Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-8907 State: PUBLISHED Published: 2019-02-18T17:00:00 Last Updated: 2024-08-04T21:31:37.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.astron.com/view.php?id=65 - https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html - https://usn.ubuntu.com/3911-1/ - http://lists.opensuse.org/opensuse-security-announce/2019
ounce/2019-03/msg00027.html - https://usn.ubuntu.com/3911-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html
CVE ID: CVE-2019-8908 State: PUBLISHED Published: 2019-02-18T18:00:00Z Last Updated: 2024-09-16T19:46:41.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/gif" header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/3
CVE ID: CVE-2019-8909 State: PUBLISHED Published: 2019-02-18T18:00:00Z Last Updated: 2024-09-16T19:20:36.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/6
CVE ID: CVE-2019-8910 State: PUBLISHED Published: 2019-02-18T18:00:00Z Last Updated: 2024-09-17T03:17:39.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/5
CVE ID: CVE-2019-8911 State: PUBLISHED Published: 2019-02-18T18:00:00Z Last Updated: 2024-09-17T03:59:55.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/5
CVE ID: CVE-2019-8912 State: PUBLISHED Published: 2019-02-18T18:00:00 Last Updated: 2024-08-04T21:31:37.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107063 - http://patchwork.ozlabs.org/patch/1042902/ - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3931-1/ - https://usn.ubuntu.com/3931-2/ - https://usn.ubuntu.com/3930-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/ms
sn.ubuntu.com/3931-2/ - https://usn.ubuntu.com/3930-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html - https://access.redhat.com/errata/RHSA-2020:0174
CVE ID: CVE-2019-8917 State: PUBLISHED Published: 2019-02-18T19:00:00 Last Updated: 2024-08-04T21:31:37.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107061 - https://github.com/VerSprite/research/blob/master/advisories/
r: References: - http://www.securityfocus.com/bid/107061 - https://github.com/VerSprite/research/blob/master/advisories/VS-2019-001.md
CVE ID: CVE-2019-8919 State: PUBLISHED Published: 2019-02-18T20:00:00 Last Updated: 2024-08-04T21:31:37.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haiwen/seadroid/issues/789
CVE ID: CVE-2019-8920 State: PUBLISHED Published: 2019-07-09T17:08:48 Last Updated: 2024-08-04T21:31:37.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569. Additional Analyst Notes: - CVE Program Container: References: - https://blog.lucideus.com/2019/07/xampp-170-reflected-cross-site-scripting.html - http://www.securityfocus.com/bid/109120
CVE ID: CVE-2019-8921 State: PUBLISHED Published: 2021-11-29T00:00:00 Last Updated: 2024-08-04T21:31:37.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary heap data. The root cause can be found in the function service_attr_req of sdpd-request.c. The server does not check whether the CSTATE data is the same in consecutive requests, and instead simply trusts that it is the same. Additi
check whether the CSTATE data is the same in consecutive requests, and instead simply trusts that it is the same. Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/ssd-advisory-linux-bluez-information-leak-and-heap-overflow/ - https://security.netapp.com/advisory/ntap-20211203-0002/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
CVE ID: CVE-2019-8922 State: PUBLISHED Published: 2021-11-29T00:00:00 Last Updated: 2024-08-04T21:31:37.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer. There are no size checks whatsoever, resulting in a simple heap overflow if one can craft a request where the response is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_re
nse is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_request (in sdpd-request.c), which also allocates the response buffer. Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/ssd-advisory-linux-bluez-information-leak-and-heap-overflow/ - https://security.netapp.com/advisory/ntap-20211203-0002/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
CVE ID: CVE-2019-8923 State: PUBLISHED Published: 2019-05-14T15:46:15 Last Updated: 2024-08-04T21:31:37.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151756/XAMPP-5.6.8-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/107168 - https://www.exploit-db.com/exploits/46424/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/1.8.2/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/5.5.19/ - https://source
mpp/files/XAMPP%20Windows/1.8.2/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/5.5.19/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/5.6.8/ - http://seclists.org/fulldisclosure/2019/Feb/43
CVE ID: CVE-2019-8924 State: PUBLISHED Published: 2019-05-17T01:06:58 Last Updated: 2024-08-04T21:31:37.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151756/XAMPP-5.6.8-Cross-Site-Scripting-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Feb/43 - http://www.securityfocus.com/bid/107168 - https://www.exploit-db.com/exploits/46424/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/1.8.2/ - https://sourceforge.net/projects/xampp/files/
4/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/1.8.2/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/5.5.19/ - https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/5.6.8/
CVE ID: CVE-2019-8925 State: PUBLISHED Published: 2019-05-17T01:15:41 Last Updated: 2024-08-04T21:31:37.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet (via the parameter schFilePath), allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via any file name, such as a schFilePath=C:\boot.ini value. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Ana
Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Traversal-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/45 - https://www.exploit-db.com/exploits/46425/
CVE ID: CVE-2019-8926 State: PUBLISHED Published: 2019-05-17T13:57:40 Last Updated: 2024-08-04T21:31:37.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Traversal-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/45 - https://www.exploit-db.com/e
w.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/45 - https://www.exploit-db.com/exploits/46425/
CVE ID: CVE-2019-8927 State: PUBLISHED Published: 2019-05-17T14:05:22 Last Updated: 2024-08-04T21:31:37.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc, emailId, excWeekModify, filterFlag, getFilter, mailReport, mset, popup, rep_schedule, rep_Type, schDesc, schName, schSource, selectDeviceDone, task, val10, and val11. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Trave
References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Traversal-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/45 - https://www.exploit-db.com/exploits/46425/
CVE ID: CVE-2019-8928 State: PUBLISHED Published: 2019-05-17T14:08:31 Last Updated: 2024-08-04T21:31:37.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userName. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Traversal-XSS.html - https://www.exploit-db.com/exploits/46425/ - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/45
CVE ID: CVE-2019-8929 State: PUBLISHED Published: 2019-05-17T14:11:40 Last Updated: 2024-08-04T21:31:37.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Traversal-XSS.html - https://www.exploit-db.com/exploits/46425/ - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/45
CVE ID: CVE-2019-8931 State: PUBLISHED Published: 2019-07-17T20:13:40 Last Updated: 2024-08-04T21:31:37.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE ID: CVE-2019-8932 State: PUBLISHED Published: 2019-07-17T20:11:29 Last Updated: 2024-08-04T21:31:37.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE ID: CVE-2019-8933 State: PUBLISHED Published: 2019-02-19T02:00:00Z Last Updated: 2024-09-16T20:43:13.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, clicking on Default Template Management, clicking on New Template, and modifying the filename from ../index.html to ../index.php. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/qq_36093477/article/details/86681178
CVE ID: CVE-2019-8934 State: PUBLISHED Published: 2019-03-17T19:11:30 Last Updated: 2024-08-04T21:31:37.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/02/21/1 - http://www.securityfocus.com/bid/107115 - https://lists.gnu.org/archive/html/qemu-devel/2019-02/msg04821.html - https://security.netapp.com/advisory/ntap-20190411-0006/ - http://lists.opensuse.org/opensuse-security-announc
21.html - https://security.netapp.com/advisory/ntap-20190411-0006/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00094.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html
CVE ID: CVE-2019-8935 State: PUBLISHED Published: 2019-02-19T15:00:00Z Last Updated: 2024-09-16T18:29:58.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-18-052-reflected-cross-site-scripting-in-collabtive/
CVE ID: CVE-2019-8936 State: PUBLISHED Published: 2019-05-15T15:37:31 Last Updated: 2024-08-04T21:31:37.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP through 4.2.8p12 has a NULL Pointer Dereference. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201903-15 - http://support.ntp.org/bin/view/Main/SecurityNotice - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00036.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQDNHNYOJK2SRSGO23GQ2RXTOUY2HLNN/ - https://lists.fedoraproject.
list/package-announce%40lists.fedoraproject.org/message/KQDNHNYOJK2SRSGO23GQ2RXTOUY2HLNN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBGXY7OKWOLT6X6JAPVZRFEP4FLCGGST/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NVS2CSG2TQ663CXOZZUJN4STQPMENNP/ - https://security.netapp.com/advisory/ntap-20190503-0001/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:04.ntp.asc - https://seclists.org/bugtraq/2019/May/39 - http://bugs.ntp.org/show_bug.cgi?id=3565 - http://packetstormsecurity.com/files/152915/FreeBSD-Security-Advisory-FreeBSD-SA-19-04.ntp.html - https://support.f5.com/csp/artic
ketstormsecurity.com/files/152915/FreeBSD-Security-Advisory-FreeBSD-SA-19-04.ntp.html - https://support.f5.com/csp/article/K61363039 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us - https://usn.ubuntu.com/4563-1/
CVE ID: CVE-2019-8937 State: PUBLISHED Published: 2019-05-17T14:55:56 Last Updated: 2024-08-04T21:31:37.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151779/HotelDruid-2.3-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/46429/ - https://sourceforge.net/projects/hoteldruid/
CVE ID: CVE-2019-8938 State: PUBLISHED Published: 2019-03-17T18:38:49 Last Updated: 2024-08-04T21:31:37.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151800/VertrigoServ-2.17-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/Feb/47 - https://sourceforge.net/p/vertrigo/news/
CVE ID: CVE-2019-8939 State: PUBLISHED Published: 2019-02-19T16:00:00 Last Updated: 2024-08-04T21:31:37.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Tautulli/Tautulli-Issues/issues/161 - http://www.securityfocus.com/bid/107171
CVE ID: CVE-2019-8942 State: PUBLISHED Published: 2019-02-20T03:00:00 Last Updated: 2024-08-04T21:31:37.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. Exploitation can leverage CVE-2019-8943. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9222 - https://www.exploit-db.com/exploits/46511
E Program Container: References: - https://wpvulndb.com/vulnerabilities/9222 - https://www.exploit-db.com/exploits/46511/ - http://www.securityfocus.com/bid/107088 - https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ - https://www.debian.org/security/2019/dsa-4401 - https://lists.debian.org/debian-lts-announce/2019/03/msg00044.html - http://packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html - http://www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rce - https://www.exploit-db.com/exploits/46662/
CVE ID: CVE-2019-8943 State: PUBLISHED Published: 2019-02-20T03:00:00 Last Updated: 2024-08-04T21:31:37.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46511/ - https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ - http://www.securityfocus.com/bid/107089 - http:/
https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ - http://www.securityfocus.com/bid/107089 - http://packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html - http://www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rce - https://www.exploit-db.com/exploits/46662/ - http://packetstormsecurity.com/files/161213/WordPress-5.0.0-Remote-Code-Execution.html
CVE ID: CVE-2019-8944 State: PUBLISHED Published: 2019-02-20T03:00:00Z Last Updated: 2024-09-16T18:08:13.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5315 - https://github.com/OctopusDeploy/Issues/issues/5314
CVE ID: CVE-2019-8945 State: PUBLISHED Published: 2020-01-27T18:37:11 Last Updated: 2024-08-04T21:31:37.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://bugzilla.zimbra.com/show_bug.cgi?id=109122 - https://bugzilla.zimbra.com/show_bug.cgi?id=109123 - https://bugzilla.zimbra.com/show_bug.cgi?id=109124
CVE ID: CVE-2019-8946 State: PUBLISHED Published: 2020-01-27T18:36:20 Last Updated: 2024-08-04T21:31:37.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://bugzilla.zimbra.com/show_bug.cgi?id=109122 - https://bugzilla.zimbra.com/show_bug.cgi?id=109123 - https://bugzilla.zimbra.com/show_bug.cgi?id=109124
CVE ID: CVE-2019-8947 State: PUBLISHED Published: 2020-01-27T18:35:21 Last Updated: 2024-08-04T21:31:37.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://bugzilla.zimbra.com/show_bug.cgi?id=109122 - https://bugzilla.zimbra.com/show_bug.cgi?id=109123 - https://bugzilla.zimbra.com/show_bug.cgi?id=109124