Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16685 State: PUBLISHED Published: 2019-09-27T19:05:11 Last Updated: 2024-08-05T01:17:41.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://verneet.com/cve-2019-16685/
CVE ID: CVE-2019-16686 State: PUBLISHED Published: 2019-09-27T19:09:00 Last Updated: 2024-08-05T01:17:41.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin. Additional Analyst Notes: - CVE Program Container: References: - http://verneet.com/cve-2019-16686
CVE ID: CVE-2019-16687 State: PUBLISHED Published: 2019-09-27T19:11:34 Last Updated: 2024-08-05T01:17:41.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://verneet.com/cve-2019-16687
CVE ID: CVE-2019-16688 State: PUBLISHED Published: 2019-09-27T19:14:27 Last Updated: 2024-08-05T01:17:41.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.) Additional Analyst Notes: - CVE Program Container: References: - http://verneet.com/cve-2019-16688
CVE ID: CVE-2019-16691 State: REJECTED Published: 2019-09-23T11:04:04 Last Updated: 2019-09-23T11:04:04 Description: No description available.
CVE ID: CVE-2019-16692 State: PUBLISHED Published: 2019-09-22T14:58:54 Last Updated: 2024-08-05T01:17:41.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2738 - http://packetstormsecurity.com/files/154651/phpIPAM-1.4-SQL-Injection.html
CVE ID: CVE-2019-16693 State: PUBLISHED Published: 2019-09-22T14:58:45.000Z Last Updated: 2025-04-16T14:38:43.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2738 - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2019-16693.md
CVE ID: CVE-2019-16694 State: PUBLISHED Published: 2019-09-22T14:58:36 Last Updated: 2024-08-05T01:17:41.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2738
CVE ID: CVE-2019-16695 State: PUBLISHED Published: 2019-09-22T14:58:23 Last Updated: 2024-08-05T01:17:41.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2738
CVE ID: CVE-2019-16696 State: PUBLISHED Published: 2019-09-22T14:58:15 Last Updated: 2024-08-05T01:17:41.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2738
CVE ID: CVE-2019-16698 State: PUBLISHED Published: 2019-10-16T18:45:44 Last Updated: 2024-08-05T01:17:41.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.typo3.org/extension/direct_mail - https://typo3.org/security/advisory/typo3-ext-sa-2019-016/
CVE ID: CVE-2019-16699 State: PUBLISHED Published: 2019-10-16T18:40:40 Last Updated: 2024-08-05T01:17:41.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.typo3.org/extension/sr_freecap - https://typo3.org/security/advisory/typo3-ext-sa-2019-018/
CVE ID: CVE-2019-16700 State: PUBLISHED Published: 2019-10-16T18:37:38 Last Updated: 2024-08-05T01:17:41.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slub_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. For versions 1.2.2 and below, this results in Remote Code Execution. In versions later than 1.2.2, this can result in Denial of Service, since the web space can be filled up with arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.typo3.org/extension/slub_events - https://typo3.org/security/advisory/typo3-ext-sa-2019-017/
CVE ID: CVE-2019-16701 State: PUBLISHED Published: 2019-09-25T15:45:56 Last Updated: 2024-08-05T01:17:41.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing shell metacharacters in a parameter value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pfsense/pfsense/commits/master - http://packetstormsecurity.com/files/154587/pfSense-2.3.4-2.4.4-p3-Remote-Code-Injection.html - https://hackernews.blog/pfsense-2-3-4-2-4-4-p3-remote-code-injection/#more
CVE ID: CVE-2019-16702 State: PUBLISHED Published: 2019-09-23T02:22:19 Last Updated: 2024-08-05T01:17:41.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /LoginAdmin URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/purpl3-f0x/exploit-dev/blob/master/nojs_integard.py - http://packetstormsecurity.com/files/155578/Integard-Pro-NoJs-2.2.0.9026-Remote-Buffer-Overflow.html
CVE ID: CVE-2019-16703 State: PUBLISHED Published: 2019-09-23T03:44:15 Last Updated: 2024-08-05T01:17:41.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/infolist_add.php in PHPMyWind 5.6 has stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gaozhifeng/PHPMyWind/issues/7
CVE ID: CVE-2019-16704 State: PUBLISHED Published: 2019-09-23T03:44:27 Last Updated: 2024-08-05T01:17:41.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lolipop1234/XXD/issues/1
CVE ID: CVE-2019-16705 State: PUBLISHED Published: 2019-09-23T04:04:37 Last Updated: 2024-08-05T01:17:41.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/178
CVE ID: CVE-2019-16706 State: PUBLISHED Published: 2019-09-23T11:00:44 Last Updated: 2024-08-05T01:17:41.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wangyifani/kkcms/issues/1
CVE ID: CVE-2019-16707 State: PUBLISHED Published: 2019-09-23T11:46:29 Last Updated: 2024-08-05T01:17:41.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/butterflyhack/hunspell-crash - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD4AJ4M74VT3I6L37E4P5DNYZYBZIOVM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNTSVWI4SWBQL6XMXNGEH7EAQ45WN63G/ - https://lists.fedoraproject.org/archives/list/packa
0lists.fedoraproject.org/message/LNTSVWI4SWBQL6XMXNGEH7EAQ45WN63G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2YOYFI36IWKABNGFTWXCH7TTGAFODH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24NTBHK2QNYKSBMJI34WEU5MHS3H2FAI/
CVE ID: CVE-2019-16708 State: PUBLISHED Published: 2019-09-23T11:46:19 Last Updated: 2024-08-05T01:17:41.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1531 - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-16709 State: PUBLISHED Published: 2019-09-23T11:46:10 Last Updated: 2024-08-05T01:17:41.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1531 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00046.html - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/201
opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
CVE ID: CVE-2019-16710 State: PUBLISHED Published: 2019-09-23T11:46:01 Last Updated: 2024-08-05T01:17:41.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1528 - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-16711 State: PUBLISHED Published: 2019-09-23T11:45:51 Last Updated: 2024-08-05T01:17:41.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1542 - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-16712 State: PUBLISHED Published: 2019-09-23T11:45:42 Last Updated: 2024-08-05T01:17:41.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1557 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
CVE ID: CVE-2019-16713 State: PUBLISHED Published: 2019-09-23T11:45:30 Last Updated: 2024-08-05T01:17:41.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1558 - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-16714 State: PUBLISHED Published: 2019-09-23T11:45:20 Last Updated: 2024-08-05T01:17:41.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/7d0a06586b2686ba80c4a2da5f91cb10ffbea736 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14 - http://www.openwall.com/lists/oss-security/2019/09/24/2 - http://www.openwall.com/lists/oss-security/2019/09/25/1 - https:
tp://www.openwall.com/lists/oss-security/2019/09/24/2 - http://www.openwall.com/lists/oss-security/2019/09/25/1 - https://support.f5.com/csp/article/K48351130?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4157-2/ - https://security.netapp.com/advisory/ntap-20191031-0005/
CVE ID: CVE-2019-16716 State: PUBLISHED Published: 2020-01-06T19:43:40 Last Updated: 2024-08-05T01:17:41.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.2 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Jan/7 - http://seclists.org/fulldisclosure/2020/Jan/7 - http://packetstormsecurity.com/files/155813/OX-App-Suite-7.10.2-Cross-Site-Scripting-Improper-Access-Control.html
CVE ID: CVE-2019-16717 State: PUBLISHED Published: 2020-01-06T19:35:53 Last Updated: 2024-08-05T01:17:41.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.2 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-xchange.com/ - http://seclists.org/fulldisclosure/2020/Jan/7 - http://seclists.org/fulldisclosure/2020/Jan/7 - http://packetstormsecurity.com/files/155813/OX-App-Suite-7.10.2-Cross-Site-Scripting-Improper-Access-Control.html
CVE ID: CVE-2019-16718 State: PUBLISHED Published: 2019-09-23T13:18:28 Last Updated: 2024-08-05T01:17:41.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/commit/5411543a310a470b1257fb93273cdd6e8dfcb3af - https://github.com/rad
erences: - https://github.com/radareorg/radare2/commit/5411543a310a470b1257fb93273cdd6e8dfcb3af - https://github.com/radareorg/radare2/commit/dd739f5a45b3af3d1f65f00fe19af1dbfec7aea7 - https://github.com/radareorg/radare2/compare/3.8.0...3.9.0
CVE ID: CVE-2019-16719 State: PUBLISHED Published: 2019-09-23T13:35:57 Last Updated: 2024-08-05T01:17:41.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/344/
CVE ID: CVE-2019-16720 State: PUBLISHED Published: 2019-09-23T13:35:17 Last Updated: 2024-08-05T01:17:41.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading a .htaccess or .php5 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/333/
CVE ID: CVE-2019-16721 State: PUBLISHED Published: 2019-09-23T13:35:44 Last Updated: 2024-08-05T01:17:41.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/337/
CVE ID: CVE-2019-16722 State: PUBLISHED Published: 2019-09-23T13:35:32 Last Updated: 2024-08-05T01:17:41.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an str_ireplace operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/348/
CVE ID: CVE-2019-16723 State: PUBLISHED Published: 2019-09-23T14:24:47 Last Updated: 2024-08-05T01:24:47.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph) via a direct graph_json.php request with a modified local_graph_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/2964 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSCUUCKSYVZLN3PQE7NU76AFWUGT3E2D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZO3ROHHPKLH2JRW
3E2D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZO3ROHHPKLH2JRW7ES5FYSQTWIPNVLQB/ - https://seclists.org/bugtraq/2020/Jan/25 - https://www.debian.org/security/2020/dsa-4604 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - https://security.gentoo.org/glsa/202003-40 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2019-16724 State: PUBLISHED Published: 2019-09-24T20:21:32 Last Updated: 2024-08-05T01:24:47.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154586/File-Sharing-Wizard-1.5.0-SEH-Buffer-Overflow.html - https://www.exploit-db.com/exploits/47412 - http://packetstormsecurity.com/files/154777/File-Sharing-Wizard-1.5.0-POST-SEH-Overflow
.exploit-db.com/exploits/47412 - http://packetstormsecurity.com/files/154777/File-Sharing-Wizard-1.5.0-POST-SEH-Overflow.html
CVE ID: CVE-2019-16725 State: PUBLISHED Published: 2019-09-24T20:06:37 Last Updated: 2024-08-05T01:24:47.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/791-20190901-core-xss-in-logo-parameter-of-default-templates.html
CVE ID: CVE-2019-16728 State: PUBLISHED Published: 2019-09-24T04:02:09 Last Updated: 2024-08-05T01:24:47.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari. Additional Analyst Notes: - CVE Program Container: References: - https://research.securitum.com/dompurify-bypass-using-mxss/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00029.html
CVE ID: CVE-2019-16729 State: PUBLISHED Published: 2019-09-24T04:07:28 Last Updated: 2024-08-05T01:24:47.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1150510#c1 - https://tracker.debian.org/news/1066790/accepted-pam-python-107-1-source-amd64-all-into-unstable/ - https://sourceforge.net/p/pam-python/code/ci/0247ab687b4347cc52859ca461fb0126dd7e2ebe/ - https://www.debian.org/security/2019/dsa-4555 - ht
.net/p/pam-python/code/ci/0247ab687b4347cc52859ca461fb0126dd7e2ebe/ - https://www.debian.org/security/2019/dsa-4555 - https://lists.debian.org/debian-lts-announce/2019/11/msg00020.html - https://usn.ubuntu.com/4552-1/ - https://usn.ubuntu.com/4552-2/
CVE ID: CVE-2019-16730 State: PUBLISHED Published: 2019-12-13T20:36:18 Last Updated: 2024-08-05T01:24:47.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityevaluators.com/research/ - https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3
CVE ID: CVE-2019-16731 State: PUBLISHED Published: 2019-12-13T20:25:15 Last Updated: 2024-08-05T01:24:47.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3
CVE ID: CVE-2019-16732 State: PUBLISHED Published: 2019-12-13T20:08:07 Last Updated: 2024-08-05T01:24:47.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3
CVE ID: CVE-2019-16733 State: PUBLISHED Published: 2019-12-13T20:32:53 Last Updated: 2024-08-05T01:24:47.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3