Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15877 State: PUBLISHED Published: 2020-04-28T19:11:36 Last Updated: 2024-08-05T01:03:32.430Z Vendors: n/a Products: FreeBSD Problem Types: Missing authorization Description: In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:06.if_ixl_ioctl.asc
CVE ID: CVE-2019-15878 State: PUBLISHED Published: 2020-05-13T15:38:05 Last Updated: 2024-08-05T01:03:31.949Z Vendors: n/a Products: FreeBSD Problem Types: Use after free Description: In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situation due to improper checking in SCTP when an application tries to update an SCTP-AUTH shared key. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:14.sctp.asc - https://security.netapp.com/advisory/ntap-20200518-0007/
CVE ID: CVE-2019-15879 State: PUBLISHED Published: 2020-05-13T15:38:20 Last Updated: 2024-08-05T01:03:32.412Z Vendors: n/a Products: FreeBSD Problem Types: Use after free Description: In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:15.cryptodev.asc - https://security.netapp.com/advisory/ntap-20200518-0005/
CVE ID: CVE-2019-15880 State: PUBLISHED Published: 2020-05-13T15:38:29 Last Updated: 2024-08-05T01:03:32.368Z Vendors: n/a Products: FreeBSD Problem Types: Use after free Description: In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocated the size of a kernel buffer based on a user-supplied length allowing an unprivileged process to trigger a kernel panic. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:16.cryptodev.asc - https://security.netapp.com/advisory/ntap-20200518-0008/
CVE ID: CVE-2019-15881 State: REJECTED Published: 2020-07-14T17:02:10 Last Updated: 2020-07-14T17:02:10 Description: No description available.
CVE ID: CVE-2019-15882 State: REJECTED Published: 2020-07-14T17:02:06 Last Updated: 2020-07-14T17:02:06 Description: No description available.
CVE ID: CVE-2019-15883 State: REJECTED Published: 2020-07-14T17:02:23 Last Updated: 2020-07-14T17:02:23 Description: No description available.
CVE ID: CVE-2019-15884 State: REJECTED Published: 2020-07-14T17:02:34 Last Updated: 2020-07-14T17:02:34 Description: No description available.
CVE ID: CVE-2019-15885 State: REJECTED Published: 2020-07-14T17:02:46 Last Updated: 2020-07-14T17:02:46 Description: No description available.
CVE ID: CVE-2019-15886 State: REJECTED Published: 2020-07-14T17:03:34 Last Updated: 2020-07-14T17:03:34 Description: No description available.
CVE ID: CVE-2019-15887 State: REJECTED Published: 2020-07-14T17:04:16 Last Updated: 2020-07-14T17:04:16 Description: No description available.
CVE ID: CVE-2019-15888 State: REJECTED Published: 2020-07-14T17:05:08 Last Updated: 2020-07-14T17:05:08 Description: No description available.
CVE ID: CVE-2019-15889 State: PUBLISHED Published: 2019-09-03T17:07:01 Last Updated: 2024-08-05T01:03:32.214Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/download-manager/#developers - https://wpvulndb.com/vulnerabilities/9257 - https://packetstormsecurity.com/files/152552/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html - https://www.cyb
tps://packetstormsecurity.com/files/152552/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html - https://www.cybersecurity-help.cz/vdb/SB2019041819 - https://packetstormsecurity.com/files/152511/WordPress-Download-Manager-2.9.92-Cross-Site-Scripting.html - https://plugins.trac.wordpress.org/changeset/2070388/download-manager - http://packetstormsecurity.com/files/154356/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html
CVE ID: CVE-2019-15890 State: PUBLISHED Published: 2019-09-06T16:55:12 Last Updated: 2024-08-05T01:03:31.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/slirp/libslirp/commit/c5927943 - http://www.openwall.com/lists/oss-security/2019/09/06/3 - https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html - https://usn.ubuntu.com/4191-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html - https://usn.ubuntu.com/4191-1/ - https://seclists.org/bugtraq/2020/Feb/0 - htt
security-announce/2019-11/msg00034.html - https://usn.ubuntu.com/4191-1/ - https://seclists.org/bugtraq/2020/Feb/0 - https://www.debian.org/security/2020/dsa-4616 - https://access.redhat.com/errata/RHSA-2020:0775
CVE ID: CVE-2019-15891 State: PUBLISHED Published: 2019-09-26T20:56:19 Last Updated: 2024-08-05T01:03:31.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection. Additional Analyst Notes: - CVE Program Container: References: - https://ckeditor.com/blog/CKFinder-3.5.1-and-CKFinder-2.6.3-released/
CVE ID: CVE-2019-15892 State: PUBLISHED Published: 2019-09-03T20:56:18 Last Updated: 2024-08-05T01:03:32.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack. Additional Analyst Notes: - CVE Program Container: References: - https://varnish-cache.org/security/VSV00003.html - https://seclists.org/bugtraq/2019/Sep/5 - https://www.debian.org/security/2019/dsa-4514 - http://lists.opens
0003.html - https://seclists.org/bugtraq/2019/Sep/5 - https://www.debian.org/security/2019/dsa-4514 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00069.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSF54TDJWJLINIFEW5V5BKDNY5EQRR3/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00089.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3OEOCYRU43TWEU2C65F3D6GK64MSWNNK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DBAQF6UDRSTURGINIMSMLJR4PTDYWA7C/
CVE ID: CVE-2019-15893 State: PUBLISHED Published: 2019-10-16T12:40:35 Last Updated: 2024-08-05T01:03:31.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/articles/360035055794
CVE ID: CVE-2019-15894 State: PUBLISHED Published: 2019-10-07T15:54:40 Last Updated: 2024-08-05T01:03:32.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code from flash. The fault injection attack does not disable the Flash Encryption feature, so if the ESP32 is configured with the recommended combination of Secure Boot and Flash Encryption, then the impact is minimized. If the ESP32 is conf
with the recommended combination of Secure Boot and Flash Encryption, then the impact is minimized. If the ESP32 is configured without Flash Encryption then successful fault injection allows arbitrary code execution. To protect devices with Flash Encryption and Secure Boot enabled against this attack, a firmware change must be made to permanently enable Flash Encryption in the field if it is not already permanently enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_Boot
CVE ID: CVE-2019-15895 State: PUBLISHED Published: 2019-09-09T12:54:32 Last Updated: 2024-08-05T01:03:32.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/search-exclude/#developers - https://wpvulndb.com/vulnerabilities/9870 - https://blog.nintechnet.com/settings-change-vulnerability-in-wordpress-search-exclude-plugin/
CVE ID: CVE-2019-15896 State: PUBLISHED Published: 2019-09-10T15:28:25 Last Updated: 2024-08-05T01:03:32.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/lifterlms/#developers - https://wpvulndb.com/vulnerabilities/9871 - https://blog.nintechnet.com/critical-vulnerability
s/lifterlms/#developers - https://wpvulndb.com/vulnerabilities/9871 - https://blog.nintechnet.com/critical-vulnerability-fixed-in-wordpress-lifterlms-plugin/
CVE ID: CVE-2019-15897 State: PUBLISHED Published: 2019-12-05T15:31:43 Last Updated: 2024-08-05T01:03:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authentication Bypass via communication with a BeeGFS metadata server (which is typically not exposed to external networks). Additional Analyst Notes: - CVE Program Container: References: - https://www.hpcsec.com/2019/12/04/cve-2019-15897/ - https://seclists.org/bugtraq/2019/Dec/7 - http://packetstormsecurity.com/files/155573/BeeGFS-7.1.3-Privilege-Escalation.html
CVE ID: CVE-2019-15898 State: PUBLISHED Published: 2019-09-03T21:39:04 Last Updated: 2024-08-05T01:03:32.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lucaottoni/reflectedxss_nagios/blob/master/README.md - https://www.nagios.com/downloads/nagios-log-server/change-log/
CVE ID: CVE-2019-15900 State: PUBLISHED Published: 2019-10-18T15:41:48 Last Updated: 2024-08-05T01:03:32.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The result was that, instead of reporting that the supplied username or group name did not exist, it would execute the command as root. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slicer69/doas/commit/
mmand as root. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slicer69/doas/commit/2f83222829448e5bc4c9391d607ec265a1e06531 - https://github.com/slicer69/doas/compare/6.1p1...6.2
CVE ID: CVE-2019-15901 State: PUBLISHED Published: 2019-10-18T15:44:17 Last Updated: 2024-08-05T01:03:31.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slicer69/doas/compare/6.1p1...6.2 - https://github.com/slicer69/doas/commit/6cf0236184ff6
ferences: - https://github.com/slicer69/doas/compare/6.1p1...6.2 - https://github.com/slicer69/doas/commit/6cf0236184ff6304bf5e267ccf7ef02874069697 - https://github.com/slicer69/doas/pull/23
CVE ID: CVE-2019-15902 State: PUBLISHED Published: 2019-09-04T05:50:48 Last Updated: 2024-08-05T01:03:32.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. Additional Analyst Notes: - CVE
y picking specific commits, and because two (correctly ordered) code lines were swapped. Additional Analyst Notes: - CVE Program Container: References: - https://grsecurity.net/teardown_of_a_failed_linux_lts_spectre_fix.php - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://seclists.org/bugtraq/2019/Sep/41 - https://www.debian.org/security/2019/dsa-4531 - https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - ht
p-20191004-0001/ - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ - https://usn.ubuntu.com/4162-2/
CVE ID: CVE-2019-15903 State: PUBLISHED Published: 2019-09-04T05:59:16.000Z Last Updated: 2025-05-30T19:27:19.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/4132-1/ - https://seclists.org/bugtraq/2019/Sep/30 - https://usn.ubuntu.com/4132-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.f
/2019/Sep/30 - https://usn.ubuntu.com/4132-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/ - https://www.debian.org/security/2019/dsa-4530 - https://seclists.org/bugtraq/2019/Sep/37 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/ - https://
roject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/ - https://seclists.org/bugtraq/2019/Oct/29 - https://usn.ubuntu.com/4165-1/ - https://www.debian.org/security/2019/dsa-4549 - https://access.redhat.com/errata/RHSA-2019:3210 - https://access.redhat.com/errata/RHSA-2019:3237 - https://seclists.org/bugtraq/2019/Nov/1 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html - https://access.redhat.com/errata/RHSA-2019:3756 - http://lists.opensuse.org/opensuse-securi
unce/2019-11/msg00003.html - https://access.redhat.com/errata/RHSA-2019:3756 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html - https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html - https://seclists.org/bugtraq/2019/Nov/24 - https://www.debian.org/security/2019/dsa-4571 - https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html - https:/
s://www.debian.org/security/2019/dsa-4571 - https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html - https://security.gentoo.org/glsa/201911-08 - https://usn.ubuntu.com/4202-1/ - https://seclists.org/bugtraq/2019/Dec/17 - https://seclists.org/bugtraq/2019/Dec/21 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - http://seclists.org/fulldisclosure/2019/Dec/30 - http://seclists.org/fulldisclosure/2019/Dec/27 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://usn.ubuntu.com/4335-1/
00008.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://usn.ubuntu.com/4335-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/libexpat/libexpat/issues/317 - https://github.com/libexpat/libexpat/pull/318 - https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43 - https://github.com/libexpat/libexpat/issues/342 - http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html - https://security.netapp.com/advisory/ntap-20190926-0004/ - http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-pyth
y.netapp.com/advisory/ntap-20190926-0004/ - http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html - http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html - https://support.apple.com/kb/HT210788 - https://support.apple.com/kb/HT210790 - https://support.apple.com/kb/HT210785 - https://support.apple.com/kb/HT210789 - https://support.apple.com/kb/HT210793 - https://support.apple.com/kb/HT210795 - https://support.apple.com/kb/HT210794 - https://www.tenable.com/security/tns-2021-11
CVE ID: CVE-2019-15910 State: PUBLISHED Published: 2019-12-20T16:03:19 Last Updated: 2024-08-05T01:03:31.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15910.md
CVE ID: CVE-2019-15911 State: PUBLISHED Published: 2019-12-20T16:03:38 Last Updated: 2024-08-05T01:03:32.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md
CVE ID: CVE-2019-15912 State: PUBLISHED Published: 2019-12-20T16:03:50 Last Updated: 2024-08-05T01:03:32.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15912_1.md - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15912_2.md
CVE ID: CVE-2019-15913 State: PUBLISHED Published: 2019-12-20T16:04:01 Last Updated: 2024-08-05T01:03:32.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15913.md
CVE ID: CVE-2019-15914 State: PUBLISHED Published: 2019-12-20T16:04:14 Last Updated: 2024-08-05T01:03:32.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md
CVE ID: CVE-2019-15915 State: PUBLISHED Published: 2019-12-20T16:03:05 Last Updated: 2024-08-05T01:03:32.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15915.md
CVE ID: CVE-2019-15916 State: PUBLISHED Published: 2019-09-04T14:58:01 Last Updated: 2024-08-05T01:03:31.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://support.f5.com/csp/article/K57418558?utm_sou
-5.0.1 - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://support.f5.com/csp/article/K57418558?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://access.redhat.com/errata/RHSA-2020:0740