Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-18345 State: PUBLISHED Published: 2019-12-12T13:54:35 Last Updated: 2024-08-05T01:54:13.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the attacker can view all data the attacked user can view, as well as perform all actions in the name of the user. If the user is an administrator, the attacker can for example add a new admin user to gain full access to the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.davical.org/ - https://wiki.davical.org/index.php/Main_Page
t Notes: - CVE Program Container: References: - https://www.davical.org/ - https://wiki.davical.org/index.php/Main_Page - https://gitlab.com/davical-project/davical/blob/master/ChangeLog - https://hackdefense.com/publications/cve-2019-18345-davical-caldav-server-vulnerability/ - http://packetstormsecurity.com/files/155630/DAViCal-CalDAV-Server-1.1.8-Reflective-Cross-Site-Scripting.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00016.html - https://www.debian.org/security/2019/dsa-4582 - https://seclists.org/bugtraq/2019/Dec/30
CVE ID: CVE-2019-18346 State: PUBLISHED Published: 2019-12-04T17:15:07 Last Updated: 2024-08-05T01:54:13.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests in the name of the user to the application. If the attacked user is an administrator, the attacker could for example add a new admin user. Additional Analyst Notes: - CVE Program Container: References: - https://www.davical.org/ - https://gitlab.com/davical-project/davical/blob/master/ChangeLog - https://hackdefense.com/publications/cve-2019-18346-davical-caldav-server-
vical-project/davical/blob/master/ChangeLog - https://hackdefense.com/publications/cve-2019-18346-davical-caldav-server-vulnerability/ - http://seclists.org/fulldisclosure/2019/Dec/17 - http://seclists.org/fulldisclosure/2019/Dec/19 - http://seclists.org/fulldisclosure/2019/Dec/18 - http://packetstormsecurity.com/files/155629/DAViCal-CalDAV-Server-1.1.8-Cross-Site-Request-Forgery.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00016.html - https://www.debian.org/security/2019/dsa-4582 - https://seclists.org/bugtraq/2019/Dec/30
CVE ID: CVE-2019-18347 State: PUBLISHED Published: 2019-12-04T17:22:37 Last Updated: 2024-08-05T01:54:13.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS issue was discovered in DAViCal through 1.1.8. It does not adequately sanitize output of various fields that can be set by unprivileged users, making it possible for JavaScript stored in those fields to be executed by another (possibly privileged) user. Affected database fields include Username, Display Name, and Email. Additional Analyst Notes: - CVE Program Container: References: - https://www.davical.org/ - https://gitlab.com/davical-project/davical/blob/master/ChangeLog - https://hackdefense.com/publications/
.davical.org/ - https://gitlab.com/davical-project/davical/blob/master/ChangeLog - https://hackdefense.com/publications/cve-2019-18347-davical-caldav-server-vulnerability/ - http://seclists.org/fulldisclosure/2019/Dec/17 - http://seclists.org/fulldisclosure/2019/Dec/19 - http://seclists.org/fulldisclosure/2019/Dec/18 - http://packetstormsecurity.com/files/155628/DAViCal-CalDAV-Server-1.1.8-Persistent-Cross-Site-Scripting.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00016.html - https://www.debian.org/security/2019/dsa-4582 - https://seclists.org/bugtraq/2019/Dec/30
CVE ID: CVE-2019-18348 State: PUBLISHED Published: 2019-10-23T16:31:22 Last Updated: 2024-08-05T01:54:13.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v
issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJ
/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ - https://usn.ubuntu.com/4333-1/ - https://usn.ubuntu.com/4333-2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://bugzilla.redhat.com/
s-announce/2020/07/msg00011.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1727276 - https://bugs.python.org/issue30458#msg347282 - https://security.netapp.com/advisory/ntap-20191107-0004/
CVE ID: CVE-2019-18349 State: PUBLISHED Published: 2019-11-21T17:55:07 Last Updated: 2024-08-05T01:54:14.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: HotkeyP through 4.9 r96 allows privilege escalation in the privilege function in Commands.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/hotkeyp/code/HEAD/tree/trunk/source/Commands.cpp - https://sourceforge.net/p/hotkeyp/code/HEAD/tree/trunk/WhatsNew.txt - https://gist.github.com/matt-thibodeau/8bf16bba4c2a13978ed4e5fd08fbe2c2
CVE ID: CVE-2019-18350 State: PUBLISHED Published: 2019-10-23T17:24:34 Last Updated: 2024-08-05T01:54:14.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ant-design/ant-design-pro/pull/5461
CVE ID: CVE-2019-18351 State: REJECTED Published: 2021-03-05T01:17:06 Last Updated: 2021-09-07T21:47:09 Description: No description available.
CVE ID: CVE-2019-18352 State: PUBLISHED Published: 2020-02-18T15:15:00 Last Updated: 2024-08-05T01:54:14.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2019-020
CVE ID: CVE-2019-18355 State: PUBLISHED Published: 2019-10-23T18:38:15 Last Updated: 2024-08-05T01:54:14.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7. Additional Analyst Notes: - CVE Program Container: References: - https://thycotic.force.com/support/s/article/SS-RN-EXT-Secret-Server-10-7-000000-Legacy-Release-Notes
CVE ID: CVE-2019-18356 State: PUBLISHED Published: 2019-10-23T18:38:24 Last Updated: 2024-08-05T01:54:14.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://thycotic.force.com/support/s/article/SS-RN-EXT-Secret-Server-10-7-000000-Legacy-Release-Notes
CVE ID: CVE-2019-18357 State: PUBLISHED Published: 2019-10-23T18:38:35 Last Updated: 2024-08-05T01:54:13.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://thycotic.force.com/support/s/article/SS-RN-EXT-Secret-Server-10-7-000000-Legacy-Release-Notes
CVE ID: CVE-2019-18359 State: PUBLISHED Published: 2019-10-23T19:05:48 Last Updated: 2024-11-15T14:51:34.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/mp3gain/bugs/46/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.html
CVE ID: CVE-2019-18360 State: PUBLISHED Published: 2019-10-31T14:02:29 Last Updated: 2024-08-05T01:54:14.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18361 State: PUBLISHED Published: 2019-10-31T14:37:38 Last Updated: 2024-08-05T01:54:14.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18362 State: PUBLISHED Published: 2019-10-31T14:43:55 Last Updated: 2024-08-05T01:54:14.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains MPS before 2019.2.2 exposed listening ports to the network. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18363 State: PUBLISHED Published: 2019-10-31T14:48:59 Last Updated: 2024-08-05T01:54:14.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18364 State: PUBLISHED Published: 2019-10-31T14:54:36 Last Updated: 2024-08-05T01:54:14.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18365 State: PUBLISHED Published: 2019-10-31T15:12:10 Last Updated: 2024-08-05T01:54:14.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18366 State: PUBLISHED Published: 2019-10-31T15:16:41 Last Updated: 2024-08-05T01:54:13.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18367 State: PUBLISHED Published: 2019-10-31T15:20:03 Last Updated: 2024-08-05T01:54:14.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18368 State: PUBLISHED Published: 2019-10-31T15:24:16 Last Updated: 2024-08-05T01:54:14.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18369 State: PUBLISHED Published: 2019-10-31T15:25:56 Last Updated: 2024-08-05T01:54:14.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/
CVE ID: CVE-2019-18370 State: PUBLISHED Published: 2019-10-23T20:01:55 Last Updated: 2024-08-05T01:54:14.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh script for testing upload and download speeds reads a URL list from /tmp/speedtest_urls.xml, and there is a command injection vulnerability, as demonstrated by api/xqnetdetect/netspeed. Additional Analyst Notes: - CVE Program Containe
d injection vulnerability, as demonstrated by api/xqnetdetect/netspeed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC/blob/master/remote_command_execution_vulnerability.py
CVE ID: CVE-2019-18371 State: PUBLISHED Published: 2019-10-23T20:02:12 Last Updated: 2024-08-05T01:54:14.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC/blob/master/arbitrary_file_read_vulnerability.py
CVE ID: CVE-2019-18372 State: PUBLISHED Published: 2019-11-15T17:41:41 Last Updated: 2024-08-05T01:54:14.410Z Vendors: n/a Products: Symantec Endpoint Protection Problem Types: Privilege Escalation Description: Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1488.html
CVE ID: CVE-2019-18373 State: PUBLISHED Published: 2019-11-18T20:57:35 Last Updated: 2024-08-05T01:54:14.199Z Vendors: Symantec Products: Norton AppLock Problem Types: Security Bypass Description: Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1496.html
CVE ID: CVE-2019-18374 State: PUBLISHED Published: 2019-11-25T16:22:15 Last Updated: 2024-08-05T01:54:14.052Z Vendors: Symantec Products: Critical System Protection (CSP) Problem Types: Authentication Bypass Description: Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1498.html
CVE ID: CVE-2019-18375 State: PUBLISHED Published: 2020-04-09T23:16:17 Last Updated: 2024-08-05T01:54:14.137Z Vendors: n/a Products: Symantec Advanced Secure Gateway (ASG) and ProxySG Problem Types: Session hijacking Description: The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1752
CVE ID: CVE-2019-18376 State: PUBLISHED Published: 2020-04-09T23:11:48 Last Updated: 2024-08-05T01:54:14.033Z Vendors: n/a Products: Symantec Management Center (MC) Problem Types: Information disclosure Description: A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CSRF attacks against MC. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1751
CVE ID: CVE-2019-18377 State: PUBLISHED Published: 2019-12-11T15:49:05 Last Updated: 2024-08-05T01:54:14.488Z Vendors: n/a Products: Symantec Messaging Gateway Problem Types: Privilege Escalation Description: Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1501.html
CVE ID: CVE-2019-18378 State: PUBLISHED Published: 2019-12-11T15:49:17 Last Updated: 2024-08-05T01:54:13.742Z Vendors: n/a Products: Symantec Messaging Gateway Problem Types: XSS Description: Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1501.html
CVE ID: CVE-2019-18379 State: PUBLISHED Published: 2019-12-11T15:49:28 Last Updated: 2024-08-05T01:54:14.113Z Vendors: n/a Products: Symantec Messaging Gateway Problem Types: SSRF Description: Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attacker send crafted requests from the backend server of a vulnerable web application or access services available through the loopback interface. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1501.html
CVE ID: CVE-2019-18380 State: PUBLISHED Published: 2019-12-09T17:28:11 Last Updated: 2024-08-05T01:54:13.652Z Vendors: Symantec Corporation Products: Industrial Control System Protection (ICSP) Problem Types: Unauthorized Access Description: Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or modify application user accounts without proper authentication. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1500.html
CVE ID: CVE-2019-18381 State: PUBLISHED Published: 2019-12-05T17:17:35 Last Updated: 2024-08-05T01:54:13.992Z Vendors: n/a Products: Norton Password Manager Problem Types: CORS Description: Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1499.html
CVE ID: CVE-2019-18382 State: PUBLISHED Published: 2019-10-23T21:00:32 Last Updated: 2024-08-05T01:54:14.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gusrmsdlrh/CVE-PE204
CVE ID: CVE-2019-18383 State: PUBLISHED Published: 2019-10-23T21:00:21 Last Updated: 2024-08-05T01:54:14.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramaster_TNAS-00E43A_config_backup.bin without permission. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gusrmsdlrh/CVE-Reserved/blob/master/README.md
CVE ID: CVE-2019-18384 State: PUBLISHED Published: 2019-10-23T21:00:08 Last Updated: 2024-08-05T01:54:14.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=*public*%25252Fadmin_OnlyRead.txt substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gusrmsdlrh/CVE-Reserved2/blob/master/README.md
CVE ID: CVE-2019-18385 State: PUBLISHED Published: 2019-10-23T20:59:54 Last Updated: 2024-08-05T01:54:14.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gusrmsdlrh/CVE-Reserved3/blob/master/README.md
CVE ID: CVE-2019-18386 State: PUBLISHED Published: 2020-01-07T18:47:06 Last Updated: 2024-08-05T01:54:14.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when receiving specifically crafted message payloads over a systems management communication channel Additional Analyst Notes: - CVE Program Container: References: - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=53