Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13561 State: PUBLISHED Published: 2019-07-11T14:59:14 Last Updated: 2024-08-04T23:57:39.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf - https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827
55/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf - https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/commandinjection.txt
CVE ID: CVE-2019-13562 State: PUBLISHED Published: 2019-07-11T14:59:27 Last Updated: 2024-08-04T23:57:39.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_response.cgi ping6_ipaddr parameter, and the /www/apply_sec.cgi html_response_return_page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf - ht
ing-to-rce/ - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf - https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/crosssitescripting.txt
CVE ID: CVE-2019-13563 State: PUBLISHED Published: 2019-07-11T14:59:38 Last Updated: 2024-08-04T23:57:39.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf - https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/csrf.txt
CVE ID: CVE-2019-13564 State: PUBLISHED Published: 2019-07-11T17:14:29 Last Updated: 2024-08-04T23:57:39.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Ping Identity Agentless Integration Kit before 1.5. Additional Analyst Notes: - CVE Program Container: References: - https://support.pingidentity.com/s/document-item?bundleId=integrations&topicId=Integration_Kits%2FAgentless%2FagentlessIK_c_changelog.html - https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190305-01_Ping_Identity_Agentless_Integration_Kit_Reflected_XSS - http://seclists.org/fulldisclosure/2019/Aug/33 - http://packetstormsecurity.com/files/154274/Ping-Identity-Agentless-Integra
://seclists.org/fulldisclosure/2019/Aug/33 - http://packetstormsecurity.com/files/154274/Ping-Identity-Agentless-Integration-Kit-Cross-Site-Scripting.html
CVE ID: CVE-2019-13565 State: PUBLISHED Published: 2019-07-26T12:30:58 Last Updated: 2024-08-04T23:57:39.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words
on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4078-1/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00024.html - https://usn.ubuntu.com/4078-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://www.oracle
58.html - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://support.apple.com/kb/HT210788 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.openldap.org/lists/openldap-an
eper.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.openldap.org/lists/openldap-announce/201907/msg00001.html - https://www.openldap.org/its/index.cgi/?findid=9052 - https://support.f5.com/csp/article/K98008862?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-13566 State: PUBLISHED Published: 2019-11-22T20:29:13 Last Updated: 2024-08-04T23:57:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ros/ros_comm/issues/1735 - https://github.com/ros/ros_comm/pull/1771 - https://github.com/ros/ros_comm/issues/1752
CVE ID: CVE-2019-13567 State: PUBLISHED Published: 2019-07-12T03:00:51 Last Updated: 2024-08-04T23:57:39.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a maliciously crafted launch URL. NOTE: ZoomOpener is removed by the Apple Malware Removal Tool (MRT) if this tool is enabled and has the 2019-07-10 MRTConfigData. Additional Analyst Notes: - CVE Program Container: References: - https://twitt
led and has the 2019-07-10 MRTConfigData. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/riskybusiness/status/1149125147019767814 - https://twitter.com/JLLeitschuh/status/1149420685405708295 - https://twitter.com/wcbowling/status/1149457231504498689 - https://twitter.com/JLLeitschuh/status/1149422543658520578 - https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS - https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b - https://twitter.com/wcbowling/status/1166998107667619841
CVE ID: CVE-2019-13568 State: PUBLISHED Published: 2019-07-31T14:17:12 Last Updated: 2024-08-04T23:57:39.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://cimg.eu/ - https://github.com/dtschump/CImg - https://github.com/dtschump/CImg/commit/ac8003393569aba51048c9d67e1491559877b1d1
CVE ID: CVE-2019-13569 State: PUBLISHED Published: 2019-07-19T22:26:55 Last Updated: 2024-08-04T23:57:39.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/email-subscribers/#developers - https://wpvulndb.com/vulnerabilities/9467
CVE ID: CVE-2019-13570 State: PUBLISHED Published: 2019-07-23T16:16:47 Last Updated: 2024-08-04T23:57:39.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://ajdg.solutions/2019/07/11/adrotate-pro-5-3-important-update-for-security-and-ads-txt/ - https://wpvulndb.com/vulnerabilities/9475
CVE ID: CVE-2019-13571 State: PUBLISHED Published: 2019-07-29T17:12:03 Last Updated: 2024-08-04T23:57:39.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/advanced-cf7-db/#developers - https://wpvulndb.com/vulnerabilities/9479 - https://fortiguard.com/zeroday/FG-VD-19-093 - https://plugins.trac.wordpress.org/changeset/2123623 - https://github.c
- https://fortiguard.com/zeroday/FG-VD-19-093 - https://plugins.trac.wordpress.org/changeset/2123623 - https://github.com/beerpwn/ctf/blob/master/CVE/CVE-2019-13571/report.pdf - https://github.com/beerpwn/ctf/tree/master/CVE/CVE-2019-13571
CVE ID: CVE-2019-13572 State: PUBLISHED Published: 2019-08-01T14:35:57 Last Updated: 2024-08-04T23:57:39.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9476 - https://plugins.trac.wordpress.org/changeset/2126559/blog2social/trunk/includes/Ajax/Get.php - https://fortiguard.com/zeroday/FG-VD-19-094
CVE ID: CVE-2019-13573 State: PUBLISHED Published: 2019-07-17T15:55:37 Last Updated: 2024-08-04T23:57:39.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers - https://plugins.trac.wordpress.org/changeset/2121566/fv-wordpress-flowplayer/trunk/models/db.php - https://fortiguard.com/zeroday/FG-VD-19-09
wordpress.org/changeset/2121566/fv-wordpress-flowplayer/trunk/models/db.php - https://fortiguard.com/zeroday/FG-VD-19-097 - https://wpvulndb.com/vulnerabilities/9451
CVE ID: CVE-2019-13574 State: PUBLISHED Published: 2019-07-12T02:31:25 Last Updated: 2024-08-04T23:57:39.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/minimagick/minimagick/releases/tag/v4.9.4 - https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851 - https://github.com/minimagick/minimagick/compare/d484786...293f9bb - https
it/4cd5081e58810d3394d27a67219e8e4e0445d851 - https://github.com/minimagick/minimagick/compare/d484786...293f9bb - https://benjamin-bouchet.com/blog/vulnerabilite-dans-la-gem-mini_magick-version-4-9-4/ - https://www.debian.org/security/2019/dsa-4481 - https://seclists.org/bugtraq/2019/Jul/20 - https://lists.debian.org/debian-lts-announce/2019/10/msg00007.html
CVE ID: CVE-2019-13575 State: PUBLISHED Published: 2019-07-18T14:51:50 Last Updated: 2024-08-04T23:57:39.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/everest-forms/#developers - https://github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9#diff-bb2b21ef7774df8687ff02b0284505c6 - https:/
/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9#diff-bb2b21ef7774df8687ff02b0284505c6 - https://wpvulndb.com/vulnerabilities/9466 - https://fortiguard.com/zeroday/FG-VD-19-096 - https://github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9
CVE ID: CVE-2019-13577 State: PUBLISHED Published: 2019-07-17T19:08:15 Last Updated: 2024-08-04T23:57:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string to the CE Remote feature listening on Port 987. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org - http://seclists.org/fulldisclosure/2019/Jul/17 - http://packetstormsecurity.com/files/153675/MAPLE-Computer-WBT-SNMP-Administrator-2.0.195.15-Buffer-Overflow.html - https://seclists.org/bugtraq/2019/Jul/29
CVE ID: CVE-2019-13578 State: PUBLISHED Published: 2019-08-15T15:36:43 Last Updated: 2024-08-04T23:57:39.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/impress-org/give/commit/d91f4c6dcc92aeb826b060cb2feadd56885f4cea - https://github.com/impress-org/give/commit/97b9b5fae2d10742ee42fe00092729fa7da3cb32 - https://wpvul
cb2feadd56885f4cea - https://github.com/impress-org/give/commit/97b9b5fae2d10742ee42fe00092729fa7da3cb32 - https://wpvulndb.com/vulnerabilities/9504 - https://github.com/impress-org/give/commit/894937d7927eab0c98457656cbd6fb414b3a6fbf - https://fortiguard.com/zeroday/FG-VD-19-098
CVE ID: CVE-2019-13581 State: PUBLISHED Published: 2019-11-15T20:26:41 Last Updated: 2024-08-04T23:57:39.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitrary code via malformed Wi-Fi packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.marvell.com/documents/ioaj5dntk2ubykssa78s/ - https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-m
marvell.com/documents/ioaj5dntk2ubykssa78s/ - https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s/
CVE ID: CVE-2019-13582 State: PUBLISHED Published: 2019-11-15T20:28:05 Last Updated: 2024-08-04T23:57:39.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A stack overflow could lead to denial of service or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.marvell.com/documents/ioaj5dntk2ubykssa78s/
CVE ID: CVE-2019-13584 State: PUBLISHED Published: 2019-07-17T18:58:56 Last Updated: 2024-08-04T23:57:39.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 allows Directory Traversal via a forged HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jul/23 - http://packetstormsecurity.com/files/153672/FANUC-Robotics-Virtual-Robot-Controller-8.23-Path-Traversal.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-025.txt
CVE ID: CVE-2019-13585 State: PUBLISHED Published: 2019-07-17T18:51:35 Last Updated: 2024-08-04T23:57:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 has a Buffer Overflow via a forged HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jul/24 - http://packetstormsecurity.com/files/153671/FANUC-Robotics-Virtual-Robot-Controller-8.23-Buffer-Overflow.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-024.txt
CVE ID: CVE-2019-13588 State: PUBLISHED Published: 2019-07-26T21:01:43 Last Updated: 2024-08-04T23:57:39.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/wikindx/code/commit_browser - https://sourceforge.net/p/wikindx/code/2794/ - https://sourceforge.net/p/wikindx/code/2801/tree//wikindx/trunk/CHANGELOG.txt?diff=51060a0c271846770c56c75a:2800
CVE ID: CVE-2019-13589 State: PUBLISHED Published: 2019-07-14T15:03:37 Last Updated: 2024-08-04T23:57:39.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubygems/rubygems.org/issues/2051 - https://rubygems.org/gems/paranoid2/versions - http://www.securityfocus.com/bid/109281 - https://snyk.io/vuln/SNYK-RUBY-PARANOID2-451600
CVE ID: CVE-2019-13590 State: PUBLISHED Published: 2019-07-14T00:00:00 Last Updated: 2024-08-04T23:57:39.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid pointer, leading to a NULL pointer dereference on lsx_readbuf in formats_i.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/sox/bugs/325/ - https://lists.debian.org/debian-lts-announce/
Program Container: References: - https://sourceforge.net/p/sox/bugs/325/ - https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html
CVE ID: CVE-2019-13594 State: PUBLISHED Published: 2019-07-14T16:19:21 Last Updated: 2024-08-04T23:57:39.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mirumee/saleor/releases/tag/2.8.0
CVE ID: CVE-2019-13597 State: PUBLISHED Published: 2019-07-14T17:05:35 Last Updated: 2024-08-04T23:57:39.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the _execute() function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47110 - https://pentest.com.tr/exploits/Sahi-Pro-v8-x-Unauthenticated-RCE-Exploit-Python.html
CVE ID: CVE-2019-13598 State: PUBLISHED Published: 2019-07-14T17:22:04 Last Updated: 2024-08-04T23:57:39.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed" code block is skipped. Additional Analyst Notes: - CVE Program Container: References: - https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/
CVE ID: CVE-2019-13599 State: PUBLISHED Published: 2019-08-21T18:51:45 Last Updated: 2024-08-04T23:57:39.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a username is valid by comparing response times. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154164/CentOS-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html - http://packetstormsecurity.com/files/154164/CentOS-WebPanel.com-CentOS-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html - http://packetstormsecurity.com/files/154164/CentOS-WebPanel.com-Contro
l-Web-Panel-CWP-0.9.8.848-User-Enumeration.html - http://packetstormsecurity.com/files/154164/CentOS-WebPanel.com-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html
CVE ID: CVE-2019-13602 State: PUBLISHED Published: 2019-07-14T21:00:27 Last Updated: 2024-08-04T23:57:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=8e8e0d72447f8378244f5b4a3dcde036dbeb1491 - https://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=b2b157076d9e94df34502dd8df0787deb940e938 - ht
f5b4a3dcde036dbeb1491 - https://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=b2b157076d9e94df34502dd8df0787deb940e938 - http://www.securityfocus.com/bid/109158 - https://usn.ubuntu.com/4074-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html - https://security.gentoo.org/glsa/201909-02 - http://lists.opensuse.org/opensuse-security-announce/2020-04/ms
0081.html - https://security.gentoo.org/glsa/201909-02 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html