Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15917 State: PUBLISHED Published: 2019-09-04T18:09:20 Last Updated: 2024-08-05T01:03:32.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/56897b217a1d0a91c9920cb418d6b3fe922f590a - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.5 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-0
nsuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://seclists.org/bugtraq/2020/Jan/10 - http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-15918 State: PUBLISHED Published: 2019-09-04T18:09:11 Last Updated: 2024-08-05T01:03:32.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 - https://github.com/torvalds/linux/commit/b57a55e2200ede754e4dc9cce4ba9402544b9365 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.c
b9365 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4162-2/
CVE ID: CVE-2019-15919 State: PUBLISHED Published: 2019-09-04T18:08:59 Last Updated: 2024-08-05T01:03:31.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 - https://github.com/torvalds/linux/commit/6a3eb3360667170988f8a6477f6686242061488a - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://security.netapp.com/advisory/ntap-20191004-
ists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15920 State: PUBLISHED Published: 2019-09-04T18:08:47 Last Updated: 2024-08-05T01:03:32.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 - https://github.com/torvalds/linux/commit/088aaf17aa79300cab14dbee2569c58cfafd7d6e - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/
69c58cfafd7d6e - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15921 State: PUBLISHED Published: 2019-09-04T18:08:34 Last Updated: 2024-08-05T01:03:31.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/ceabee6c59943bdd5e1da1a6a20dc7ee5f8113a2 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - h
security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15922 State: PUBLISHED Published: 2019-09-04T18:08:26 Last Updated: 2024-08-05T01:03:32.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.9 - https://github.com/torvalds/linux/commit/58ccd2d31e502c37e108b285bf3d343eb00c235b - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15923 State: PUBLISHED Published: 2019-09-04T18:08:18 Last Updated: 2024-08-05T01:03:31.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.9 - https://github.com/torvalds/linux/commit/f0d1762554014ce0ae347b9f0d088f2c157c8c72 - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15924 State: PUBLISHED Published: 2019-09-04T18:08:07 Last Updated: 2024-08-05T01:03:31.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/01ca667133d019edc9f0a1f70a272447c84ec41f - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11 - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian
/ChangeLog-5.0.11 - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15925 State: PUBLISHED Published: 2019-09-04T20:33:45 Last Updated: 2024-08-05T01:03:32.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04f25edb48c441fc278ecc154c270f16966cbb90 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://usn.ubuntu
04f25edb48c441fc278ecc154c270f16966cbb90 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://usn.ubuntu.com/4147-1/
CVE ID: CVE-2019-15926 State: PUBLISHED Published: 2019-09-04T20:33:34 Last Updated: 2024-08-05T01:03:32.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d6751eaff672ea77642e74e92e6c0ac7f9709ab - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.ht
t/commit/?id=5d6751eaff672ea77642e74e92e6c0ac7f9709ab - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4145-1/ - https://support.f5.com/csp/article/K32034450 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://usn.ubuntu.com/4147-1/ - https://support.f5.com/csp/article/K32034450?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-15927 State: PUBLISHED Published: 2019-09-04T20:33:11 Last Updated: 2024-08-05T01:03:32.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.2 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4351a199cc120ff9d59e06d02e8657d08e6cc46 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-an
p://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15929 State: PUBLISHED Published: 2019-10-24T15:53:00 Last Updated: 2024-08-05T01:03:32.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Craft CMS through 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, leading to the possibility of a brute force attempt on them. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/craftcms/cms/blob/develop/CHANGELOG-v3.md#317---2019-01-31 - http://packetstormsecurity.com/files/155012/Craft-CMS-Rate-Limiting-Brute-Force.html
CVE ID: CVE-2019-15930 State: PUBLISHED Published: 2019-12-12T13:37:32 Last Updated: 2024-08-05T01:03:32.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp allows Clickjacking. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://www.solismed.com/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15931 State: PUBLISHED Published: 2019-12-12T13:38:23 Last Updated: 2024-08-05T01:03:32.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://www.solismed.com/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15932 State: PUBLISHED Published: 2019-12-12T13:39:21 Last Updated: 2024-08-05T01:03:32.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://www.solismed.com/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15933 State: PUBLISHED Published: 2019-12-12T13:39:58 Last Updated: 2024-08-05T01:03:32.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp has SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://www.solismed.com/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15934 State: PUBLISHED Published: 2019-12-12T13:40:41 Last Updated: 2024-08-05T01:03:32.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://www.solismed.com/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15935 State: PUBLISHED Published: 2019-12-12T13:41:46 Last Updated: 2024-08-05T01:03:31.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://www.solismed.com/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15936 State: PUBLISHED Published: 2019-12-12T13:42:30 Last Updated: 2024-08-05T01:03:32.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intesync Solismed 3.3sp allows Insecure File Upload. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/blog/news-category/advisories/ - https://bishopfox.com - https://know.bishopfox.com/advisories/solismed-critical
CVE ID: CVE-2019-15937 State: PUBLISHED Published: 2019-09-05T14:06:54 Last Updated: 2024-08-05T01:03:32.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. Additional Analyst Notes: - CVE Program Container: References: - https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=84986ca024462058574432b5483f4bf9136c538d
CVE ID: CVE-2019-15938 State: PUBLISHED Published: 2019-09-05T14:06:37 Last Updated: 2024-08-05T01:03:32.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. Additional Analyst Notes: - CVE Program Container: References: - https://git.pengutronix.de/cgit/barebox/commit/fs/nfs.c?h=next&id=574ce994016107ad8ab0f845a785f28d7eaa5208
CVE ID: CVE-2019-15939 State: PUBLISHED Published: 2019-09-05T15:04:06 Last Updated: 2024-08-05T01:03:32.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenCV/opencv/issues/15287 - https://github.com/opencv/opencv/pull/15382 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
CVE ID: CVE-2019-15940 State: PUBLISHED Published: 2019-10-01T12:29:37 Last Updated: 2024-08-05T01:03:32.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victure PC530 devices allow unauthenticated TELNET access as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.govicture.com/pc530 - https://blog.avira.com/victure-pc530-home-insecurity-you-can-install-yourself/
CVE ID: CVE-2019-15941 State: PUBLISHED Published: 2019-09-25T19:39:40 Last Updated: 2024-08-05T01:03:32.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1881 - https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2
https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1881 - https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-0-6-is-out/ - https://www.debian.org/security/2019/dsa-4533 - https://seclists.org/bugtraq/2019/Sep/46
CVE ID: CVE-2019-15942 State: PUBLISHED Published: 2019-09-05T15:38:40 Last Updated: 2024-08-05T01:03:32.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8093 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html - https://security.gentoo.org/glsa/202007-58
CVE ID: CVE-2019-15943 State: PUBLISHED Published: 2019-09-19T11:31:01 Last Updated: 2024-08-05T01:03:32.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a memset call. Additional Analyst Notes: - CVE Program Container: References: - https://blog.counter-strike.net/index.php/category/updates/ - https://github.com/bi7s/CVE/blob/master/CVE-2019-15943/README.md - http://packetstormsecurity.com/files/154705/Counter-Strike-Global-Offensive-C
CVE/blob/master/CVE-2019-15943/README.md - http://packetstormsecurity.com/files/154705/Counter-Strike-Global-Offensive-Code-Execution-Denial-Of-Service.html
CVE ID: CVE-2019-15944 State: PUBLISHED Published: 2019-09-05T19:34:54 Last Updated: 2024-08-05T01:03:32.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message. Additional Analyst Notes: - CVE Program Container: References: - https://blog.counter-strike.net/index.php/2019/08/25353/
CVE ID: CVE-2019-15945 State: PUBLISHED Published: 2019-09-05T16:07:03 Last Updated: 2024-08-05T01:03:32.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenSC/OpenSC/commit/412a6142c27a5973c61ba540e33cdc22d5608e68 - https://github.com/OpenSC/OpenSC/compare/f1691fc...12218d4 - https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html - http://www.openwall.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
all.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
CVE ID: CVE-2019-15946 State: PUBLISHED Published: 2019-09-05T16:07:28 Last Updated: 2024-08-05T01:03:32.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenSC/OpenSC/compare/f1691fc...12218d4 - https://github.com/OpenSC/OpenSC/commit/a3fc7693f3a035a8a7921cffb98432944bb42740 - https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html - http://www.openwall.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
enwall.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
CVE ID: CVE-2019-15947 State: PUBLISHED Published: 2019-09-05T16:25:23 Last Updated: 2024-08-05T01:03:32.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/oxagast/50a121b2df32186e0c48411859d5861b - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2019-15947 - https://github.com/bitcoin/bitcoin/issu
https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2019-15947 - https://github.com/bitcoin/bitcoin/issues/16824 - https://security.gentoo.org/glsa/202009-18
CVE ID: CVE-2019-15948 State: PUBLISHED Published: 2019-11-13T15:06:29 Last Updated: 2024-08-05T01:03:32.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects CC256xC-BT-SP 1.2, CC256xB-BT-SP 1.8, and WL18xx-BT-SP 4.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/veronica-kovah-2587185 - https://e2e.ti.com/support/wireless-connectivity/bluetooth/f
ces: - https://www.linkedin.com/in/veronica-kovah-2587185 - https://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/856161 - https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs - https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/ti_wl18xx_adv_rce.py - https://www.youtube.com/watch?v=bk5lOxieqbA
CVE ID: CVE-2019-15949 State: PUBLISHED Published: 2019-09-05T16:50:38.000Z Last Updated: 2025-10-21T23:45:31.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executab
nto Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jakgibb/nagiosxi-root-rce-exploit - http://packetstormsecurity.com/files/156676/Nagios-XI-Authenticated-Remote-Command-Execution.html - http://packetstormsecurity.com/files/162158/Nagios-XI-getprofile.sh-Remote-Command-Execution.html
CVE ID: CVE-2019-15950 State: PUBLISHED Published: 2019-09-16T15:42:48 Last Updated: 2024-08-05T01:03:32.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zerohax/RedmineUP-XSS/blob/master/vcard-upload-xss - https://www.redmineup.com/pages/plugins/crm/updates