Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14827 State: PUBLISHED Published: 2021-05-17T15:37:26 Last Updated: 2024-08-05T00:26:39.120Z Vendors: n/a Products: Moodle Problem Types: CWE-94 Description: A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that context was injected into another Mustache helper, which could result in script injection in some templates. This affects versions 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.o
.5.7 and earlier unsupported versions. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=391030 - https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-62284
CVE ID: CVE-2019-14828 State: PUBLISHED Published: 2021-03-19T20:09:16 Last Updated: 2024-08-05T00:26:39.118Z Vendors: n/a Products: Moodle Problem Types: CWE-285 Description: A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where users with the capability to create courses were assigned as a teacher in those courses, regardless of whether they had the capability to be automatically assigned that role. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=391031
CVE ID: CVE-2019-14829 State: PUBLISHED Published: 2021-03-19T20:11:57 Last Updated: 2024-08-05T00:26:39.098Z Vendors: n/a Products: Moodle Problem Types: CWE-573 Description: A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=391035 - https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=208397c120b6bf74ca6a173e42cb527904c5ab42
CVE ID: CVE-2019-14830 State: PUBLISHED Published: 2021-03-19T20:15:25 Last Updated: 2024-08-05T00:26:39.141Z Vendors: n/a Products: Moodle Problem Types: CWE-601 Description: A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user's mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured, mobile service disabled, or where the mobile app login method is "via the app"). Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=3910
app"). Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=391036 - https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=d4985a77391123c5959db432c076328f8d5e3624
CVE ID: CVE-2019-14831 State: PUBLISHED Published: 2021-03-19T20:19:10 Last Updated: 2024-08-05T00:26:39.123Z Vendors: n/a Products: Moodle Problem Types: CWE-601 Description: A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum's subscription mode was set to "forced subscription", the forum's subscribe link contained an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=391037 - https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=32e2e06a8737afb07ee83abb3ea
e.org/mod/forum/discuss.php?d=391037 - https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=32e2e06a8737afb07ee83abb3eacd39f8b181216
CVE ID: CVE-2019-14832 State: PUBLISHED Published: 2019-10-15T18:13:17 Last Updated: 2024-08-05T00:26:39.131Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: keycloak Products: keycloak REST API Problem Types: CWE-863 Description: A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14832
CVE ID: CVE-2019-14833 State: PUBLISHED Published: 2019-11-06T00:00:00 Last Updated: 2024-08-05T00:26:39.137Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Samba Products: samba Problem Types: CWE-305 Description: A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak pas
can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14833 - https://www.samba.org/samba/security/CVE-2019-14833.html - https://www.synology.com/security/advisory/Synology_SA_19_35 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMIYCYXCPRTVCVZ3TP6ZGPJ6RZS3IX4G/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/UMIYCYXCPRTVCVZ3TP6ZGPJ6RZS3IX4G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/ - https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
CVE ID: CVE-2019-14834 State: PUBLISHED Published: 2020-01-07T16:30:04 Last Updated: 2024-08-05T00:26:39.119Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: The Dnsmasq Project Products: dnsmasq Problem Types: CWE-770 Description: A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JU474LT66BHNVFG5C4GEV3VTZNAEJ3BS/ - https://bugzilla.redhat.com/show_bug.cg
e-announce%40lists.fedoraproject.org/message/JU474LT66BHNVFG5C4GEV3VTZNAEJ3BS/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14834 - http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=69bc94779c2f035a9fffdb5327a54c3aeca73ed5
CVE ID: CVE-2019-14835 State: PUBLISHED Published: 2019-09-17T15:09:37 Last Updated: 2024-08-05T00:26:39.157Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Linux Kernel Products: Linux kernel Problem Types: CWE-120 Description: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. Additional Analyst Notes: - CVE Program Container: References:
d use this flaw to increase their privileges on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14835 - https://www.openwall.com/lists/oss-security/2019/09/17/1 - https://usn.ubuntu.com/4135-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQFY6JYFIQ2VFQ7QCSXPWTUL5ZDNCJL5/ - https://access.redhat.com/errata/RHSA-2019:2827 - https://access.redhat.com/errata/RHSA-2019:2828 - https://access.redhat.com/errata/RHSA-2019:2830 - https://access.redhat.com/errata/RHSA-2019:2829 - https://access.redhat.com/errata/RHSA-2019:2854 - https://access.redhat.com/errata/RHSA-201
.com/errata/RHSA-2019:2829 - https://access.redhat.com/errata/RHSA-2019:2854 - https://access.redhat.com/errata/RHSA-2019:2862 - https://access.redhat.com/errata/RHSA-2019:2863 - https://access.redhat.com/errata/RHSA-2019:2866 - https://access.redhat.com/errata/RHSA-2019:2864 - https://access.redhat.com/errata/RHSA-2019:2865 - https://access.redhat.com/errata/RHSA-2019:2867 - https://access.redhat.com/errata/RHSA-2019:2869 - http://packetstormsecurity.com/files/154572/Kernel-Live-Patch-Security-Notice-LSN-0056-1.html - http://www.openwall.com/lists/oss-security/2019/09/24/1 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - https://access.redhat.com/errata/RHSA-20
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - https://access.redhat.com/errata/RHSA-2019:2889 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://seclists.org/bugtraq/2019/Sep/41 - https://www.debian.org/security/2019/dsa-4531 - https://access.redhat.com/errata/RHSA-2019:2900 - https://access.redhat.com/errata/RHSA-2019:2901 - https://access.redhat.com/errata/RHSA-2019:2899 - https://access.redhat.com/errata/RHSA-2019:2924 - https://usn.ubuntu.com/4135-1/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html - https://lists.fedoraproject.org
buntu.com/4135-1/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3QNMPENPFEGVTOFPSNOBL7JEIJS25P/ - http://www.openwall.com/lists/oss-security/2019/10/03/1 - http://www.openwall.com/lists/oss-security/2019/10/09/3 - http://www.openwall.com/lists/oss-security/2019/10/09/7 - https://access.redhat.com/errata/RHBA-2019:2824 - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://security.netapp.com/advisory/ntap-20191031-0005/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Se
tap-20191031-0005/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-qemu-en
CVE ID: CVE-2019-14836 State: PUBLISHED Published: 2021-05-26T11:18:13 Last Updated: 2024-08-05T00:26:39.122Z Vendors: n/a Products: Red Hat 3scale API Management Problem Types: Cross-Site Request Forgery (CSRF) Description: A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1847605
CVE ID: CVE-2019-14837 State: PUBLISHED Published: 2020-01-07T16:33:21 Last Updated: 2024-08-05T00:26:39.127Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: keycloak Problem Types: CWE-547 Description: A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be 'service-account-test@placeholder.org'. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14837 - https://issues.jbo
: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14837 - https://issues.jboss.org/browse/KEYCLOAK-10780 - https://github.com/keycloak/keycloak/commit/9a7c1a91a59ab85e7f8889a505be04a71580777f
CVE ID: CVE-2019-14838 State: PUBLISHED Published: 2019-10-14T14:32:53 Last Updated: 2024-08-05T00:26:39.125Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H) Vendors: Red Hat Products: wildfly-core Problem Types: CWE-284 Description: A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14838 - https://access.redhat.com/errata/RHSA-2019:3083 - https://access.redhat.com/errata/RHSA-2019:3082 - https://access.redhat.com/errata/RHSA-2
at.com/errata/RHSA-2019:3083 - https://access.redhat.com/errata/RHSA-2019:3082 - https://access.redhat.com/errata/RHSA-2019:4018 - https://access.redhat.com/errata/RHSA-2019:4019 - https://access.redhat.com/errata/RHSA-2019:4021 - https://access.redhat.com/errata/RHSA-2019:4020 - https://access.redhat.com/errata/RHSA-2019:4045 - https://access.redhat.com/errata/RHSA-2019:4042 - https://access.redhat.com/errata/RHSA-2019:4040 - https://access.redhat.com/errata/RHSA-2019:4041 - https://access.redhat.com/errata/RHSA-2020:0728
CVE ID: CVE-2019-14839 State: PUBLISHED Published: 2022-04-01T22:17:27 Last Updated: 2024-08-05T00:26:39.124Z Vendors: n/a Products: Business-central Problem Types: CWE-200 Description: It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1748178
CVE ID: CVE-2019-14840 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T20:38:21.469Z Vendors: n/a Products: Business-central Problem Types: CWE-522 Description: A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to leak of credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1748185 - https://access.redhat.com/security/cve/CVE-2019-14840
CVE ID: CVE-2019-14841 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T20:33:55.317Z Vendors: n/a Products: Business-central Problem Types: CWE-281 Description: A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1744801 - https://access.redhat.com/security/cve/CVE-2019-14841
CVE ID: CVE-2019-14842 State: PUBLISHED Published: 2019-11-26T15:01:26 Last Updated: 2024-08-05T00:26:39.105Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: [UNKNOWN] Products: libnbd Problem Types: CWE-681 Description: Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a negative offset then data under control of the server is written to memory before the read buffer supplied by the client. If the read buffer is located on
ntrol of the server is written to memory before the read buffer supplied by the client. If the read buffer is located on the stack then this allows the stack return address from nbd_pread() to be trivially modified, allowing arbitrary code execution under the control of the server. If the buffer is located on the heap then other memory objects before the buffer can be overwritten, which again would usually lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14842 - https://www.redhat.com/archives/libguestfs/2019-October/msg00060.html
CVE ID: CVE-2019-14843 State: PUBLISHED Published: 2020-01-07T16:34:59 Last Updated: 2024-08-05T00:26:39.115Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: wildfly-security-manager Problem Types: CWE-592 Description: A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla
at SSO 7 are vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14843
CVE ID: CVE-2019-14844 State: PUBLISHED Published: 2019-09-26T11:50:05 Last Updated: 2024-08-05T00:26:39.128Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: MIT Products: krb5 Problem Types: CWE-628 Description: A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/pull/981 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14844 - https://lists.fedoraproject.org/archives/list/pack
ll/981 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14844 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDE2QOKK4I4TV4WV74ZQWICZ4HJN2MOK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4LS5PIJOCNOUZGLO2OBT6GY334PUOSW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54ZYKEJZ77BXZWGF4NEVKC33ESVROEYC/ - https://security.netapp.com/advisory/ntap-20220325-0003/
CVE ID: CVE-2019-14845 State: PUBLISHED Published: 2019-10-08T18:43:24 Last Updated: 2024-08-05T00:26:39.114Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: openshift Problem Types: CWE-494 Description: A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification. An attacker can take advantage of this flaw by launching a man-in-the-middle attack and injecting malicious content. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14845 - https://access.redhat.com/errata/RHSA-201
er: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14845 - https://access.redhat.com/errata/RHSA-2019:4101 - https://access.redhat.com/errata/RHSA-2019:4237
CVE ID: CVE-2019-14846 State: PUBLISHED Published: 2019-10-08T18:44:09 Last Updated: 2024-08-05T00:26:39.176Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Ansible Problem Types: CWE-117, CWE-532 Description: In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com
uted in a separate process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846 - https://github.com/ansible/ansible/pull/63366 - https://access.redhat.com/errata/RHSA-2019:3203 - https://access.redhat.com/errata/RHSA-2019:3202 - https://access.redhat.com/errata/RHSA-2019:3207 - https://access.redhat.com/errata/RHSA-2019:3201 - https://access.redhat.com/errata/RHSA-2020:0756 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html - https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html - https://lists.debian.org/
e/2020-04/msg00026.html - https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2019-14847 State: PUBLISHED Published: 2019-11-06T00:00:00 Last Updated: 2024-08-05T00:26:39.104Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Samba Products: samba Problem Types: CWE-476 Description: A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847 - https://www.samba.org/samba/security/CVE-2019-14847.html - https://www.synology.com/security/advisory
d=CVE-2019-14847 - https://www.samba.org/samba/security/CVE-2019-14847.html - https://www.synology.com/security/advisory/Synology_SA_19_35 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/ - https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
CVE ID: CVE-2019-14848 State: REJECTED Published: 2021-03-18T18:29:15 Last Updated: 2021-03-18T18:29:15 Description: No description available.
CVE ID: CVE-2019-14849 State: PUBLISHED Published: 2019-12-12T13:14:53 Last Updated: 2024-08-05T00:26:39.075Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: n/a Products: 3scale Problem Types: CWE-201 Description: A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain access to unauthorized information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14849
CVE ID: CVE-2019-14850 State: PUBLISHED Published: 2021-03-18T18:56:42 Last Updated: 2024-08-05T00:26:39.144Z Vendors: n/a Products: nbdkit Problem Types: CWE-406 Description: A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could cause resource consumption and degradation of service in nbdkit, depending on the plugins configured on the server-side. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1757258
e. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1757258 - https://www.redhat.com/archives/libguestfs/2019-September/msg00084.html