Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14431 State: PUBLISHED Published: 2019-07-29T21:21:37 Last Updated: 2024-08-05T00:19:41.092Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256 bytes and possible Remote Code Execution in parseSSLHandshake in sslDecode.c. During processing of a crafted packet, the server mishandles the fragment length value provided in the DTLS message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/issues/
message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/issues/30
CVE ID: CVE-2019-14432 State: PUBLISHED Published: 2019-08-07T14:56:04 Last Updated: 2024-08-05T00:19:40.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack vector can be used to crash the application at any time. Additional Analyst Notes: - CVE Program Container: References: - https://thomask.sdf.org/blog/2019/08/07/cve-2019-14432-loom-desktop-rce-vulnerability.html - https://www.loom.com/b
s: - https://thomask.sdf.org/blog/2019/08/07/cve-2019-14432-loom-desktop-rce-vulnerability.html - https://www.loom.com/blog/loom-desktop-application-security-fix/
CVE ID: CVE-2019-14433 State: PUBLISHED Published: 2019-08-09T18:21:04 Last Updated: 2024-08-05T00:19:41.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1837877 - https://security.openstack.org/ossa/OSSA-2019-003.html - http://www.openwall.com/lists/oss-security/
.net/bugs/1837877 - https://security.openstack.org/ossa/OSSA-2019-003.html - http://www.openwall.com/lists/oss-security/2019/08/06/6 - https://usn.ubuntu.com/4104-1/ - https://access.redhat.com/errata/RHSA-2019:2631 - https://access.redhat.com/errata/RHSA-2019:2622 - https://access.redhat.com/errata/RHSA-2019:2652 - https://lists.debian.org/debian-lts-announce/2022/09/msg00018.html
CVE ID: CVE-2019-14437 State: PUBLISHED Published: 2019-08-29T17:30:37 Last Updated: 2024-08-05T00:19:41.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git&a=search&h=refs%2Fheads%2Fmaster&st=commit&s=cve-2019 - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.g
-4504 - https://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE ID: CVE-2019-14438 State: PUBLISHED Published: 2019-08-29T17:33:21 Last Updated: 2024-08-05T00:19:41.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git&a=search&h=refs%2Fheads%2Fmaster&st=commit&s=cve-2019 - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/gl
s://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE ID: CVE-2019-14439 State: PUBLISHED Published: 2019-07-30T10:49:43 Last Updated: 2024-08-05T00:19:41.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/08/msg00011.html - https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9%40%3Cdev.tomee.apache.org%3E
ps://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/56c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/ee0a051428d2c719acfa297d0854a189ea5e284ef3ed491fa672f4be%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3
1fa672f4be%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3269c1dd990bb319%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E - https://lists.apache.org/thread.html/5fc0e16b7af2590bf1e97c76c136291c4fdb244ee63c65c485c9a7a1%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/87e46591de8925f719664a845572d184027258c5a7af0a471b53c77b%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592%40%3Ccommits.cassandra.apache.org%3E - https://lists.fedoraproj
3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592%40%3Ccommits.cassandra.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544/ - https://www.debian.org/security/2019/dsa-4542 - https://seclists.org/bugtraq/2019/Oct/6 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
ps://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3200 - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/techne
security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.1...jackson-databind-2.9.9.2 - https://security.netapp.com/advisory/ntap-20190814-0001/ - https://github.com/FasterXML/jackson-databind/issues/2389 - https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b
CVE ID: CVE-2019-14441 State: PUBLISHED Published: 2019-07-30T12:05:30 Last Updated: 2024-08-05T00:19:40.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Libav 12.3. An access violation allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv. This is related to ff_mpa_synth_filter_float in avcodec/mpegaudiodsp_template.c. NOTE: This may be a duplicate of CVE-2018-19129 Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1161#c0
CVE ID: CVE-2019-14442 State: PUBLISHED Published: 2019-07-30T12:05:38 Last Updated: 2024-08-05T00:19:40.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1159 - https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html
CVE ID: CVE-2019-14443 State: PUBLISHED Published: 2019-07-30T12:05:49 Last Updated: 2024-08-05T00:19:40.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1161#c1 - https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html
CVE ID: CVE-2019-14444 State: PUBLISHED Published: 2019-07-30T12:05:59 Last Updated: 2024-08-05T00:19:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24829 - https://security.netapp.com/advisory/ntap-20190822-0002/ - https://usn.ubuntu.com/4336-1/ - https://security.gentoo.org/glsa/202007-39 - http://lists.opensuse.org/opensuse-secu
- https://usn.ubuntu.com/4336-1/ - https://security.gentoo.org/glsa/202007-39 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html
CVE ID: CVE-2019-14449 State: PUBLISHED Published: 2019-11-26T16:32:32 Last Updated: 2024-08-05T00:19:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_sky_fq1_cjb
CVE ID: CVE-2019-14450 State: PUBLISHED Published: 2019-10-28T16:58:41 Last Updated: 2024-08-05T00:19:40.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled XML file at an unintended location. When this is combined with CVE-2019-14451, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart. Additional Analyst Notes: - CVE Program Container: Re
configuration is dependent on a system reboot or service restart. Additional Analyst Notes: - CVE Program Container: References: - https://www.repetier-server.com/manuals/0.91/index.html - https://www.repetier-server.com/knowledgebase/security-advisory/
CVE ID: CVE-2019-14451 State: PUBLISHED Published: 2019-10-25T16:27:22 Last Updated: 2024-08-05T00:19:41.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart. Additional Analyst Notes: - CVE Program Container: References: - https://www.repetier-serv
em reboot or service restart. Additional Analyst Notes: - CVE Program Container: References: - https://www.repetier-server.com/manuals/0.91/index.html - https://www.repetier-server.com/knowledgebase/security-advisory/
CVE ID: CVE-2019-14452 State: PUBLISHED Published: 2019-07-31T01:33:44 Last Updated: 2024-08-05T00:19:41.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505967936 - https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505997355 - https://github.com/Sigil-Ebook/Sigil/commit/369eebe936e4a8c83cc54662a3412ce8bef189e4 - https://github.com/Sigil-Ebook/Sig
ttps://github.com/Sigil-Ebook/Sigil/commit/369eebe936e4a8c83cc54662a3412ce8bef189e4 - https://github.com/Sigil-Ebook/Sigil/commit/04e2f280cc4a0766bedcc7b9eb56449ceecc2ad4 - https://github.com/Sigil-Ebook/Sigil/commit/0979ba8d10c96ebca330715bfd4494ea0e019a8f - https://github.com/Sigil-Ebook/Sigil/releases/tag/0.9.16 - https://github.com/Sigil-Ebook/Sigil/compare/ea7f27d...5b867e5 - https://usn.ubuntu.com/4085-1/ - https://salvatoresecurity.com/zip-slip-in-sigil-cve-2019-14452/
CVE ID: CVE-2019-14453 State: PUBLISHED Published: 2021-08-03T17:37:31 Last Updated: 2024-08-05T00:19:41.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges (installer or administrator) for the graphical interface via a 1C000000000S value for domus, in conjunction with a zero value for logged. Additional Analyst Notes: - CVE Program Container: References: - https://www.blogx86.net/2021/07/26/cve-2019-14453/
CVE ID: CVE-2019-14454 State: PUBLISHED Published: 2019-10-02T11:20:14 Last Updated: 2024-08-05T00:19:40.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_8 - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20
CVE ID: CVE-2019-14456 State: PUBLISHED Published: 2019-07-31T20:17:09 Last Updated: 2024-08-05T00:19:41.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system (connected to a serial port on an Opengear console server) sends crafted text to a serial port (that has logging enabled), the text will be replayed when the logs are viewed. Exploiting this vulnerability requires access to the serial port and/or console server. Additional Analyst Notes: - CVE Program Container: References: - https://opengear.zendesk.com/hc/en-us/ar
onsole server. Additional Analyst Notes: - CVE Program Container: References: - https://opengear.zendesk.com/hc/en-us/articles/360029189391-Stored-cross-site-scripting-XSS-vulnerability-in-serial-port-logging
CVE ID: CVE-2019-14457 State: PUBLISHED Published: 2019-09-10T17:48:48 Last Updated: 2024-08-05T00:19:41.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-002-v1.pdf
CVE ID: CVE-2019-14458 State: PUBLISHED Published: 2019-09-18T17:42:08 Last Updated: 2024-08-05T00:19:41.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.vivotek.com/cybersecurity - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-002-v1.pdf
CVE ID: CVE-2019-14459 State: PUBLISHED Published: 2019-07-31T20:57:58 Last Updated: 2024-08-05T00:19:41.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phaag/nfdump/issues/171 - https://github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULSZMKA7P7REJMANVL7D6WMZ2L7IRSET/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULSZMKA7P7REJMANVL7D6WMZ2L7IRSET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTONOGJU5FSMFNRCT6OHXYUMDRKH4RPA/ - https://security.gentoo.org/glsa/202003-17 - https://lists.debian.org/debian-lts-announce/2020/09/msg00021.html
CVE ID: CVE-2019-14462 State: PUBLISHED Published: 2019-07-31T22:03:30 Last Updated: 2024-08-05T00:19:41.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_COILS case, aka VD-1302. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stephane/libmodbus/commit/5ccdf5ef79d742640355d1132fa9e2abc7fbaefc - https://libmodbus.org/2019/stable-and-development-releases/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HAGHQFJTJCMYHW553OUWJ3YIJR6PJHB7/ - https://lists.fedora
rchives/list/package-announce%40lists.fedoraproject.org/message/HAGHQFJTJCMYHW553OUWJ3YIJR6PJHB7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRAQZXGAZY6UGWZ6CD33QEFLL7AWW233/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00020.html
CVE ID: CVE-2019-14463 State: PUBLISHED Published: 2019-07-31T22:03:44 Last Updated: 2024-08-05T00:19:41.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case, aka VD-1301. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stephane/libmodbus/commit/5ccdf5ef79d742640355d1132fa9e2abc7fbaefc - https://libmodbus.org/2019/stable-and-development-releases/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HAGHQFJTJCMYHW553OUWJ3YIJR6PJHB7/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/HAGHQFJTJCMYHW553OUWJ3YIJR6PJHB7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRAQZXGAZY6UGWZ6CD33QEFLL7AWW233/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00020.html
CVE ID: CVE-2019-14464 State: PUBLISHED Published: 2019-07-31T22:40:32 Last Updated: 2024-08-05T00:19:41.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/milkytracker/MilkyTracker/issues/184 - https://lists.debian.org/debian-lts-announce/2019/10/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HBIIPS2CDMUXJ3CIEPKMEY3D73UZDR3T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXYRVXOPO22
73UZDR3T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXYRVXOPO223DAUJHFQCTKQHIZ6XN35P/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00023.html - https://usn.ubuntu.com/4499-1/
CVE ID: CVE-2019-14465 State: PUBLISHED Published: 2019-07-31T22:40:44 Last Updated: 2024-08-05T00:19:41.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/schismtracker/schismtracker/issues/198 - https://github.com/schismtracker/schismtracker/releases/tag/20190805 - https://security.gentoo.org/glsa/202107-12
CVE ID: CVE-2019-14466 State: PUBLISHED Published: 2019-12-31T17:29:05 Last Updated: 2024-08-05T00:19:41.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gosa-project/gosa-core/pull/29 - https://lists.debian.org/debian-lts-announce/2019/08/msg00039.html
CVE ID: CVE-2019-14467 State: PUBLISHED Published: 2019-11-18T15:21:09 Last Updated: 2024-08-05T00:19:41.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/social-photo-gallery/#developers - http://packetstormsecurity.com/files/155357/WordPress-Social-Photo-Gallery-1.0-Remote-Code-Execution.html - https://wpvulndb.com/vulnerabilities/9952 - https://seclists.org/fulldisclosure/2019/Nov/
0-Remote-Code-Execution.html - https://wpvulndb.com/vulnerabilities/9952 - https://seclists.org/fulldisclosure/2019/Nov/13
CVE ID: CVE-2019-14468 State: PUBLISHED Published: 2019-08-01T12:57:39 Last Updated: 2024-08-05T00:19:41.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuCOBOL 2.2 has a buffer overflow in cb_push_op in cobc/field.c via crafted COBOL source code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/open-cobol/bugs/581/