Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14624 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14625 State: PUBLISHED Published: 2020-03-12T17:43:20 Last Updated: 2024-08-05T00:19:41.352Z Vendors: Intel Products: Intel(R) FPGA Programmable Acceleration Card N3000 Problem Types: Denial of Service Description: Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html
CVE ID: CVE-2019-14626 State: PUBLISHED Published: 2020-03-12T17:43:10 Last Updated: 2024-08-05T00:19:41.382Z Vendors: Intel Products: Intel(R) FPGA Programmable Acceleration Card N3000 Problem Types: Escalation of Privilege Description: Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html
CVE ID: CVE-2019-14627 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14628 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14629 State: PUBLISHED Published: 2020-01-17T17:38:56 Last Updated: 2024-08-05T00:19:41.430Z Vendors: Intel Products: Intel(R) DAAL Problem Types: information disclosure Description: Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.html
CVE ID: CVE-2019-14630 State: PUBLISHED Published: 2020-08-13T02:08:32 Last Updated: 2024-08-05T00:19:41.382Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) Controller Advisory Problem Types: Information Disclosure Description: Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00411.html
CVE ID: CVE-2019-14631 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14632 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14633 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14634 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14635 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14636 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14637 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14638 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14639 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14640 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14641 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14642 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14643 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14644 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14645 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14646 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14647 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14648 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14649 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14650 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14651 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14652 State: PUBLISHED Published: 2020-02-13T04:47:18 Last Updated: 2024-08-05T00:19:41.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/awslabs/aws-js-s3-explorer/commit/87efa7d6885c4a9d8473ec5893adf8e4922a8a89 - https://github.com/awslabs/aws-js-s3-explorer/commit/7be671e858601455d6969e445d21a911632d6c94 - https://github.com/awslabs/aws-js-s3-explorer/pull/62
CVE ID: CVE-2019-14653 State: PUBLISHED Published: 2019-08-03T13:20:00 Last Updated: 2024-08-05T00:19:41.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pandao/editor.md/issues/715
CVE ID: CVE-2019-14654 State: PUBLISHED Published: 2019-08-05T00:39:07 Last Updated: 2024-08-05T00:19:41.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. In other words, the filter attribute in subform fields allows remote code execution. This is fixed in 3.9.9. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/787-20190701-core-filter-attribute-in-subform-fields-allows-remote-code-execution.html
CVE ID: CVE-2019-14655 State: REJECTED Published: 2019-08-05T00:47:39 Last Updated: 2019-08-05T19:33:57 Description: No description available.
CVE ID: CVE-2019-14656 State: PUBLISHED Published: 2019-10-08T12:01:20 Last Updated: 2024-08-05T00:19:41.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a password of user) can make admin requests via HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://cerebusforensics.com/yealink/exploit.html - https://sway.office.com/3pCb559LYVuT0eig
CVE ID: CVE-2019-14657 State: PUBLISHED Published: 2019-10-08T12:02:34 Last Updated: 2024-08-05T00:19:41.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitrary code execution as root. Additional Analyst Notes: - CVE Program Container: References: - http://cerebusforensics.com/yealink/exploit.html - https://sway.office.com/3pCb559LYVuT0eig
CVE ID: CVE-2019-14659 State: REJECTED Published: 2019-08-13T13:44:00 Last Updated: 2019-08-13T13:44:00 Description: No description available.
CVE ID: CVE-2019-14662 State: PUBLISHED Published: 2019-08-05T11:14:59 Last Updated: 2024-08-05T00:19:41.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/brandy/bugs/7/
CVE ID: CVE-2019-14663 State: PUBLISHED Published: 2019-08-05T11:15:13 Last Updated: 2024-08-05T00:19:41.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fileio.c via crafted BASIC source code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/brandy/bugs/6/
CVE ID: CVE-2019-14664 State: PUBLISHED Published: 2019-08-05T19:25:58 Last Updated: 2024-08-05T00:19:41.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, he unknowingly leaks the plaintext of the encrypted message part(s) back to the attacker. This attack variant bypasses protection mechanisms implemented after the "EF
ypted message part(s) back to the attacker. This attack variant bypasses protection mechanisms implemented after the "EFAIL" attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.enigmail.net/index.php/en/download/changelog - https://sourceforge.net/p/enigmail/bugs/984/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYWBJHSBBLAHKMRWDWH2XXQDYAGDHB5I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVNTEF3WSOOQYKMIPEH7F77UPXES5BU5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHC5WDQ47FQSL5CTGQUYIHVC3RNZ7UH5
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHC5WDQ47FQSL5CTGQUYIHVC3RNZ7UH5/
CVE ID: CVE-2019-14665 State: PUBLISHED Published: 2019-08-05T18:29:45 Last Updated: 2024-08-05T00:19:41.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brandy 1.20.1 has a heap-based buffer overflow in define_array in variables.c via crafted BASIC source code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/brandy/bugs/8/
CVE ID: CVE-2019-14666 State: PUBLISHED Published: 2019-09-25T19:19:15 Last Updated: 2024-08-05T00:19:41.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes. Additional Analyst Notes: - CVE Program Container: Ref
o obtain other sensitive fields like API keys or password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Tarlogic-2019-GPLI-Account-Takeover.txt - https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5q
CVE ID: CVE-2019-14667 State: PUBLISHED Published: 2019-08-05T19:23:40 Last Updated: 2024-08-05T00:19:41.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2363 - https://github.com/firefly-iii/firefly-iii/commit/427de0594d05a8222f55b2894311e648ba1be991 - https://github.com/firefly-iii/firefly-iii/commit/15d4d185bbedf2b
-iii/commit/427de0594d05a8222f55b2894311e648ba1be991 - https://github.com/firefly-iii/firefly-iii/commit/15d4d185bbedf2bb9db4a8fa2ccf9fc359a06194
CVE ID: CVE-2019-14668 State: PUBLISHED Published: 2019-08-05T19:23:34 Last Updated: 2024-08-05T00:19:41.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the transaction description field. The JavaScript code is executed during deletion of a transaction link. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2364 - https://github.com/firefly-iii/firefly-iii/commit/3ad4e04e2ae50e60564b60b68dfac083e5684882
CVE ID: CVE-2019-14669 State: PUBLISHED Published: 2019-08-05T19:23:23 Last Updated: 2024-08-05T00:19:41.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2366 - https://github.com/firefly-iii/firefly-iii/commit/2ddf48f15cbdbb475221c299872420f625c3bc3f
CVE ID: CVE-2019-14670 State: PUBLISHED Published: 2019-08-05T19:23:15 Last Updated: 2024-08-05T00:19:41.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the bill name field. The JavaScript code is executed during rule-from-bill creation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2365 - https://github.com/firefly-iii/firefly-iii/commit/692b256f3f6d9eab992a72eb042844220b314054
CVE ID: CVE-2019-14671 State: PUBLISHED Published: 2019-08-05T19:23:08 Last Updated: 2024-08-05T00:19:41.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2367 - https://github.com/firefly-iii/firefly-iii/commit/e80d616ef4397e6e764f6b7b7a5b30121244933c
CVE ID: CVE-2019-14672 State: PUBLISHED Published: 2019-08-05T19:22:58 Last Updated: 2024-08-05T00:19:41.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the liability name field. The JavaScript code is executed upon an error condition during a visit to the account show page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2370 - https://github.com/firefly-iii/firefly-iii/commit/8717f469b10e9f7e1547c6f70f7d24e1359d28d4
CVE ID: CVE-2019-14678 State: PUBLISHED Published: 2019-11-14T20:59:44 Last Updated: 2024-08-05T00:19:41.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Server Side Request Forgery, and/or Potential Denial of Service attacks. This vulnerability also affects the XMLV2 LIBNAME engine when the AUTOMAP option is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14678-Unsafe%20XML%20Parsing-SAS%20XML%20Ma
erences: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14678-Unsafe%20XML%20Parsing-SAS%20XML%20Mapper - http://support.sas.com/kb/64/719.html
CVE ID: CVE-2019-14679 State: PUBLISHED Published: 2019-08-08T20:00:39 Last Updated: 2024-08-05T00:19:41.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.pluginvulnerabilities.com/2019/07/11/cross-site-request-forgery-csrf-vulnerability-in-arprice-lite/ - https://wordpress.org/plugins/arprice-responsive-pricing-table/#developers
CVE ID: CVE-2019-14680 State: PUBLISHED Published: 2019-08-08T19:59:36 Last Updated: 2024-08-05T00:19:41.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp-admin/plugins.php?page=admin-renamer-extended/admin.php CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.pluginvulnerabilities.com/2019/06/24/cross-site-request-forgery-csrf-vulnerability-in-admin-renamer-extended/ - https://wpvulndb.com/vulnerabilities/9551
CVE ID: CVE-2019-14681 State: PUBLISHED Published: 2019-08-08T19:57:14 Last Updated: 2024-08-05T00:19:41.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=daf_settings&daf_remove=true CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.pluginvulnerabilities.com/2019/06/21/cross-site-request-forgery-csrf-vulnerability-in-deny-all-firewall/ - https://wordpress.org/plugins/deny-all-firewall/#developers
CVE ID: CVE-2019-14682 State: PUBLISHED Published: 2019-08-08T19:56:11 Last Updated: 2024-08-05T00:19:41.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acf-better-search (aka ACF: Better Search) plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbs_admin_page CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9399 - https://www.pluginvulnerabilities.com/2019/06/26/cross-site-request-forgery-csrf-settings-change-vulnerability-in-acf-better-search/ - https://wordpress.org/plugins/acf-better-search/#developers
CVE ID: CVE-2019-14683 State: PUBLISHED Published: 2019-08-08T19:54:52 Last Updated: 2024-08-05T00:19:41.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers - https://wpvulndb.com/vulnerabilities/9392 - https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2112013 - https://www.pluginvulnerabilities.com/2019/06/21/cross-site-request-forgery-csrf-media-deletion-vulnerabi
?rev=2112013 - https://www.pluginvulnerabilities.com/2019/06/21/cross-site-request-forgery-csrf-media-deletion-vulnerability-in-import-users-from-csv-with-meta/
CVE ID: CVE-2019-14684 State: PUBLISHED Published: 2019-08-20T13:30:04 Last Updated: 2024-08-05T00:19:41.449Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: DLL Hijacking Description: A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687. Additional Analyst Notes: - CVE Program Container: References: - https://safebreach.com/Post/Trend-Micro-Password-Manager-Privilege-Escalation-to-SYSTEM - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123396.a
rd-Manager-Privilege-Escalation-to-SYSTEM - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123396.aspx
CVE ID: CVE-2019-14685 State: PUBLISHED Published: 2019-08-21T19:41:36 Last Updated: 2024-08-05T00:26:37.460Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Local Privilege Escalation Description: A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68 - https://esupport.trendmicro.com/en-us/h
2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68 - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx - http://seclists.org/fulldisclosure/2019/Aug/26 - http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html
CVE ID: CVE-2019-14686 State: PUBLISHED Published: 2019-08-21T19:42:17 Last Updated: 2024-08-05T00:26:37.472Z Vendors: Trend Micro Products: Trend Micro Ransom Buster, Trend Micro Security (Consumer) Problem Types: DLL Hijacking Description: A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123421.aspx
CVE ID: CVE-2019-14687 State: PUBLISHED Published: 2019-08-20T13:30:51 Last Updated: 2024-08-05T00:26:37.484Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: DLL Hijacking Description: A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40infiniti_css/fa839acaad59 - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123396.aspx
CVE ID: CVE-2019-14688 State: PUBLISHED Published: 2020-02-20T22:50:22 Last Updated: 2024-08-05T00:26:37.555Z Vendors: Trend Micro Products: Trend Micro IM Security (IMS), Trend Micro Control Manager (TMCM), Trend Micro OfficeScan (OSCE), Trend Micro Endpoint Sensor (TMES), Trend Micro Security (Consumer), Trend Micro ScanMail for Microsoft Exchange (SMEX), Trend Micro ServerProtect (SP), Trend Micro Mobile Security Enterprise (TMMS Enterprise) Problem Types: DLL Hijack Description: Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product i
ilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1123562