Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-12253 State: PUBLISHED Published: 2019-05-21T17:00:36 Last Updated: 2024-08-04T23:17:38.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ilosuna/mylittleforum/issues/468 - https://github.com/ilosuna/mylittleforum/releases/tag/2.4.20
CVE ID: CVE-2019-12254 State: PUBLISHED Published: 2022-05-06T17:30:12.071700Z Last Updated: 2024-09-16T20:22:12.620Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TECSON, GOK Products: e-litro net, LX-Net, LX-Q-Net, SmartBox 4 LAN, SmartBox 4 LAN PRO Problem Types: CWE-287 Description: In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user with limited access rights. Based on the lack of adequately implemented access-control rules, by accessing a specific uniform resource locator (URL) on the web server, a malici
ely implemented access-control rules, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to change the application settings without authenticating at all, which violates originally laid ACL rules. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2019-012/
CVE ID: CVE-2019-12255 State: PUBLISHED Published: 2019-08-09T19:18:03 Last Updated: 2024-08-04T23:17:39.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security
tcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12255 - http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://support.f5.com/csp/article/K41190253?utm_source=f5support&amp%3Butm_medium=RSS - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12256 State: PUBLISHED Published: 2019-08-09T17:57:13 Last Updated: 2024-08-04T23:17:39.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security
tcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12256 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12257 State: PUBLISHED Published: 2019-08-09T17:49:48 Last Updated: 2024-08-04T23:17:39.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/
m/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12257 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
CVE ID: CVE-2019-12258 State: PUBLISHED Published: 2019-08-09T20:00:44 Last Updated: 2024-08-04T23:17:38.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcem
ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12259 State: PUBLISHED Published: 2019-08-09T18:05:16 Last Updated: 2024-08-04T23:17:39.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.co
com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12259 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12260 State: PUBLISHED Published: 2019-08-09T20:18:30 Last Updated: 2024-08-04T23:17:39.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuoct2020.html - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://se
sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12260 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2019-12261 State: PUBLISHED Published: 2019-08-09T20:27:25 Last Updated: 2024-08-04T23:17:38.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuoct2020.html - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - h
t.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12261
CVE ID: CVE-2019-12262 State: PUBLISHED Published: 2019-08-14T19:18:13 Last Updated: 2024-08-04T23:17:39.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw). Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12263 State: PUBLISHED Published: 2019-08-09T18:10:00 Last Updated: 2024-08-04T23:17:39.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriv
mens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12263 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12264 State: PUBLISHED Published: 2019-08-05T17:34:25 Last Updated: 2024-08-04T23:17:39.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12264 - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://support.hpe.com/hpsc/doc/public/displa
190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03960en_us
CVE ID: CVE-2019-12265 State: PUBLISHED Published: 2019-08-09T18:14:23 Last Updated: 2024-08-04T23:17:39.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 - https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - htt
/cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf - https://security.netapp.com/advisory/ntap-20190802-0001/ - https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12265 - https://support.f5.com/csp/article/K41190253 - https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
CVE ID: CVE-2019-12266 State: PUBLISHED Published: 2022-03-30T19:55:17.041381Z Last Updated: 2024-09-17T00:20:34.793Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wyze Products: Cam Pan v2, Cam v2, Cam v3 Problem Types: CWE-121 Description: Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-w
lyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/
CVE ID: CVE-2019-12269 State: PUBLISHED Published: 2019-05-21T19:50:08 Last Updated: 2024-08-04T23:17:39.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text. Additional Analyst Notes: - CVE Program Container: References: - https://www.enigmail.net/index.php/en/download/changelog - https://sourceforge.net/p/enigmail/bugs/983/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00061.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.f
nsuse-security-announce/2019-06/msg00061.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYWBJHSBBLAHKMRWDWH2XXQDYAGDHB5I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVNTEF3WSOOQYKMIPEH7F77UPXES5BU5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHC5WDQ47FQSL5CTGQUYIHVC3RNZ7UH5/
CVE ID: CVE-2019-12270 State: PUBLISHED Published: 2019-05-21T20:07:21 Last Updated: 2024-08-04T23:17:39.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache file share is created on the Windows server with full read and write permissions for the Everyone group at both the NTFS and Share levels. The share is used to retrieve documents for processing, and to store processed documents for display in the browser. The only required share level access is read/write by the JobProcessor service account. At the local filesystem level,
. The only required share level access is read/write by the JobProcessor service account. At the local filesystem level, the only additional required permissions would be read/write from the servlet engine, such as Tomcat. (The affected server components are not installed with Content Server by default, and must be installed separately.) NOTE: the vendor's position is that customers are not supposed to use this default setting without consulting the documentation. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/150125/Brava-Enterprise-Server-16.4-Information-Disclosure.html
CVE ID: CVE-2019-12271 State: PUBLISHED Published: 2019-11-18T18:16:03 Last Updated: 2024-08-04T23:17:39.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/155355/Centraleyezer-Shell-Upload.html - https://link.medium.com/Y2S4ZJbMy1
CVE ID: CVE-2019-12272 State: PUBLISHED Published: 2019-05-23T14:13:31 Last Updated: 2024-08-04T23:17:38.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openwrt/luci/commits/master - https://github.com/openwrt/luci/commit/9e4b8a91384562e3baee724a52b72e30b1aa006d
CVE ID: CVE-2019-12273 State: PUBLISHED Published: 2019-12-31T14:16:20 Last Updated: 2024-08-04T23:17:38.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads. NOTE: The product is self-hosted by the customer, even though it has a *.outsystemsenterprise.com domain name.) NOTE: The vendor claims that the independent researcher created the report without any type of validation and that no such vulnerability exists Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2019050242
CVE ID: CVE-2019-12274 State: PUBLISHED Published: 2019-06-06T15:07:30 Last Updated: 2024-08-04T23:17:39.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml. Additional Analyst Notes: - CVE Program Container: References: - https://forums.rancher.com/c/announcements - https://forums.rancher.com/t/rancher-release
ogram Container: References: - https://forums.rancher.com/c/announcements - https://forums.rancher.com/t/rancher-release-v2-2-4-addresses-rancher-cve-2019-12274-and-cve-2019-12303/14466
CVE ID: CVE-2019-12276 State: PUBLISHED Published: 2019-06-05T17:30:01 Last Updated: 2024-08-04T23:17:38.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40. Additional Analyst Notes: - CVE Program Container: References: - https://grandnode.com - https://github.com/grandnode/grandnode - http://packetstormsecurity.com/files/153373/GrandNode-4.40-Path-Traver
de.com - https://github.com/grandnode/grandnode - http://packetstormsecurity.com/files/153373/GrandNode-4.40-Path-Traversal-File-Download.html
CVE ID: CVE-2019-12277 State: PUBLISHED Published: 2019-05-22T14:07:03 Last Updated: 2024-08-04T23:17:39.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blogifierdotnet/Blogifier/commit/3e2ae11f6be8aab82128f223c2916fab5a408be5
CVE ID: CVE-2019-12278 State: PUBLISHED Published: 2020-03-12T21:48:40 Last Updated: 2024-08-04T23:17:38.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numerical IP address or an alphabetic string, leading to a spoofed URL. Additional Analyst Notes: - CVE Program Container: References: - https://help.opera.com/en/latest/security-and-privacy/ - https://medium.com/bugbountywriteup/opera-andro
: References: - https://help.opera.com/en/latest/security-and-privacy/ - https://medium.com/bugbountywriteup/opera-android-address-bar-spoofing-cve-2019-12278-9ffcfd6c508c
CVE ID: CVE-2019-12279 State: PUBLISHED Published: 2019-05-22T15:04:48 Last Updated: 2024-08-04T23:17:39.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). NOTE: The vendor disputes this issues as not being a vulnerability because the issue does not seem to be a legitimate SQL Injection. The POC does not show any valid injection that can be done with the variable provided, and while the username value being passed does get used in a SQL query, it is passed through SQL escaping functions when creating the call. The vendor tried re-creating the issue with no luck
it is passed through SQL escaping functions when creating the call. The vendor tried re-creating the issue with no luck Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JameelNabbo/exploits/blob/master/nagiosxi%20username%20sql%20injection.txt - http://packetstormsecurity.com/files/153040/Nagios-XI-5.6.1-SQL-Injection.html - http://www.securityfocus.com/bid/108446
CVE ID: CVE-2019-12280 State: PUBLISHED Published: 2019-06-25T20:55:14 Last Updated: 2024-08-04T23:17:38.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jun/29 - http://packetstormsecurity.com/files/153374/PC-Doctor-Toolbox-DLL-Hijacking.html - http://www.securityfocus.com/bid/108880 - http://www.pc-doctor.com/company/pr-articles/130-pc-doctor-responds-to-software-vulnerability-report - https://www.us-cert.gov/ncas/current-activity/2019/06/21/Dell-Releases-Security-Advisory-Dell-SupportAssist - https://s
https://www.us-cert.gov/ncas/current-activity/2019/06/21/Dell-Releases-Security-Advisory-Dell-SupportAssist - https://safebreach.com/Press-Post/SafeBreach-Identifies-Serious-Vulnerability-In-PC-Doctor-Software - https://seclists.org/fulldisclosure/2019/Jun/29 - https://www.dell.com/support/article/il/en/ilbsdt1/sln317291/dsa-2019-084-dell-supportassist-for-business-pcs-and-dell-supportassist-for-home-pcs-security-update-for-pc-doctor-vulnerability?lang=en