Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-1010182 State: PUBLISHED Published: 2019-07-25T13:02:57 Last Updated: 2024-08-05T03:07:18.511Z Vendors: yaml-rust Products: yaml-rust Problem Types: Uncontrolled Recursion Description: yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::load_from_str function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chyh1990/yaml-rust/pull/109
CVE ID: CVE-2019-1010183 State: PUBLISHED Published: 2019-07-25T12:50:56 Last Updated: 2024-08-05T03:07:18.455Z Vendors: serde Products: serde_yaml Problem Types: Uncontrolled Recursion Description: serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all deserialization functions). The attack vector is: Parsing a malicious YAML file. The fixed version is: 0.8.4 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dtolnay/serde-yaml/pull/105
CVE ID: CVE-2019-1010189 State: PUBLISHED Published: 2019-07-24T13:16:51 Last Updated: 2024-08-05T03:07:18.428Z Vendors: mgetty Products: mgetty Problem Types: Infinite Loop Description: mgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does never terminates. The component is: g3/g32pbm.c. The attack vector is: Local, the user should open a specially crafted file. The fixed version is: 1.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YH7KTF6IB4LZURQHCOICNVE6YDAIHV62/
CVE ID: CVE-2019-1010190 State: PUBLISHED Published: 2019-07-24T12:11:58 Last Updated: 2024-08-05T03:07:18.312Z Vendors: mgetty Products: mgetty Problem Types: out-of-bounds read Description: mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan() in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00016.html
CVE ID: CVE-2019-1010191 State: PUBLISHED Published: 2019-07-24T13:10:33 Last Updated: 2024-08-05T03:07:18.470Z Vendors: marginalia Products: marginalia Problem Types: SQL Injection Description: marginalia < 1.6 is affected by: SQL Injection. The impact is: The impact is a injection of any SQL queries when a user controller argument is added as a component. The component is: Affects users that add a component that is user controller, for instance a parameter or a header. The attack vector is: Hacker inputs a SQL to a vulnerable vector(header, http parameter, etc). The fixed version is: 1.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/basecamp/marginali
version is: 1.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/basecamp/marginalia/pull/73/
CVE ID: CVE-2019-1010193 State: PUBLISHED Published: 2019-07-24T12:50:16 Last Updated: 2024-08-05T03:07:18.493Z Vendors: hisiphp Products: hisiphp Problem Types: Cross Site Scripting (XSS) Description: hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hisiphp/hisiphp/issues/3
CVE ID: CVE-2019-1010199 State: PUBLISHED Published: 2019-07-23T17:17:14 Last Updated: 2024-08-05T03:07:18.472Z Vendors: ServiceStack Products: ServiceStack Framework Problem Types: Cross Site Scripting (XSS) Description: ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side validation and If Browser encoding is bypassed, the victim is affected when opening a crafted URL. The fixed version is: 5.2.0. Additional Analyst Notes: - CVE Program Container: Refe
ffected when opening a crafted URL. The fixed version is: 5.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ServiceStack/ServiceStack/commit/a0e0d7de20f5d1712f1793f925496def4383c610
CVE ID: CVE-2019-1010200 State: PUBLISHED Published: 2019-07-23T17:15:40 Last Updated: 2024-08-05T03:07:18.409Z Vendors: Voice Builder Products: Voice Builder Problem Types: CWE-78 Description: Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). The impact is: Remote code execution with the same privileges as the servers. The component is: Two web servers in the projects expose three vulnerable endpoints that can be accessed remotely. The endpoints are defined at: - /tts: https://github.com/google/voice-builder/blo
dpoints that can be accessed remotely. The endpoints are defined at: - /tts: https://github.com/google/voice-builder/blob/3a449a3e8d5100ff323161c89b897f6d5ccdb6f9/merlin_model_server/api.js#L34 - /alignment: https://github.com/google/voice-builder/blob/3a449a3e8d5100ff323161c89b897f6d5ccdb6f9/festival_model_server/api.js#L28 - /tts: https://github.com/google/voice-builder/blob/3a449a3e8d5100ff323161c89b897f6d5ccdb6f9/festival_model_server/api.js#L65. The attack vector is: Attacker sends a GET request to the vulnerable endpoint with a specially formatted query parameter. The fixed version is: After commit f6660e6d8f0d1d931359d591dbdec580fef36d36. Additional Analyst Notes: - CVE Program Contai
fixed version is: After commit f6660e6d8f0d1d931359d591dbdec580fef36d36. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/voice-builder/commit/c145d4604df67e6fc625992412eef0bf9a85e26b - https://github.com/google/voice-builder/commit/f6660e6d8f0d1d931359d591dbdec580fef36d36
CVE ID: CVE-2019-1010201 State: PUBLISHED Published: 2019-07-23T17:07:14 Last Updated: 2024-08-05T03:07:18.482Z Vendors: Jeesite Products: Jeesite Problem Types: SQL Injection Description: Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId() function in src/main/java/com.thinkgem.jeesite/modules/act/ActDao.java has SQL Injection vulnerability. The attack vector is: network connectivity,authenticated. The fixed version is: 4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinkgem/jeesite/blob/master/src/main/java/com/thinkgem/jeesite/modules/act/dao/ActDao
References: - https://github.com/thinkgem/jeesite/blob/master/src/main/java/com/thinkgem/jeesite/modules/act/dao/ActDao.java
CVE ID: CVE-2019-1010202 State: PUBLISHED Published: 2019-07-23T13:52:49 Last Updated: 2024-08-05T03:07:18.456Z Vendors: Jeesite Products: Jeesite Problem Types: XML External Entity (XXE) Description: Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information disclosure. The component is: convertToModel() function in src/main/java/com.thinkgem.jeesite/modules/act/service/ActProcessService.java. The attack vector is: network connectivity,authenticated,must upload a specially crafted xml file. The fixed version is: 4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinkgem/jeesite/blob/master/src/main/java/com/
Analyst Notes: - CVE Program Container: References: - https://github.com/thinkgem/jeesite/blob/master/src/main/java/com/thinkgem/jeesite/modules/act/service/ActProcessService.java
CVE ID: CVE-2019-1010204 State: PUBLISHED Published: 2019-07-23T13:39:02 Last Updated: 2024-08-05T03:07:18.485Z Vendors: GNU binutils Products: gold Problem Types: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read Description: GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.c
t be opened. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23765 - https://security.netapp.com/advisory/ntap-20190822-0001/ - https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-1010205 State: PUBLISHED Published: 2019-07-23T13:35:44 Last Updated: 2024-08-05T03:07:18.452Z Vendors: LINAGORA Products: hublin Problem Types: Directory Traversal Description: LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. The impact is: The vulnerability allows an attacker to access any file (with a fixed extension) on the server. The component is: A web-view renderer; details here: https://lgtm.com/projects/g/linagora/hublin/snapshot/af9f1ce253b4ee923ff8da8f9d908d02a8e95b7f/files/backend/webserver/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1. The attack vector is: Attacker se
server/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1. The attack vector is: Attacker sends a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://lgtm.com/projects/g/linagora/hublin/snapshot/af9f1ce253b4ee923ff8da8f9d908d02a8e95b7f/files/backend/webserver/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1
CVE ID: CVE-2019-1010206 State: PUBLISHED Published: 2019-07-23T13:30:18 Last Updated: 2024-08-05T03:07:18.395Z Vendors: OSS Products: Http Request (Apache Cordova Plugin) Problem Types: Missing SSL certificate validation Description: OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.java
CVE ID: CVE-2019-1010207 State: PUBLISHED Published: 2019-07-23T13:15:41 Last Updated: 2024-08-05T03:07:18.458Z Vendors: Genetechsolutions Products: Pie Register Problem Types: Cross Site Scripting (XSS) Description: Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is: Stealing of session cookies. The component is: File: Login. Parameters: interim-login, wp-lang, and supplied URL. The attack vector is: If a victim clicks a malicious link, the attacker can steal his/her account. The fixed version is: 3.0.16. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Oct/16 - https://packetstormsecurity.com/fil
s: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Oct/16 - https://packetstormsecurity.com/files/149665/wppieregister3015-xss.txt - https://0day.today/exploit/31255
CVE ID: CVE-2019-1010208 State: PUBLISHED Published: 2019-07-23T13:12:38 Last Updated: 2024-08-05T03:07:18.517Z Vendors: IDRIX, Truecrypt Products: Veracrypt, Truecrypt Problem Types: Buffer Overflow Description: IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver (veracrypt.sys). The attack vector is: Locally executed code, IOCTL request to driver. The fixed version is: 1.23-Hotfix-1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/veracrypt/VeraCrypt/commit/f30f9339c9a0b9bbcc6f5
nalyst Notes: - CVE Program Container: References: - https://github.com/veracrypt/VeraCrypt/commit/f30f9339c9a0b9bbcc6f5ad38804af39db1f479e
CVE ID: CVE-2019-1010209 State: PUBLISHED Published: 2019-07-23T13:09:11 Last Updated: 2024-08-05T03:07:18.513Z Vendors: GoUrl.io Products: GoURL Wordpress Plugin Problem Types: CWE-434 Description: GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=K2HElM_ZYu4 - https://gist.github.com/pouyadarabi/467d3167551fb0712d3264c72db092af - https://github.com/cryptoapi/Bitcoin-Wordpress-Plugin/blob/8aa17068d7ba31a05f66e0ab2bb
67d3167551fb0712d3264c72db092af - https://github.com/cryptoapi/Bitcoin-Wordpress-Plugin/blob/8aa17068d7ba31a05f66e0ab2bbb55efb0f60017/gourl.php#L5637
CVE ID: CVE-2019-1010218 State: PUBLISHED Published: 2019-07-22T17:30:25 Last Updated: 2024-08-05T03:07:18.468Z Vendors: Cherokee Webserver Products: Latest Cherokee Web server Problem Types: CWE-120 Description: Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet. Additional Analyst Notes: - CVE Program Container: References: - https://i.imgur.com/PWCCyir.png
CVE ID: CVE-2019-1010220 State: PUBLISHED Published: 2019-07-22T17:30:14 Last Updated: 2024-08-05T03:07:18.432Z Vendors: tcpdump.org Products: tcpdump Problem Types: CWE-126 Description: tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9.2/print-hncp.c - https://github.com/the-tcpdump-group/
: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9.2/print-hncp.c - https://github.com/the-tcpdump-group/tcpdump/blob/master/print-hncp.c - https://github.com/the-tcpdump-group/tcpdump/commits/master/print-hncp.c - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2
XHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2019-1010221 State: PUBLISHED Published: 2019-07-23T13:04:35 Last Updated: 2024-08-05T03:07:18.331Z Vendors: LineageOS Products: LineageOS Problem Types: Incorrect Access Control Description: LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by `adb root` can also be set in a normal adb shell session. The component is: adb shell (patches to fix this are at https://review.lineageos.org/c/LineageOS/android_system_core/+/234800, https://review.lineageos.org/c/LineageOS/android_device_lineage_sepolicy/+/234799). The attack vector is: When adb is enabled, and an attacker has physical access, `adb shell setprop service.adb.root 1`
The attack vector is: When adb is enabled, and an attacker has physical access, `adb shell setprop service.adb.root 1` allows restarting adb as root. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/zifnab06/e31ad63596b63a95e061bfe1f49ff0a7
CVE ID: CVE-2019-1010222 State: REJECTED Published: 2019-07-22T17:16:31 Last Updated: 2019-07-26T12:41:31 Description: No description available.
CVE ID: CVE-2019-1010223 State: REJECTED Published: 2019-07-22T17:12:35 Last Updated: 2019-07-26T12:44:18 Description: No description available.
CVE ID: CVE-2019-1010224 State: REJECTED Published: 2019-07-22T17:10:56 Last Updated: 2019-07-26T12:46:54 Description: No description available.
CVE ID: CVE-2019-1010228 State: PUBLISHED Published: 2019-07-22T16:50:02 Last Updated: 2024-08-05T03:07:18.458Z Vendors: OFFIS.de Products: DCMTK Problem Types: Buffer Overflow Description: OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code execution and confirmed Denial of Service. The component is: DcmRLEDecoder::decompress() (file dcrledec.h, line 122). The attack vector is: Many scenarios of DICOM file processing (e.g. DICOM to image conversion). The fixed version is: 3.6.4, after commit 40917614e. Additional Analyst Notes: - CVE Program Container: References: - https://support.dcmtk.org/redmine/issues/858 - https://lists.fedoraproject.org/archiv
E Program Container: References: - https://support.dcmtk.org/redmine/issues/858 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBKP2O24CTYIANEJTP4TVEPYEVSYV2RX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NQOAULR72EYJQ4HS6YGLK2S6YNEXY2ET/
CVE ID: CVE-2019-1010232 State: PUBLISHED Published: 2019-07-22T15:27:40 Last Updated: 2024-08-05T03:07:18.451Z Vendors: Juniper Products: juniper/libslax Problem Types: Buffer Overflow Description: Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018) is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601(funtion:slaxGetInput). The attack vector is: ./slaxproc --slax-to-xslt POC0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649175
CVE ID: CVE-2019-1010234 State: PUBLISHED Published: 2019-07-22T14:58:04 Last Updated: 2024-08-05T03:07:18.488Z Vendors: The Linux Foundation Products: ONOS Problem Types: Improper Input Validation Description: The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1OkMtrMgjjINsDUQwxpGxjbATB6hiwqyv/view?usp=sharing
CVE ID: CVE-2019-1010235 State: PUBLISHED Published: 2019-07-22T14:52:31 Last Updated: 2024-08-05T03:07:18.566Z Vendors: Frog CMS Products: Frog CMS Problem Types: Cross Site Scripting (XSS) Description: Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets. Additional Analyst Notes: - CVE Program Container: References: - https://somerandomshitwbu.blogspot.com/2019/01/stored-xss-in-frog-cms-open-source.html
CVE ID: CVE-2019-1010237 State: PUBLISHED Published: 2019-07-22T14:46:07 Last Updated: 2024-08-05T03:07:18.440Z Vendors: Ilias Products: Ilias Problem Types: CWE-79 Description: Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79 Type 2: Stored XSS (or Persistent). The impact is: Execute code in the victim's browser. The component is: Assessment / TestQuestionPool. The attack vector is: Cloze Test Text gap (attacker) / Corrections view (victim). The fixed version is: 5.3.12. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ILIAS-eLearning/ILIAS/commit/f1c2f906410bf35bb6bd45efff57d2e8da3b3825 - https://docu.ilias.de
nces: - https://github.com/ILIAS-eLearning/ILIAS/commit/f1c2f906410bf35bb6bd45efff57d2e8da3b3825 - https://docu.ilias.de/goto_docu_pg_116867_35.html - https://github.com/ILIAS-eLearning/ILIAS/commit/b9150b7194f8cfb1178ca3674a0b3c86b7cd92f5
CVE ID: CVE-2019-1010238 State: PUBLISHED Published: 2019-07-19T16:42:41 Last Updated: 2024-08-05T03:07:18.524Z Vendors: Gnome Products: Pango Problem Types: Buffer Overflow Description: Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4081-1/ - https://www.debian.org/security/2019/dsa-4496
s: - CVE Program Container: References: - https://usn.ubuntu.com/4081-1/ - https://www.debian.org/security/2019/dsa-4496 - https://seclists.org/bugtraq/2019/Aug/14 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D6HWAHXJ2ZXINYMANHPFDDCJFWUQ57M4/ - https://access.redhat.com/errata/RHSA-2019:2571 - https://access.redhat.com/errata/RHSA-2019:2582 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VFFF4FY7SCAYT3EKTYPGRN6BVKZTH7Y7/ - https://security.gentoo.org/glsa/201909-03 - https://access.redhat.com/errata/RHSA-2019:2594 - https://access.redhat.com/errata/RHBA-2019:2824 - https://access.redhat.c
ps://access.redhat.com/errata/RHSA-2019:2594 - https://access.redhat.com/errata/RHBA-2019:2824 - https://access.redhat.com/errata/RHSA-2019:3234 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://gitlab.gnome.org/GNOME/pango/-/commits/main/pango/pango-bidi-type.c - https://gitlab.gnome.org/GNOME/pango/-/issues/342
CVE ID: CVE-2019-1010239 State: PUBLISHED Published: 2019-07-19T16:41:01 Last Updated: 2024-08-05T03:07:18.337Z Vendors: DaveGamble/cJSON Products: cJSON Problem Types: Improper Check for Unusual or Exceptional Conditions Description: DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The fixed version is: 1.7.9 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/DaveGamble
Program Container: References: - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/DaveGamble/cJSON/issues/315 - https://github.com/DaveGamble/cJSON/commit/be749d7efa7c9021da746e685bd6dec79f9dd99b
CVE ID: CVE-2019-1010241 State: PUBLISHED Published: 2019-07-19T16:36:02 Last Updated: 2024-08-05T03:07:18.552Z Vendors: Jenkins Credentials Binding Plugin Products: Jenkins Problem Types: CWE-257 Description: Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack vector is: Attacker creates and executes a Jenkins job. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit?usp=sharing - http://www.se