Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7237 State: PUBLISHED Published: 2019-01-30T21:00:00 Last Updated: 2024-08-04T20:46:45.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/54
CVE ID: CVE-2019-7238 State: PUBLISHED Published: 2019-03-21T16:45:23.000Z Last Updated: 2025-10-21T23:45:41.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019
CVE ID: CVE-2019-7240 State: PUBLISHED Published: 2020-03-25T16:54:28 Last Updated: 2024-08-04T20:46:45.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0004/FEYE-2019-0004.md
CVE ID: CVE-2019-7244 State: PUBLISHED Published: 2020-03-25T16:56:18 Last Updated: 2024-08-04T20:46:45.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0010/FEYE-2019-0010.md
CVE ID: CVE-2019-7245 State: PUBLISHED Published: 2020-03-25T16:35:07 Last Updated: 2024-08-04T20:46:44.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0002/FEYE-2019-0002.md
CVE ID: CVE-2019-7246 State: PUBLISHED Published: 2020-05-18T15:56:48 Last Updated: 2024-08-04T20:46:45.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0015/FEYE-2019-0015.md
CVE ID: CVE-2019-7247 State: PUBLISHED Published: 2020-05-18T15:52:49 Last Updated: 2024-08-04T20:46:46.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0014/FEYE-2019-0014.md
CVE ID: CVE-2019-7249 State: PUBLISHED Published: 2019-01-31T08:00:00 Last Updated: 2024-08-04T20:46:45.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs. Additional Analyst Notes: - CVE Program Container: References: - https://keybase.io/docs/secadv/kb004 - http://www.securityfocus.com/bid/106824 - https://hackerone.com/reports/471739
CVE ID: CVE-2019-7250 State: PUBLISHED Published: 2019-01-31T08:00:00 Last Updated: 2024-08-04T20:46:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/davidrthorn/cross_reference/issu
in. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/davidrthorn/cross_reference/issues/32
CVE ID: CVE-2019-7251 State: PUBLISHED Published: 2019-03-28T16:18:45 Last Updated: 2024-08-04T20:46:45.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation. Additional Analyst Notes: - CVE Program Container: References: - https://issues.asterisk.org/jira/browse/ASTERISK-28260 - https://downloads.asterisk.org/pub/security/AST-2019-001.html
CVE ID: CVE-2019-7252 State: PUBLISHED Published: 2019-07-02T18:54:50 Last Updated: 2024-08-04T20:46:45.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices have Default Credentials. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005
CVE ID: CVE-2019-7253 State: PUBLISHED Published: 2019-07-02T18:53:30 Last Updated: 2024-08-04T20:46:45.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005
CVE ID: CVE-2019-7254 State: PUBLISHED Published: 2019-07-02T18:51:42 Last Updated: 2024-08-04T20:46:45.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow File Inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155252/Linear-eMerge-E3-1.00-06-Directory-Traversal.html
CVE ID: CVE-2019-7255 State: PUBLISHED Published: 2019-07-02T18:44:16 Last Updated: 2024-08-04T20:46:45.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow XSS. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155253/Linear-eMerge-E3-1.00-06-Cross-Site-Scripting.html
CVE ID: CVE-2019-7256 State: PUBLISHED Published: 2019-07-02T00:00:00.000Z Last Updated: 2025-10-21T23:45:34.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Command Injections. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html - http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html - http://packetstormsecurity.com/files/155272/Linear-eMerge-E
ge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html - http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html - http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
CVE ID: CVE-2019-7257 State: PUBLISHED Published: 2019-07-02T18:16:34 Last Updated: 2024-08-04T20:46:45.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Unrestricted File Upload. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155254/Linear-eMerge-E3-1.00-06-Arbitrary-File-Upload-Remote-Root-Code-Execution.html
CVE ID: CVE-2019-7258 State: PUBLISHED Published: 2019-07-02T18:03:53 Last Updated: 2024-08-04T20:46:45.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Privilege Escalation. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155260/Linear-eMerge-E3-1.00-06-Privilege-Escalation.html
CVE ID: CVE-2019-7259 State: PUBLISHED Published: 2019-07-02T17:09:22 Last Updated: 2024-08-04T20:46:45.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155260/Linear-eMerge-E3-1.00-06-Privilege-Escalation.html
CVE ID: CVE-2019-7260 State: PUBLISHED Published: 2019-07-02T17:06:49 Last Updated: 2024-08-04T20:46:45.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices have Cleartext Credentials in a Database. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005
CVE ID: CVE-2019-7261 State: PUBLISHED Published: 2019-07-02T17:03:54 Last Updated: 2024-08-04T20:46:46.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices have Hard-coded Credentials. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155267/Nortek-Linear-eMerge-E3-Access-Controller-1.00-06-SSH-FTP-Remote-Root.html
CVE ID: CVE-2019-7262 State: PUBLISHED Published: 2019-07-02T17:01:42 Last Updated: 2024-08-04T20:46:45.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155263/Nortek-Linear-eMerge-E3-Access-Control-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-7263 State: PUBLISHED Published: 2019-07-02T17:00:20 Last Updated: 2024-08-04T20:46:45.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices have a Version Control Failure. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005
CVE ID: CVE-2019-7264 State: PUBLISHED Published: 2019-07-02T16:58:08 Last Updated: 2024-08-04T20:46:45.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005
CVE ID: CVE-2019-7265 State: PUBLISHED Published: 2019-07-02T16:49:28 Last Updated: 2024-08-04T20:46:45.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH). Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-005 - http://packetstormsecurity.com/files/155267/Nortek-Linear-eMerge-E3-Access-Controller-1.00-06-SSH-FTP-Remote-Root.html
CVE ID: CVE-2019-7266 State: PUBLISHED Published: 2019-07-02T16:46:56 Last Updated: 2024-08-04T20:46:45.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge 50P/5000P devices allow Authentication Bypass. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-006 - http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html - https://www.us-cert.gov/ics/advisories/icsa-20-184-01
CVE ID: CVE-2019-7267 State: PUBLISHED Published: 2019-07-02T16:45:01 Last Updated: 2024-08-04T20:46:45.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge 50P/5000P devices allow Cookie Path Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-006 - http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html - https://www.us-cert.gov/ics/advisories/icsa-20-184-01
CVE ID: CVE-2019-7268 State: PUBLISHED Published: 2019-07-02T16:43:26 Last Updated: 2024-08-04T20:46:45.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge 50P/5000P devices allow Unauthenticated File Upload. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-006 - http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html - https://www.us-cert.gov/ics/advisories/icsa-20-184-01
CVE ID: CVE-2019-7269 State: PUBLISHED Published: 2019-07-02T16:40:41 Last Updated: 2024-08-04T20:46:46.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-006 - http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html - https://www.us-cert.gov/ics/advisories/icsa-20-184-01
CVE ID: CVE-2019-7270 State: PUBLISHED Published: 2019-07-02T16:33:26 Last Updated: 2024-08-04T20:46:46.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-006 - https://www.us-cert.gov/ics/advisories/icsa-20-184-01
CVE ID: CVE-2019-7271 State: PUBLISHED Published: 2019-07-01T20:12:18 Last Updated: 2024-08-04T20:46:45.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortek Linear eMerge 50P/5000P devices have Default Credentials. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-006
CVE ID: CVE-2019-7272 State: PUBLISHED Published: 2019-07-01T20:07:55 Last Updated: 2024-08-04T20:46:45.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices allow Username Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008 - http://packetstormsecurity.com/files/155259/Optergy-BMS-2.0.3a-Account-Reset-Username-Disclosure.html
CVE ID: CVE-2019-7273 State: PUBLISHED Published: 2019-07-01T20:05:27 Last Updated: 2024-08-04T20:46:46.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008 - http://packetstormsecurity.com/files/155265/Optergy-Proton-Enterprise-BMS-2.0.3a-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-7274 State: PUBLISHED Published: 2019-07-01T20:01:59 Last Updated: 2024-08-04T20:46:46.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008 - http://packetstormsecurity.com/files/155269/Optergy-2.3.0a-Remote-Root.html
CVE ID: CVE-2019-7275 State: PUBLISHED Published: 2019-07-01T19:59:29 Last Updated: 2024-08-04T20:46:45.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices allow Open Redirect. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008 - http://packetstormsecurity.com/files/155268/Optergy-Proton-Enterprise-BMS-2.3.0a-Open-Redirect.html
CVE ID: CVE-2019-7276 State: PUBLISHED Published: 2019-07-01T00:00:00 Last Updated: 2024-08-04T20:46:45.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008 - http://packetstormsecurity.com/files/171564/Optergy-Proton-And-Enterprise-BMS-2.0.3a-Command-Injection.html
CVE ID: CVE-2019-7277 State: PUBLISHED Published: 2019-07-01T19:51:37 Last Updated: 2024-08-04T20:46:45.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008
CVE ID: CVE-2019-7278 State: PUBLISHED Published: 2019-07-01T19:43:05 Last Updated: 2024-08-04T20:46:46.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008
CVE ID: CVE-2019-7279 State: PUBLISHED Published: 2019-07-01T18:50:04 Last Updated: 2024-08-04T20:46:46.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optergy Proton/Enterprise devices have Hard-coded Credentials. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - http://www.securityfocus.com/bid/108686 - https://www.applied-risk.com/resources/ar-2019-008
CVE ID: CVE-2019-7280 State: PUBLISHED Published: 2019-07-01T18:31:34 Last Updated: 2024-08-04T20:46:46.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02
CVE ID: CVE-2019-7281 State: PUBLISHED Published: 2019-07-01T18:29:43 Last Updated: 2024-08-04T20:46:45.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://www.applied-risk.com/resources/ar-2019-007 - https://www.us-cert.gov/ics/advisories/icsa-19-211-02
CVE ID: CVE-2019-7282 State: PUBLISHED Published: 2019-01-31T18:00:00 Last Updated: 2024-08-04T20:46:45.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/920486 - https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt - https://lists.debian.org/debian-lts-announce/2021/11/msg00016.html - https://lists.fe
ent-multiple-vulnerabilities.txt - https://lists.debian.org/debian-lts-announce/2021/11/msg00016.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSEX3TKX2DBUKG4A7VJFDLSMZIBJQZ3G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA24VQJATZWYV42JG2PQUW7IHIZS7UKP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DU33YVEDGFDMAZPSRQTRVKSKG4FAX7QB/
CVE ID: CVE-2019-7283 State: PUBLISHED Published: 2019-01-31T18:00:00 Last Updated: 2024-08-04T20:46:46.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/920486 - https://sintonen.fi/advisories/scp-client-m
tes: - CVE Program Container: References: - https://bugs.debian.org/920486 - https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt - https://lists.debian.org/debian-lts-announce/2021/11/msg00016.html
CVE ID: CVE-2019-7284 State: PUBLISHED Published: 2019-12-18T17:33:15 Last Updated: 2024-08-04T20:46:45.511Z Vendors: Apple Products: iOS Problem Types: Processing a maliciously crafted mail message may lead to S/MIME signature spoofing Description: This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599