Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-10009 State: PUBLISHED Published: 2019-06-03T20:53:15 Last Updated: 2024-08-04T22:10:08.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated user attempts to preview an uploaded file (through PreviewHandler.ashx) by using a \..\..\ technique, arbitrary files can be loaded in the server response outside the root directory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Mar/47 - https://www.exploit-db.com/exploits/46611/ - http://packetstormsecurity.com/files/152244/Titan-FTP-Server-2019-Build-
- https://www.exploit-db.com/exploits/46611/ - http://packetstormsecurity.com/files/152244/Titan-FTP-Server-2019-Build-3505-Directory-Traversal.html - https://seclists.org/fulldisclosure/2019/Mar/47 - https://www.exploit-db.com/exploits/46611 - http://www.southrivertech.com/software/regsoft/titanftp/v19/verhist_en.html
CVE ID: CVE-2019-10010 State: PUBLISHED Published: 2019-03-24T17:58:54 Last Updated: 2024-08-04T22:10:08.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thephpleague/commonmark/issues/353 - https://github.com/thephpleague/commonmark/releases/tag/0.18.3
CVE ID: CVE-2019-10011 State: PUBLISHED Published: 2019-03-25T18:07:07 Last Updated: 2024-08-04T22:10:08.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mdavis332/higher-ed-erp-portal-vulnerability-create-your-own-accounts-d865bd22cdd8
CVE ID: CVE-2019-10012 State: PUBLISHED Published: 2019-03-25T18:07:18 Last Updated: 2024-08-04T22:10:08.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager (for .NET) plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mdavis332/critical-vulnerability-in-higher-ed-erp-55580f8880c - https://www.sjoerdlangkemper.nl/2016/09/15/uploading-webshells-with-moxiemanager/
CVE ID: CVE-2019-10013 State: PUBLISHED Published: 2019-12-03T20:00:43 Last Updated: 2024-08-04T22:10:08.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted certificate in the TLS certificate handshake message, because the result of get_asn1_length() is not checked for a minimum or maximum size. Additional Analyst Notes: - CVE Program Container: References: - http://axtls.sourceforge.net - https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/securit
http://axtls.sourceforge.net - https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842 - https://seclists.org/bugtraq/2019/Nov/44 - http://packetstormsecurity.com/files/155500/axTLS-2.1.5-Denial-Of-Service.html - https://www.telekom.com/resource/blob/586416/12097aeb8f9a6bba89a804b94575521a/dl-191121-critical-remote-denial-of-service-vulnerability-i--data.pdf
CVE ID: CVE-2019-10014 State: PUBLISHED Published: 2019-03-24T21:02:49 Last Updated: 2024-08-04T22:10:08.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/yalecaltech/article/details/88594388
CVE ID: CVE-2019-10015 State: PUBLISHED Published: 2019-03-24T21:03:06 Last Updated: 2024-08-04T22:10:08.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baigoStudio/baigoSSO/issues/12
CVE ID: CVE-2019-10016 State: PUBLISHED Published: 2019-03-25T02:59:00 Last Updated: 2024-08-04T22:10:08.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring. Additional Analyst Notes: - CVE Program Container: References: - https://ctrsec.io/index.php/2019/03/24/gforge-advanced-server-xss-commonsearch-php/
CVE ID: CVE-2019-10017 State: PUBLISHED Published: 2019-03-24T21:31:47 Last Updated: 2024-08-04T22:10:09.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12001 - https://ctrsec.io/index.php/2019/03/24/cmsmadesimple-xss-filepicker/
CVE ID: CVE-2019-10018 State: PUBLISHED Published: 2019-03-24T23:10:26 Last Updated: 2024-08-04T22:10:08.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276 - https://usn.ubuntu.com/4042-1/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
CVE ID: CVE-2019-10019 State: PUBLISHED Published: 2019-03-24T23:10:38 Last Updated: 2024-08-04T22:10:08.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41275 - https://usn.ubuntu.com/4042-1/
CVE ID: CVE-2019-10020 State: PUBLISHED Published: 2019-03-24T23:10:58 Last Updated: 2024-08-04T22:10:08.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274
CVE ID: CVE-2019-10021 State: PUBLISHED Published: 2019-03-24T23:11:09 Last Updated: 2024-08-04T22:10:09.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274 - https://usn.ubuntu.com/4042-1/
CVE ID: CVE-2019-10022 State: PUBLISHED Published: 2019-03-24T23:11:22 Last Updated: 2024-08-04T22:10:08.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41273
CVE ID: CVE-2019-10023 State: PUBLISHED Published: 2019-03-24T23:11:33 Last Updated: 2024-08-04T22:10:08.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276 - https://usn.ubuntu.com/4042-1/
CVE ID: CVE-2019-10024 State: PUBLISHED Published: 2019-03-24T23:11:49 Last Updated: 2024-08-04T22:10:08.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274
CVE ID: CVE-2019-10025 State: PUBLISHED Published: 2019-03-24T23:12:03 Last Updated: 2024-08-04T22:10:08.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274
CVE ID: CVE-2019-10026 State: PUBLISHED Published: 2019-03-24T23:12:14 Last Updated: 2024-08-04T22:10:08.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276
CVE ID: CVE-2019-10027 State: PUBLISHED Published: 2019-03-24T23:25:20 Last Updated: 2024-08-04T22:10:08.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen. Additional Analyst Notes: - CVE Program Container: References: - https://sharemice.github.io/phpcms_xss/ - https://github.com/sharemice/phpcms_xss/blob/master/index.html
CVE ID: CVE-2019-10028 State: PUBLISHED Published: 2019-06-21T20:10:03 Last Updated: 2024-08-04T22:10:09.364Z Vendors: Netflix Products: Dial Reference Source Code Repo (https://github.com/Netflix/dial-reference) Problem Types: Denial of Service Description: Denial of Service (DOS) in Dial Reference Source Code Used before June 18th, 2019. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2019-002.md
CVE ID: CVE-2019-10038 State: PUBLISHED Published: 2019-05-31T21:01:34 Last Updated: 2024-08-04T22:10:08.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing - https://evernote.com/security/updates - https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
CVE ID: CVE-2019-10039 State: PUBLISHED Published: 2019-03-25T18:03:37 Last Updated: 2024-08-04T22:10:08.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/edit_web_and_sys_account/README.md
CVE ID: CVE-2019-10040 State: PUBLISHED Published: 2019-03-25T18:03:54 Last Updated: 2024-08-04T22:10:08.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/remote_cmd_exec_0/README.md
CVE ID: CVE-2019-10041 State: PUBLISHED Published: 2019-03-25T18:04:07 Last Updated: 2024-08-04T22:10:08.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/edit_sys_account/README.md
CVE ID: CVE-2019-10042 State: PUBLISHED Published: 2019-03-25T18:04:21 Last Updated: 2024-08-04T22:10:09.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/reset_router/README.md
CVE ID: CVE-2019-10044 State: PUBLISHED Published: 2019-03-25T19:29:17 Last Updated: 2024-08-04T22:10:09.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blazeinfosec/advisorie
nt alphabets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blazeinfosec/advisories/blob/master/telegram-advisory.txt - http://www.securityfocus.com/bid/107610
CVE ID: CVE-2019-10045 State: PUBLISHED Published: 2019-05-31T21:09:15 Last Updated: 2024-08-04T22:10:09.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "action" get_sess_id in the web application of Pydio through 8.2.2 discloses the session cookie value in the response body, enabling scripts to get access to its value. This identifier can be reused by an attacker to impersonate a user and perform actions on behalf of him/her (if the session is still active). Additional Analyst Notes: - CVE Program Container: References: - https://www.secureauth.com/labs/advisories
CVE ID: CVE-2019-10046 State: PUBLISHED Published: 2019-05-31T21:11:09 Last Updated: 2024-08-04T22:10:09.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including session timeout, libraries, and license information. Additional Analyst Notes: - CVE Program Container: References: - https://www.secureauth.com/labs/advisories
CVE ID: CVE-2019-10047 State: PUBLISHED Published: 2019-05-31T21:13:11 Last Updated: 2024-08-04T22:10:08.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be used to access the uploaded file. If a malicious user shares an uploaded HTML file containing JavaScript code with another user of the application, and tricks an authenticated victim into accessing a URL that results in the HTML code bei
other user of the application, and tricks an authenticated victim into accessing a URL that results in the HTML code being interpreted by the web browser, then the included JavaScript code is executed under the context of the victim user session. Additional Analyst Notes: - CVE Program Container: References: - https://www.secureauth.com/labs/advisories
CVE ID: CVE-2019-10048 State: PUBLISHED Published: 2019-05-31T21:15:49 Last Updated: 2024-08-04T22:10:08.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of user supplied input in the plugin's configuration options, allowing arbitrary shell commands to be entered that result in command execution on the underlying operating system, with the privileges of the local user running the web server. The attacker must be authenticated into the application with an administrator user account in order to be able to edit the affected plugin configuration.
into the application with an administrator user account in order to be able to edit the affected plugin configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.secureauth.com/labs/advisories
CVE ID: CVE-2019-10049 State: PUBLISHED Published: 2019-05-31T21:17:46 Last Updated: 2024-08-04T22:10:09.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an administrator user into opening a link shared through the application, that in turn opens a shared file that contains JavaScript code (that is executed in the context of the victim user to obtain sensitive information such as session identifiers and perform actions on behalf of him/her). Additional Analyst Notes: - CVE Program Container: References: - https://www.secureauth.com/labs/advisories
CVE ID: CVE-2019-10050 State: PUBLISHED Published: 2019-05-13T16:18:52 Last Updated: 2024-08-04T22:10:09.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a packet of source address and destination address plus the correct type field and the right number for shim, an attacker can manipulate the control flow, such that the condition to leave the loop is true. After leaving the loop, the network packet has a length of 2 bytes. There is no validation of this length. Later on, the code tries to read at an empty position, leading to a cras
2 bytes. There is no validation of this length. Later on, the code tries to read at an empty position, leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openinfosecfoundation.org/pipermail/oisf-announce/ - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
CVE ID: CVE-2019-10051 State: PUBLISHED Published: 2019-08-28T19:47:16 Last Updated: 2024-08-04T22:10:08.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the program enters an smb/files.rs error condition and crashes. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ - https://redmine.openinfosecfoundation.org/issues/2896 - https://github.com/OISF/suricata/pull/3734
CVE ID: CVE-2019-10052 State: PUBLISHED Published: 2019-08-28T19:52:13 Last Updated: 2024-08-04T22:10:09.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parse_clientid_option in the dhcp/parser.rs file. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ - https://redmine.openinfosecfoundation.org/issues/2902 - https://redmine.openinfosecfoundation.org/issues/2947
CVE ID: CVE-2019-10053 State: PUBLISHED Published: 2019-05-13T20:12:30 Last Updated: 2024-08-04T22:10:09.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the program runs into a heap-based buffer over-read. This occurs because the erroneous search for \r results in an integer underflow. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openinfosecfoundation.org/pipermail/oisf-announce/ - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
CVE ID: CVE-2019-10054 State: PUBLISHED Published: 2019-08-28T20:09:13 Last Updated: 2024-08-04T22:10:09.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ - https://redmine.openinfosecfoundation.org/issues/2943
CVE ID: CVE-2019-10055 State: PUBLISHED Published: 2019-08-28T20:13:14 Last Updated: 2024-08-04T22:10:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mod.rs file. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ - https://redmine.openinfosecfoundation.org/issues/2949
CVE ID: CVE-2019-10056 State: PUBLISHED Published: 2019-08-28T20:17:17 Last Updated: 2024-08-04T22:10:09.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it
it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ - https://redmine.openinfosecfoundation.org/issues/2946
CVE ID: CVE-2019-10057 State: PUBLISHED Published: 2019-08-28T21:32:39 Last Updated: 2024-08-04T22:10:09.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE921&locale=EN&userlocale=EN_US
CVE ID: CVE-2019-10058 State: PUBLISHED Published: 2019-08-28T15:59:30 Last Updated: 2024-08-04T22:10:09.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE922&locale=EN&userlocale=EN_US