Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-10096 State: REJECTED Published: 2020-07-09T13:37:22 Last Updated: 2020-07-09T13:37:22 Description: No description available.
CVE ID: CVE-2019-10097 State: PUBLISHED Published: 2019-09-26T14:21:24 Last Updated: 2024-08-04T22:10:09.873Z Vendors: n/a Products: Apache HTTP Server Problem Types: Stack buffer overflow and NULL pointer dereference Description: In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:4126 - https://lists.apac
alyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:4126 - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://httpd.apache.org/security/vulnerabilities_24.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://lists.apache.org/thread.html
/vulnerabilities_24.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.ap
rg%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2019-10098 State: PUBLISHED Published: 2019-09-25T16:39:23 Last Updated: 2024-08-04T22:10:09.765Z Vendors: n/a Products: Apache HTTP Server Problem Types: CWE-601 Description: In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/04/01/4 - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d2
2e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5d12ffc80685b0df1d6801e68000a7707dd694fe32e4f221de67c210%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://httpd.apache.org/security/vulnerabilities_24.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e810
4abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2019-10099 State: PUBLISHED Published: 2019-08-07T16:18:46 Last Updated: 2024-08-04T22:10:09.549Z Vendors: Apache Products: Apache Spark Problem Types: Unencrypted data Description: Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (controlled by spark.maxRemoteBlockSizeFetchToMem); in SparkR, using parallelize; in Pyspark, using broadcast and parallelize; and use of python udfs. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/c2a39c207421797f82823a8aff488dcd332d9544038307bf69a2ba9e%40
ontainer: References: - https://lists.apache.org/thread.html/c2a39c207421797f82823a8aff488dcd332d9544038307bf69a2ba9e%40%3Cuser.spark.apache.org%3E - https://lists.apache.org/thread.html/rabe1d47e2bf8b8f6d9f3068c8d2679731d57fa73b3a7ed1fa82406d2%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/ra216b7b0dd82a2c12c2df9d6095e689eb3f3d28164e6b6587da69fae%40%3Ccommits.spark.apache.org%3E
CVE ID: CVE-2019-10100 State: PUBLISHED Published: 2019-07-03T18:15:32 Last Updated: 2024-08-04T22:10:09.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to execute code remotely. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE ID: CVE-2019-10101 State: PUBLISHED Published: 2019-07-03T00:00:00 Last Updated: 2024-08-04T22:10:09.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/ - https://medium.com/bugbountywriteup/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb - https://security.netapp.com/advisory/ntap-20230818-0012/
CVE ID: CVE-2019-10102 State: PUBLISHED Published: 2019-07-03T00:00:00 Last Updated: 2024-08-04T22:10:09.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/ - https://security.netapp.com/advisory/ntap-20230818-0012/
CVE ID: CVE-2019-10103 State: PUBLISHED Published: 2019-07-03T00:00:00 Last Updated: 2024-08-04T22:10:09.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/ - https://security.netapp.com/advisory/ntap-20230818-0012/
CVE ID: CVE-2019-10104 State: PUBLISHED Published: 2019-07-03T18:52:13 Last Updated: 2024-08-04T22:10:09.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-secur
itional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE ID: CVE-2019-10105 State: PUBLISHED Published: 2019-03-26T21:52:22 Last Updated: 2024-08-04T22:10:09.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12002
CVE ID: CVE-2019-10106 State: PUBLISHED Published: 2019-03-26T21:52:33 Last Updated: 2024-08-04T22:10:09.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12004
CVE ID: CVE-2019-10107 State: PUBLISHED Published: 2019-03-26T21:52:45 Last Updated: 2024-08-04T22:10:09.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12003
CVE ID: CVE-2019-10108 State: PUBLISHED Published: 2019-05-15T19:06:26 Last Updated: 2024-08-04T22:10:09.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allowed non-members of a private project/group to add and read labels. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56985
CVE ID: CVE-2019-10109 State: PUBLISHED Published: 2019-05-15T19:14:55 Last Updated: 2024-08-04T22:10:09.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a result, anyone with access to the uploaded image could obtain its geolocation, device, and software version data (if present). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/sec
am Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/55469 - https://gitlab.com/gitlab-org/gitlab-ce/issues/54220
CVE ID: CVE-2019-10110 State: PUBLISHED Published: 2019-05-15T19:23:36 Last Updated: 2024-08-04T22:10:09.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on any GitLab instance on which they hold credentials. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitla
eases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56865
CVE ID: CVE-2019-10111 State: PUBLISHED Published: 2019-05-15T19:28:49 Last Updated: 2024-08-04T22:10:09.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allows persistent XSS in the merge request "resolve conflicts" page. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56927
CVE ID: CVE-2019-10112 State: PUBLISHED Published: 2019-05-16T15:11:45 Last Updated: 2024-08-04T22:10:09.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ee/issues/9730
CVE ID: CVE-2019-10113 State: PUBLISHED Published: 2019-05-16T14:27:59 Last Updated: 2024-08-04T22:10:09.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects/<id>/languages requests may allow Uncontrolled Resource Consumption. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54977
CVE ID: CVE-2019-10114 State: PUBLISHED Published: 2019-05-16T14:39:43 Last Updated: 2024-08-04T22:10:09.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a parameter in an insecure way, potentially exposing data. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitl
leases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ee/issues/9729
CVE ID: CVE-2019-10115 State: PUBLISHED Published: 2019-05-16T14:46:46 Last Updated: 2024-08-04T22:10:09.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitla
tps://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56402
CVE ID: CVE-2019-10116 State: PUBLISHED Published: 2019-05-16T14:55:14 Last Updated: 2024-08-04T22:10:09.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Guests of a project were allowed to see Related Branches created for an issue. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56224
CVE ID: CVE-2019-10117 State: PUBLISHED Published: 2019-05-16T15:00:18 Last Updated: 2024-08-04T22:10:09.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after successful authentication within the Oauth/:GeoAuthController for the secondary Geo node. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ee/issues/9731
CVE ID: CVE-2019-10118 State: PUBLISHED Published: 2019-03-27T03:54:11 Last Updated: 2024-08-04T22:10:09.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/snipe/snipe-it/pull/6831
CVE ID: CVE-2019-10119 State: PUBLISHED Published: 2019-07-10T11:50:44 Last Updated: 2024-08-04T22:10:09.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via an invalid login attempt to the RemoteApi account, aka HMCCU-154. This leads to automatic login as admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf - https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-
tes/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf - https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf
CVE ID: CVE-2019-10120 State: PUBLISHED Published: 2019-07-10T11:47:18 Last Updated: 2024-08-04T22:10:09.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAutoLogin) can be achieved by continuing to use a session ID after a logout, aka HMCCU-154. Additional Analyst Notes: - CVE Program Container: References: - https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf - https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf
CVE ID: CVE-2019-10121 State: PUBLISHED Published: 2019-07-10T11:54:13 Last Updated: 2024-08-04T22:10:09.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf - https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16
/HM-CCU2-Changelog.2.41.9.pdf - https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf - https://os-s.de/advisories/OSS-2018-01.pdf
CVE ID: CVE-2019-10122 State: PUBLISHED Published: 2019-07-10T11:56:48 Last Updated: 2024-08-04T22:10:09.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf - https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf
CVE ID: CVE-2019-10123 State: PUBLISHED Published: 2019-05-31T21:42:37 Last Updated: 2024-08-04T22:10:09.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user. Additional Analyst Notes: - CVE Program Container: References: - https://www.ais.de - https://github.com/rapid7/metasploit-framework/pull/11641/
CVE ID: CVE-2019-10124 State: REJECTED Published: 2019-03-27T05:15:07 Last Updated: 2019-05-01T17:36:57 Description: No description available.
CVE ID: CVE-2019-10125 State: PUBLISHED Published: 2019-03-27T05:15:22 Last Updated: 2024-08-04T22:10:09.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/patch/10828359/ - http://www.securityfocus.com/bid/107655 - https://security.netapp.com/advisory/ntap-20190411-0003/ - https://support.f5.com/csp/article/
ityfocus.com/bid/107655 - https://security.netapp.com/advisory/ntap-20190411-0003/ - https://support.f5.com/csp/article/K29215970
CVE ID: CVE-2019-10126 State: PUBLISHED Published: 2019-06-14T13:56:32 Last Updated: 2024-08-04T22:10:09.957Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: kernel Problem Types: CWE-122 Description: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10126 - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00010