Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog - https://github.com/rsyslog/rsyslog/pull/3884 - http://lists.opensus
ithub.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog - https://github.com/rsyslog/rsyslog/pull/3884 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00032.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6SUQE25RD37CD24BHKUWMG27U5RQ2FU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPNCHI7X2IEXRH6RYD6IDPR4PLB5RPC7/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00030.html
CVE ID: CVE-2019-17042 State: PUBLISHED Published: 2019-10-07T15:34:04 Last Updated: 2024-08-05T01:24:48.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent c
at detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog - https://github.com/rsyslog/rsyslog/pull/3883 - http://lists.opensuse.org/ope
/rsyslog/rsyslog/blob/v8-stable/ChangeLog - https://github.com/rsyslog/rsyslog/pull/3883 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00032.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6SUQE25RD37CD24BHKUWMG27U5RQ2FU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPNCHI7X2IEXRH6RYD6IDPR4PLB5RPC7/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00030.html
CVE ID: CVE-2019-17043 State: PUBLISHED Published: 2019-10-14T16:51:28 Last Updated: 2024-08-05T01:24:48.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/whira_wr - https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation
CVE ID: CVE-2019-17044 State: PUBLISHED Published: 2019-10-14T16:47:06 Last Updated: 2024-08-05T01:33:15.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during execution. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/whira_wr - https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation - https://docs.bmc.com/docs/PATROLAgent/11302/
github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation - https://docs.bmc.com/docs/PATROLAgent/11302/notification-of-action-required-by-patrol-agent-users-to-apply-the-security-patch-898411558.html
CVE ID: CVE-2019-17045 State: PUBLISHED Published: 2019-09-30T14:04:48 Last Updated: 2024-08-05T01:33:16.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab. Additional Analyst Notes: - CVE Program Container: References: - https://syhack.wordpress.com/2019/09/29/ilch-content-management-system-v-2-1-22-vulnerability-disclosure/
CVE ID: CVE-2019-17046 State: PUBLISHED Published: 2019-09-30T14:04:57 Last Updated: 2024-08-05T01:33:15.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page. Additional Analyst Notes: - CVE Program Container: References: - https://syhack.wordpress.com/2019/09/29/ilch-content-management-system-v-2-1-22-insecure-file-upload-lfi-remote-code-execution-critical-vulnerability-disclosure/
CVE ID: CVE-2019-17049 State: PUBLISHED Published: 2019-09-30T18:37:21 Last Updated: 2024-08-05T01:33:16.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account. Additional Analyst Notes: - CVE Program Container: References: - https://community.netgear.com/t5/Hardware-VPN-Firewalls-and/Successful-hack-of-our-SRX5308/m-p/1805846
CVE ID: CVE-2019-17050 State: PUBLISHED Published: 2019-09-30T18:51:51 Last Updated: 2024-08-05T01:33:15.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-control-group/voyager/issues/4322
CVE ID: CVE-2019-17051 State: PUBLISHED Published: 2019-09-30T19:05:56 Last Updated: 2024-08-05T01:33:15.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file. Additional Analyst Notes: - CVE Program Container: References: - https://evernote.com/security/updates#MACOSNOTE-28956 - https://www.youtube.com/watch?v=OG2tKlZX5bg
CVE ID: CVE-2019-17052 State: PUBLISHED Published: 2019-10-01T13:11:56 Last Updated: 2024-08-05T01:33:15.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0614e2b73768b502fc32a75349823356d98aae2c - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b - https://
it.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4185-1/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - https://usn.ubuntu.com/4185-2/ - https://usn.ubuntu.com/4186-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html -
an.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=2c675dab816278a1724c1e93b384c2f05a11cb31
CVE ID: CVE-2019-17053 State: PUBLISHED Published: 2019-10-01T13:11:31 Last Updated: 2024-08-05T01:33:15.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e69dbd4619e7674c1679cba49afd9dd9ac347ee
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e69dbd4619e7674c1679cba49afd9dd9ac347eef - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4185-1/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - https://usn.ubuntu.com/4185-2/ - https://usn.ubuntu.com/4186-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg0
//lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-17054 State: PUBLISHED Published: 2019-10-01T13:11:06 Last Updated: 2024-08-05T01:33:15.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cc03e8aa36c51f3b26a0d21a3c4ce2809c842ac - https:
/git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cc03e8aa36c51f3b26a0d21a3c4ce2809c842ac - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4185-1/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - https://usn.ubuntu.com/4185-2/ - https://usn.ubuntu.com/4186-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-17055 State: PUBLISHED Published: 2019-10-01T13:10:41 Last Updated: 2024-08-05T01:33:16.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80 -
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4185-1/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html - https://usn.ubuntu.com/4185-2/ - https://
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html - https://usn.ubuntu.com/4185-2/ - https://usn.ubuntu.com/4186-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://access.redhat.com/errata/RHSA-2020:0790
CVE ID: CVE-2019-17056 State: PUBLISHED Published: 2019-10-01T13:10:14 Last Updated: 2024-08-05T01:33:15.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3a359798b176183ef09efb7a3dc59abad1cc7104 - https://
it.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3a359798b176183ef09efb7a3dc59abad1cc7104 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4185-1/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - https://usn.ubuntu.com/4185-2/ - https://usn.ubunt
/ - https://usn.ubuntu.com/4184-1/ - https://usn.ubuntu.com/4186-1/ - https://usn.ubuntu.com/4185-2/ - https://usn.ubuntu.com/4186-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-17057 State: PUBLISHED Published: 2019-11-18T15:18:28 Last Updated: 2024-08-05T01:33:16.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Footy Tipping Software AFL Web Edition 2019 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.footy.com.au/updates.html
CVE ID: CVE-2019-17058 State: PUBLISHED Published: 2019-11-18T15:19:54 Last Updated: 2024-08-05T01:33:15.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Footy Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote code execution because a whitelist can be bypassed by an Administrator who uploads a crafted upload.dat file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.contentsecurity.com.au/footy-tipping-software-whitelisting-bypass
CVE ID: CVE-2019-17059 State: PUBLISHED Published: 2019-10-11T16:45:57 Last Updated: 2024-08-05T01:33:16.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/products/cyberoamos/ - https://community.sophos.com/kb/en-us/134732 - https://thebestvpn.com/cyberoam-preauth-rce/
CVE ID: CVE-2019-17060 State: PUBLISHED Published: 2020-02-10T20:11:18 Last Updated: 2024-08-05T01:33:16.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame. Additional Analyst Notes: - CVE Program Contain
achine, or trigger a buffer overflow via a crafted BLE Link Layer frame. Additional Analyst Notes: - CVE Program Container: References: - https://www.nxp.com/products/wireless/bluetooth-low-energy:BLUETOOTH-LOW-ENERGY-BLE - https://asset-group.github.io/disclosures/sweyntooth/
CVE ID: CVE-2019-17061 State: PUBLISHED Published: 2020-02-10T20:17:23 Last Updated: 2024-08-05T01:33:16.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/products/ble-blue
Layer frame. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/products/ble-bluetooth - https://asset-group.github.io/disclosures/sweyntooth/ - https://community.cypress.com/thread/53680
CVE ID: CVE-2019-17062 State: PUBLISHED Published: 2019-11-05T15:24:34 Last Updated: 2024-08-05T01:33:15.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, OXID eShop Professional Edition Version 4.9.x-4.10.x and OXID eShop Community Edition Version: 4.9.x-4.10.x. By using a specially crafted URL, users with administrative rights could unintentionally grant unauthorized users access to the admin panel via session fixation. Additional Analyst Notes: - CVE Program Container: References: - https://oxidforge.org/en/security-bulletin-2019-002.html - https:
Analyst Notes: - CVE Program Container: References: - https://oxidforge.org/en/security-bulletin-2019-002.html - https://oxidforge.org/en/security-bulletin-2019-002.html
CVE ID: CVE-2019-17063 State: PUBLISHED Published: 2019-10-01T15:14:38 Last Updated: 2024-08-05T01:33:16.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Snowtide PDFxStream before 3.7.1 (for Java), a crafted PDF file can trigger an extremely long running computation because of page-tree mishandling. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.snowtide.com/CHANGELOG.html
CVE ID: CVE-2019-17064 State: PUBLISHED Published: 2019-10-01T15:22:44 Last Updated: 2024-08-05T01:33:17.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41890 - http://packetstormsecurity.com/files/154713/Xpdf-4.02-NULL-Pointer-Dereference.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5PYIAP2RXTYD4Y4FYFIK5K644LMDJWX/ - https://lists.fedoraproject.org/archives/list/package-an
s.fedoraproject.org/message/D5PYIAP2RXTYD4Y4FYFIK5K644LMDJWX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMDB2CGUYDW2RENE2I2TT6QNFEEI2CNF/
CVE ID: CVE-2019-17066 State: PUBLISHED Published: 2020-05-18T21:53:20 Last Updated: 2024-08-05T01:33:17.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives (HKCU) when starting an application with elevated rights. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-acquire-admin-privileges-by-hijacking-certain-user-registry-entries
CVE ID: CVE-2019-17067 State: PUBLISHED Published: 2019-10-01T16:55:36 Last Updated: 2024-08-05T01:33:16.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection. Additional Analyst Notes: - CVE Program Container: References: - https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html - https://security.netapp.com/advisory/ntap-20191127-0003/
CVE ID: CVE-2019-17068 State: PUBLISHED Published: 2019-10-01T16:55:28 Last Updated: 2024-08-05T01:33:16.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content. Additional Analyst Notes: - CVE Program Container: References: - https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html - https://secur
ounce/2019-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html - https://security.netapp.com/advisory/ntap-20191127-0003/
CVE ID: CVE-2019-17069 State: PUBLISHED Published: 2019-10-01T00:00:00 Last Updated: 2024-08-05T01:33:16.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message. Additional Analyst Notes: - CVE Program Container: References: - https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html - https://secu
nounce/2019-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html - https://security.netapp.com/advisory/ntap-20191127-0003/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
CVE ID: CVE-2019-17070 State: PUBLISHED Published: 2019-10-10T10:51:18 Last Updated: 2024-08-05T01:33:16.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/liquid-speech-balloon/#developers - https://gist.github.com/rezaduty/18afedba24bb1e5835010bd2de67cece