Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11771 State: PUBLISHED Published: 2019-07-17T20:17:07 Last Updated: 2024-08-04T23:03:32.790Z Vendors: The Eclipse Foundation Products: Eclipse OpenJ9 Problem Types: CWE-264 Description: AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=548055
CVE ID: CVE-2019-11772 State: PUBLISHED Published: 2019-07-17T20:17:27 Last Updated: 2024-08-04T23:03:32.870Z Vendors: The Eclipse Foundation Products: Eclipse OpenJ9 Problem Types: CWE-787 Description: In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=549075 - https://access.redhat.com/errata/RHSA-2
Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=549075 - https://access.redhat.com/errata/RHSA-2019:2585 - https://access.redhat.com/errata/RHSA-2019:2590 - https://access.redhat.com/errata/RHSA-2019:2592 - https://access.redhat.com/errata/RHSA-2019:2737
CVE ID: CVE-2019-11773 State: PUBLISHED Published: 2019-09-12T17:25:54 Last Updated: 2024-08-04T23:03:32.873Z Vendors: The Eclipse Foundation Products: Eclipse OMR Problem Types: CWE-264 Description: Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=549191
CVE ID: CVE-2019-11774 State: PUBLISHED Published: 2019-09-12T17:25:54 Last Updated: 2024-08-04T23:03:32.812Z Vendors: The Eclipse Foundation Products: Eclipse OMR Problem Types: CWE-367 Description: Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a var
tly the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=549192
CVE ID: CVE-2019-11775 State: PUBLISHED Published: 2019-07-30T13:45:38 Last Updated: 2024-08-04T23:03:32.862Z Vendors: The Eclipse Foundation Products: Eclipse OpenJ9 Problem Types: CWE-367 Description: All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to
sequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=549601 - https://access.redhat.com/errata/RHSA-2019:2494 - https://access.redhat.com/errata/RHSA-2019:2495 - https://access.redhat.com/errata/RHSA-2019:2585 - https://access.redhat.com/errata/RHSA-2019:2590 - https://access.redhat.com/errata/RHSA-2019:2592 - https://access.redhat.com/errata/RHSA-2019:2737
CVE ID: CVE-2019-11776 State: PUBLISHED Published: 2019-08-09T18:41:16 Last Updated: 2024-08-04T23:03:32.740Z Vendors: The Eclipse Foundation Products: Eclipse BIRT Problem Types: CWE-79 Description: In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816
CVE ID: CVE-2019-11777 State: PUBLISHED Published: 2019-09-11T17:55:21 Last Updated: 2024-08-04T23:03:32.792Z Vendors: The Eclipse Foundation Products: Eclipse Paho Problem Types: CWE-346 Description: In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=549934
CVE ID: CVE-2019-11778 State: PUBLISHED Published: 2019-09-18T22:25:53 Last Updated: 2024-08-04T23:03:32.828Z Vendors: The Eclipse Foundation Products: Eclipse Mosquitto Problem Types: CWE-416 Description: If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=551162
CVE ID: CVE-2019-11779 State: PUBLISHED Published: 2019-09-19T13:30:43 Last Updated: 2024-08-04T23:03:32.805Z Vendors: The Eclipse Foundation Products: Eclipse Mosquitto Problem Types: CWE-754 Description: In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters, i.e. the topic hierarchy separator, then a stack overflow will occur. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=551160 - https://usn.ubuntu.com/4137-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00077.html - http://lists.op
://usn.ubuntu.com/4137-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00077.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFWQBNFTAVHPUYNGYO2TCPF5PCSWC2Z7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWNVTFA2CKXERXRYPYE2YFTZP4GNBGYY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4WMHIM64Q35NGTR6R3ILZUL4MA4ANB5/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00035.html - https://www.debian.org/security/2019/dsa-4570 - ht
https://lists.debian.org/debian-lts-announce/2019/10/msg00035.html - https://www.debian.org/security/2019/dsa-4570 - https://seclists.org/bugtraq/2019/Nov/25
CVE ID: CVE-2019-11780 State: PUBLISHED Published: 2019-12-19T15:50:12 Last Updated: 2024-08-04T23:03:32.814Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/42196
CVE ID: CVE-2019-11781 State: PUBLISHED Published: 2020-12-22T16:25:35 Last Updated: 2024-08-04T23:03:32.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-20 Description: Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/63706
CVE ID: CVE-2019-11782 State: PUBLISHED Published: 2020-12-22T16:25:36 Last Updated: 2024-08-04T23:03:32.794Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/63707
CVE ID: CVE-2019-11783 State: PUBLISHED Published: 2020-12-22T16:25:36 Last Updated: 2024-08-04T23:03:32.867Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to subscribe to arbitrary mail channels uninvited. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/63708
CVE ID: CVE-2019-11784 State: PUBLISHED Published: 2020-12-22T16:25:37 Last Updated: 2024-08-04T23:03:32.743Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/63709
CVE ID: CVE-2019-11785 State: PUBLISHED Published: 2020-12-22T16:25:38 Last Updated: 2024-08-04T23:03:32.751Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain access to messages posted on business records there were not given access to, and subscribe to receive future messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/63710
CVE ID: CVE-2019-11786 State: PUBLISHED Published: 2020-12-22T16:25:38 Last Updated: 2024-08-04T23:03:32.888Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/63711
CVE ID: CVE-2019-11787 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11788 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11789 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11790 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11791 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11792 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11793 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11794 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11795 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11796 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11797 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11798 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11799 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11800 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11801 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11802 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11803 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11804 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2019-11806 State: PUBLISHED Published: 2019-08-20T12:35:16 Last Updated: 2024-08-04T23:03:32.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.1 and earlier has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154128/Open-Xchange-OX-App-Suite-Content-Spoofing-Cross-Site-Scripting.html
CVE ID: CVE-2019-11807 State: PUBLISHED Published: 2019-05-06T17:45:55 Last Updated: 2024-08-04T23:03:32.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update_attachment_wccm wccm_default_keys_load parameter because of a nopriv_ registration and a lack of capabilities checks. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2019/05/unauthenticated-media-deletion-vulnerability-patched-in-woocommerce-checkout-manager-plugin/ - https://wpvulndb.com/vulnerabilities/9262
CVE ID: CVE-2019-11808 State: PUBLISHED Published: 2019-05-07T06:53:16 Last Updated: 2024-08-04T23:03:32.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ratpack/ratpack/releases/tag/v1.6.1 - https://github.com/ratpack/ratpack/commit/f2b63eb82dd71194319fd3945f5edf29b8f3a42d - https://github.com/ratpac
/v1.6.1 - https://github.com/ratpack/ratpack/commit/f2b63eb82dd71194319fd3945f5edf29b8f3a42d - https://github.com/ratpack/ratpack/issues/1448
CVE ID: CVE-2019-11809 State: PUBLISHED Published: 2019-05-20T12:16:51 Last Updated: 2024-08-04T23:03:32.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly escape user supplied data, which leads to a potential XSS attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/780-20190501-core-xss-in-com-users-acl-debug-view
CVE ID: CVE-2019-11810 State: PUBLISHED Published: 2019-05-07T13:04:28 Last Updated: 2024-08-04T23:03:32.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/bcf3b67d16a4c8ffae0aa79de5853435e683945c - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bcf3b67d16a4c8ffae0aa79de5853435e683945c
c - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bcf3b67d16a4c8ffae0aa79de5853435e683945c - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.7 - http://www.securityfocus.com/bid/108286 - https://usn.ubuntu.com/4008-1/ - https://usn.ubuntu.com/4005-1/ - https://usn.ubuntu.com/4008-3/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html - https://support.f5.com/csp/article/K50484570 - https://security.netapp.com/advisory/ntap-20190719-0003/ - https://access.redhat.com/errata/RHSA-2019:1959 - https://access.redhat.com/errata/RHSA-2019:1971 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 -
ata/RHSA-2019:1971 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:2736 - https://access.redhat.com/errata/RHSA-2019:2837 - https://access.redhat.com/errata/RHSA-2019:3217 - https://access.redhat.com/errata/RHSA-2020:0036
CVE ID: CVE-2019-11811 State: PUBLISHED Published: 2019-05-07T13:24:48 Last Updated: 2024-08-04T23:03:32.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4 - https://github.com/torvalds/linux/commit/401e7e88d4ef80188ffa07095ac00456f901b8c4 - https://git.kernel.org/cgit/linu
4 - https://github.com/torvalds/linux/commit/401e7e88d4ef80188ffa07095ac00456f901b8c4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=401e7e88d4ef80188ffa07095ac00456f901b8c4 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html - https://support.f5.com/csp/article/K01512680 - https://security.netapp.com/advisory/ntap-20190719-0003/ - http://www.securityfocus.com/bid/108410 - https://access.redhat.com/errata/RHSA-2019:1873 - https://access.redhat.com/errata/RHSA-2019:1891 - https://access.redhat.com/errata/RHSA-2019:1959 - https://access.redhat.com/errata/RHSA-2019:1971 - https://access.redhat.com/errata/RHSA-2019:4058 - https://access.redh
https://access.redhat.com/errata/RHSA-2019:1971 - https://access.redhat.com/errata/RHSA-2019:4058 - https://access.redhat.com/errata/RHSA-2019:4057 - https://access.redhat.com/errata/RHSA-2020:0036
CVE ID: CVE-2019-11812 State: PUBLISHED Published: 2019-05-08T12:59:45 Last Updated: 2024-08-04T23:03:32.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/3a085a6ceea00b3ab674a984dd56c1846ef775ff
CVE ID: CVE-2019-11813 State: PUBLISHED Published: 2019-05-08T13:00:01 Last Updated: 2024-08-04T23:03:32.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in app/View/Elements/Events/View/value_field.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/6f6fb678ca07c80cb7d2bdfe5cb0313bb71bd487
CVE ID: CVE-2019-11814 State: PUBLISHED Published: 2019-05-08T13:00:21 Last Updated: 2024-08-04T23:03:32.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/62f15433e42fb92e45bd57dd6fc0c0bf53deb6fc
CVE ID: CVE-2019-11815 State: PUBLISHED Published: 2019-05-08T13:36:39 Last Updated: 2024-08-04T23:03:32.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8 - https://github.com/torvalds/linux/commit/cb66ddd156203daefb8d71158036b27b0e2caf63 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb66ddd156203daefb8d71158036b27b0e2caf63 - http://www.secur
rnel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb66ddd156203daefb8d71158036b27b0e2caf63 - http://www.securityfocus.com/bid/108283 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html - https://support.f5.com/csp/article/K32019083 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html - https://usn.ubuntu.com/4008-1/ - https://usn.ubuntu.com/4005-1/ - https://usn.ubuntu.com/4008-3/ - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html - https://seclists.org/bugtraq/2019/Jun/26 - https://security.
ists.debian.org/debian-lts-announce/2019/06/msg00011.html - https://seclists.org/bugtraq/2019/Jun/26 - https://security.netapp.com/advisory/ntap-20190719-0003/ - https://usn.ubuntu.com/4068-1/ - https://usn.ubuntu.com/4068-2/ - http://packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2019-11816 State: PUBLISHED Published: 2019-05-20T21:26:03 Last Updated: 2024-08-04T23:03:32.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://forum.opnsense.org/index.php?topic=12787.0 - https://www.netgate.com/blog/pfsense-2-4-4-release-p3-now-available.html