Updated: 2024-08-04T23:41:10.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the UDP Ports To Open in Add Gaming Rule. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject678.jpg
CVE ID: CVE-2019-13149 State: PUBLISHED Published: 2019-07-02T12:16:23 Last Updated: 2024-08-04T23:41:10.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the key passwd in Routing RIP Settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject2.jpg
CVE ID: CVE-2019-13150 State: PUBLISHED Published: 2019-07-02T12:16:37 Last Updated: 2024-08-04T23:41:10.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication). The command injection exists in the key ip_addr. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject1.jpg
CVE ID: CVE-2019-13151 State: PUBLISHED Published: 2019-07-02T12:16:48 Last Updated: 2024-08-04T23:41:10.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the action set_sta_enrollee_pin_5g and the key wps_sta_enrollee_pin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject3.jpg
CVE ID: CVE-2019-13152 State: PUBLISHED Published: 2019-07-02T12:16:58 Last Updated: 2024-08-04T23:41:10.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Gaming Rule. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject678.jpg
CVE ID: CVE-2019-13153 State: PUBLISHED Published: 2019-07-02T12:17:06 Last Updated: 2024-08-04T23:41:10.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the Private Port in Add Virtual Server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject45.jpg
CVE ID: CVE-2019-13154 State: PUBLISHED Published: 2019-07-02T12:17:14 Last Updated: 2024-08-04T23:41:10.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the TCP Ports To Open in Add Gaming Rule. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject678.jpg
CVE ID: CVE-2019-13155 State: PUBLISHED Published: 2019-07-02T12:17:36 Last Updated: 2024-08-04T23:41:10.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Virtual Server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/trendnet/cmdinject45.jpg
CVE ID: CVE-2019-13156 State: PUBLISHED Published: 2019-09-03T14:42:09 Last Updated: 2024-08-04T23:41:10.535Z Vendors: NAVER Corporation Products: NDrive Problem Types: CWE-121 Description: NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2019-13156
CVE ID: CVE-2019-13157 State: PUBLISHED Published: 2019-11-22T02:06:08 Last Updated: 2024-08-04T23:41:10.655Z Vendors: NAVER Corporation Products: Naver Vaccine Problem Types: CWE-22 Description: nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2019-13157
CVE ID: CVE-2019-13161 State: PUBLISHED Published: 2019-07-12T19:24:37 Last Updated: 2024-08-04T23:41:10.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and
8 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration). Additional Analyst Notes: - CVE Program Container: References: - http://downloads.digium.com/pub/security/AST-2019-003.html - https://issues.asterisk.org/jira/browse/ASTERISK-28465 - https://lists.debian.org/debian-lts-announce/2019/11/msg00038.html - https://lists.debian.org/debian-lts-announce/2022/04/msg00001.html
CVE ID: CVE-2019-13163 State: PUBLISHED Published: 2020-02-07T22:45:40 Last Updated: 2024-08-04T23:41:10.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V11 and other versions, Interstage Job Workload Server V8, Interstage List Works V10 and other versions, Interstage Studio V12 and other versions, Interstage Web Server Express V11, Linkexpress V5, Safeauthor V3, ServerView Resource Or
Studio V12 and other versions, Interstage Web Server Express V11, Linkexpress V5, Safeauthor V3, ServerView Resource Orchestrator V3, Systemwalker Cloud Business Service Management V1, Systemwalker Desktop Keeper V15, Systemwalker Desktop Patrol V15, Systemwalker IT Change Manager V14, Systemwalker Operation Manager V16 and other versions, Systemwalker Runbook Automation V15 and other versions, Systemwalker Security Control V1, and Systemwalker Software Configuration Manager V15. Additional Analyst Notes: - CVE Program Container: References: - https://www.fujitsu.com/jp/products/software/resources/condition/security/products-fujitsu/solution/interstage-systemwalker-tls-202001.html
CVE ID: CVE-2019-13164 State: PUBLISHED Published: 2019-07-03T13:56:52 Last Updated: 2024-08-04T23:41:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2019-07/msg00145.html - http://www.openwall.com/lists/oss-security/2019/07/02/2 - http://www.openwall.com/lists/oss-security/2019/07/02/2 - http://www.securityfocus.com/bid/109054 - https://seclists.org/bugtraq/20
openwall.com/lists/oss-security/2019/07/02/2 - http://www.securityfocus.com/bid/109054 - https://seclists.org/bugtraq/2019/Aug/41 - https://www.debian.org/security/2019/dsa-4506 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html - https://www.debian.org/security/2019/dsa-4512 - https://seclists.org/bugtraq/2019/Sep/3 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html - https://usn.ubuntu.com/4191-2/ - https://usn.ubuntu.com/4191-1/ - https://security.gentoo.org/glsa/202003-66 - https://github.com/qemu/qemu/commit/03d7712b4bcd47bfe0fe14ba2fffa87e111fa086
CVE ID: CVE-2019-13165 State: PUBLISHED Published: 2020-03-13T18:35:08 Last Updated: 2024-08-04T23:41:10.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13166 State: PUBLISHED Published: 2020-03-13T18:33:54 Last Updated: 2024-08-04T23:41:10.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13167 State: PUBLISHED Published: 2020-03-13T18:24:17 Last Updated: 2024-08-04T23:41:10.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13168 State: PUBLISHED Published: 2020-03-13T18:23:08 Last Updated: 2024-08-04T23:41:10.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13169 State: PUBLISHED Published: 2020-03-13T18:20:01 Last Updated: 2024-08-04T23:41:10.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13170 State: PUBLISHED Published: 2020-03-13T18:18:33 Last Updated: 2024-08-04T23:41:10.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vulnerability can lead to the takeover of a local account on the device. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13171 State: PUBLISHED Published: 2020-03-13T18:17:14 Last Updated: 2024-08-04T23:41:10.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly. Additional Analyst Notes: - CVE Program Container: References: - https://
to a local variable, was not checked properly. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
CVE ID: CVE-2019-13172 State: PUBLISHED Published: 2020-03-13T18:14:27 Last Updated: 2024-08-04T23:41:10.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://security.business.xerox.com/ - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/