Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14690 State: PUBLISHED Published: 2019-08-06T12:03:26 Last Updated: 2024-08-05T00:26:37.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/85 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
CVE ID: CVE-2019-14691 State: PUBLISHED Published: 2019-08-06T12:03:40 Last Updated: 2024-08-05T00:26:37.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/86 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
CVE ID: CVE-2019-14692 State: PUBLISHED Published: 2019-08-06T12:03:53 Last Updated: 2024-08-05T00:26:37.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/87 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
CVE ID: CVE-2019-14693 State: PUBLISHED Published: 2019-08-08T17:29:58 Last Updated: 2024-08-05T00:26:37.521Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AC:L/AV:N/A:H/C:L/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2019-14693
CVE ID: CVE-2019-14694 State: PUBLISHED Published: 2019-08-28T19:12:32 Last Updated: 2024-08-05T00:26:37.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container. Additional Analyst Notes: - CVE Program Container: References: - http://rce4fun.blogspot.com/2019/08/comodo-antivirus-sandbox-race-condition.html - https://github.com/SouhailHammou/Ex
- http://rce4fun.blogspot.com/2019/08/comodo-antivirus-sandbox-race-condition.html - https://github.com/SouhailHammou/Exploits/blob/master/CVE-2019-14694%20-%20Comodo%20AV%20Sandbox%20Race%20Condition%20UAF/comodo_av_uaf_poc.c
CVE ID: CVE-2019-14695 State: PUBLISHED Published: 2019-08-06T13:14:03 Last Updated: 2024-08-05T00:26:37.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9495 - https://wordpress.org/plugins/popup-builder/#developers - https://fortiguard.com/zeroday/FG-VD-19-102
CVE ID: CVE-2019-14696 State: PUBLISHED Published: 2019-08-06T15:38:29 Last Updated: 2024-08-05T00:26:38.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://open-school.org - https://pastebin.com/AgxqdbAQ - http://packetstormsecurity.com/files/153984/Open-School-3.0-Community-Edition-2.3-Cross-Site-Scripting.html
CVE ID: CVE-2019-14697 State: PUBLISHED Published: 2019-08-06T15:34:50 Last Updated: 2024-08-05T00:26:37.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/musl/2019/08/06/1 - http://www.openwall.com/lists/oss-security/2019/08/06/4 - https://security.gentoo.org/glsa/202003-13
CVE ID: CVE-2019-14698 State: PUBLISHED Published: 2019-08-06T22:27:07 Last Updated: 2024-08-05T00:26:37.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running under the HTTPD web server, a buffer overflow in the param parameter leads to remote code execution in the context of the nobody account. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14699 State: PUBLISHED Published: 2019-08-06T22:26:55 Last Updated: 2024-08-05T00:26:37.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can exploit OS Command Injection in the filename parameter for remote code execution as root. This occurs in the Mainproc executable file, which can be run from the HTTPD web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14700 State: PUBLISHED Published: 2019-08-06T22:26:35 Last Updated: 2024-08-05T00:26:37.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. There is disclosure of the existence of arbitrary files via Path Traversal in HTTPD. This occurs because the filename specified in the TZ parameter is accessed with a substantial delay if that file exists. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14701 State: PUBLISHED Published: 2019-08-06T22:26:19 Last Updated: 2024-08-05T00:26:38.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can trigger read operations on an arbitrary file via Path Traversal in the TZ parameter, but cannot retrieve the data that is read. This causes a denial of service if the filename is, for example, /dev/random. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14702 State: PUBLISHED Published: 2019-08-06T22:26:02 Last Updated: 2024-08-05T00:26:38.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. SQL injection vulnerabilities exist in 13 forms that are reachable through HTTPD. An attacker can, for example, create an admin account. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14703 State: PUBLISHED Published: 2019-08-06T22:24:46 Last Updated: 2024-08-05T00:26:38.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in webparam?user&action=set&param=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14704 State: PUBLISHED Published: 2019-08-06T22:24:21 Last Updated: 2024-08-05T00:26:38.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the uploadfile field. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14705 State: PUBLISHED Published: 2019-08-06T22:24:09 Last Updated: 2024-08-05T00:26:37.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14706 State: PUBLISHED Published: 2019-08-06T22:23:55 Last Updated: 2024-08-05T00:26:39.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker without authorization can upload a file to upload.php with a filename longer than 256 bytes. This will be placed in the updownload area. It will not be deleted, because of a buffer overflow in a Bash command string. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14707 State: PUBLISHED Published: 2019-08-06T22:23:19 Last Updated: 2024-08-05T00:26:38.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14708 State: PUBLISHED Published: 2019-08-06T22:21:40 Last Updated: 2024-08-05T00:26:37.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the action parameter leads to remote code execution in the context of the nobody account. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14709 State: PUBLISHED Published: 2019-08-06T22:21:16 Last Updated: 2024-08-05T00:26:38.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The file in question is /usr/local/ipsca/mipsca.db. If a camera is compromised, the attacker can gain access to passwords and abuse them to compromise further systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.microdigital.ru/ - http://www.microdigital.co.kr/ - https://pastebin.com/PSyqqs1g
CVE ID: CVE-2019-14711 State: PUBLISHED Published: 2020-10-23T04:31:36 Last Updated: 2024-08-05T00:26:38.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-20/
CVE ID: CVE-2019-14712 State: PUBLISHED Published: 2020-10-23T04:33:04 Last Updated: 2024-08-05T00:26:38.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-24/
CVE ID: CVE-2019-14713 State: PUBLISHED Published: 2020-10-23T04:33:42 Last Updated: 2024-08-05T00:26:38.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-21/
CVE ID: CVE-2019-14715 State: PUBLISHED Published: 2020-10-23T04:58:17 Last Updated: 2024-08-05T00:26:38.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-28/
CVE ID: CVE-2019-14716 State: PUBLISHED Published: 2020-10-23T04:39:29 Last Updated: 2024-08-05T00:26:38.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out). Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-27/
CVE ID: CVE-2019-14717 State: PUBLISHED Published: 2020-10-23T04:38:21 Last Updated: 2024-08-05T00:26:38.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-26/
CVE ID: CVE-2019-14718 State: PUBLISHED Published: 2020-10-23T04:36:47 Last Updated: 2024-08-05T00:26:38.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-22/
CVE ID: CVE-2019-14719 State: PUBLISHED Published: 2020-10-23T04:35:21 Last Updated: 2024-08-05T00:26:38.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-23/
CVE ID: CVE-2019-14721 State: PUBLISHED Published: 2019-09-10T15:14:28 Last Updated: 2024-08-05T00:26:38.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14721.md
CVE ID: CVE-2019-14722 State: PUBLISHED Published: 2019-09-10T15:15:13 Last Updated: 2024-08-05T00:26:38.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a victim's account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14722.md
CVE ID: CVE-2019-14723 State: PUBLISHED Published: 2019-09-10T15:16:27 Last Updated: 2024-08-05T00:26:38.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a victim's e-mail account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14723.md
CVE ID: CVE-2019-14724 State: PUBLISHED Published: 2019-09-11T11:28:05 Last Updated: 2024-08-05T00:26:38.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14724.md
CVE ID: CVE-2019-14725 State: PUBLISHED Published: 2019-09-11T11:26:14 Last Updated: 2024-08-05T00:26:38.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14725.md
CVE ID: CVE-2019-14726 State: PUBLISHED Published: 2019-09-10T15:19:50 Last Updated: 2024-08-05T00:26:38.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14726.md
CVE ID: CVE-2019-14727 State: PUBLISHED Published: 2019-09-10T15:21:01 Last Updated: 2024-08-05T00:26:38.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password of a victim account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14727.md
CVE ID: CVE-2019-14728 State: PUBLISHED Published: 2019-09-10T15:22:35 Last Updated: 2024-08-05T00:26:38.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victim's account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14728.md
CVE ID: CVE-2019-14729 State: PUBLISHED Published: 2019-09-10T15:21:43 Last Updated: 2024-08-05T00:26:38.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14729.md
CVE ID: CVE-2019-14730 State: PUBLISHED Published: 2019-09-10T15:23:20 Last Updated: 2024-08-05T00:26:39.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html - https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14730.md
CVE ID: CVE-2019-14731 State: PUBLISHED Published: 2019-08-06T23:36:35 Last Updated: 2024-08-05T00:26:38.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other people's cookies via the Rich Text Box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/easysoft/zentaopms/issues/35
CVE ID: CVE-2019-14732 State: PUBLISHED Published: 2019-08-07T00:06:44 Last Updated: 2024-08-05T00:26:38.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/88 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
CVE ID: CVE-2019-14733 State: PUBLISHED Published: 2019-08-07T00:06:33 Last Updated: 2024-08-05T00:26:38.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/89 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/