Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7285 State: PUBLISHED Published: 2019-12-18T17:33:15 Last Updated: 2024-08-04T20:46:45.696Z Vendors: Apple Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - h
otes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209603 - https://support.apple.com/HT209604 - https://support.apple.com/HT209605
CVE ID: CVE-2019-7286 State: PUBLISHED Published: 2019-12-18T17:33:16.000Z Last Updated: 2025-10-21T23:35:55.589Z Vendors: Apple Products: iOS, macOS Problem Types: An application may be able to gain elevated privileges Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/HT209601 - https://support.apple.com/HT209602 - https://support.apple.com/HT209520 - https://support.apple.com/HT209521
CVE ID: CVE-2019-7287 State: PUBLISHED Published: 2019-12-18T17:33:15.000Z Last Updated: 2025-10-21T23:35:55.813Z Vendors: Apple Products: iOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/HT209520
CVE ID: CVE-2019-7288 State: PUBLISHED Published: 2020-10-27T19:23:12 Last Updated: 2024-08-04T20:46:45.919Z Vendors: Apple Products: iOS, macOS Problem Types: A thorough security audit of the FaceTime service uncovered an issue with Live Photos Description: The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos . Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT209520 - https://support.apple.com/en-us/HT209521
CVE ID: CVE-2019-7289 State: PUBLISHED Published: 2019-12-18T17:33:15 Last Updated: 2024-08-04T20:46:46.112Z Vendors: Apple Products: Shortcuts Problem Types: A local user may be able to view senstive user information Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Shortcuts 2.1.3 for iOS. A local user may be able to view senstive user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209522
CVE ID: CVE-2019-7290 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T20:46:46.246Z Vendors: Apple Products: Shortcuts Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209522
CVE ID: CVE-2019-7291 State: PUBLISHED Published: 2020-10-27T19:24:01 Last Updated: 2024-08-04T20:46:46.360Z Vendors: Apple Products: AirPort Base Station Firmware Update Problem Types: An attacker in a privileged position may be able to perform a denial of service attack Description: A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210090 - https://support.apple.com/en-us/HT21
: - CVE Program Container: References: - https://support.apple.com/en-us/HT210090 - https://support.apple.com/en-us/HT210091
CVE ID: CVE-2019-7292 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T20:46:46.164Z Vendors: Apple Products: iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may result in the disclosure of process memory Description: A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://supp
mory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209603 - https://support.apple.com/HT209604 - https://support.apple.com/HT209605 - https://support.apple.com/HT209602
CVE ID: CVE-2019-7293 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T20:46:45.552Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A local user may be able to read kernel memory Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to read kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602
CVE ID: CVE-2019-7295 State: PUBLISHED Published: 2019-01-31T21:00:00Z Last Updated: 2024-09-16T22:45:07.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/typora/typora-issues/issues/2129
CVE ID: CVE-2019-7296 State: PUBLISHED Published: 2019-01-31T21:00:00Z Last Updated: 2024-09-16T22:01:46.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/typora/typora-issues/issues/2131
CVE ID: CVE-2019-7297 State: PUBLISHED Published: 2019-01-31T22:00:00 Last Updated: 2024-08-04T20:46:46.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leonW7/
hen they control this input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leonW7/D-Link/blob/master/Vul_1.md - http://www.securityfocus.com/bid/106815
CVE ID: CVE-2019-7298 State: PUBLISHED Published: 2019-02-01T06:00:00 Last Updated: 2024-08-04T20:46:46.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of ' /bin/telnetd' for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input. Additional Analyst Notes: - CVE Program Containe
attacker can execute any command remotely when they control this input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106814 - https://github.com/leonW7/D-Link/blob/master/Vul_2.md
CVE ID: CVE-2019-7299 State: PUBLISHED Published: 2019-03-18T19:42:49 Last Updated: 2024-08-04T20:46:46.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php. Additional Analyst Notes: - CVE Program Container: References: - https://cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system/ - https://wor
://cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system/ - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers - https://wpvulndb.com/vulnerabilities/9235
CVE ID: CVE-2019-7300 State: PUBLISHED Published: 2019-02-01T09:00:00Z Last Updated: 2024-09-16T23:21:49.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/01/rce-in-artica.html - https://github.com/c610/tmp/blob/master/aRtiCE.py
CVE ID: CVE-2019-7301 State: PUBLISHED Published: 2019-02-01T09:00:00 Last Updated: 2024-08-04T20:46:46.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metacharacters in the index.cgi?action=View_Cert certname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106812 - https://code610.blogspot.com/2019/01/rce-in-zenload-balancer.html
CVE ID: CVE-2019-7303 State: PUBLISHED Published: 2019-04-23T15:57:32.592636Z Last Updated: 2024-09-17T01:46:16.086Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Canonical Products: snapd Problem Types: CWE-628 Description: A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4. Additional Analyst Notes: -
ich ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3917-1/ - https://www.exploit-db.com/exploits/46594
CVE ID: CVE-2019-7304 State: PUBLISHED Published: 2019-04-23T15:57:32.649432Z Last Updated: 2024-09-16T18:38:22.569Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: snapd Problem Types: Type confusion when performing access control check Description: Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3887-1/ - https://www.exploit-db.com/exploits/46361 - https://www.exploit-db.com/exploits/46362
CVE ID: CVE-2019-7305 State: PUBLISHED Published: 2020-04-09T23:50:11.945008Z Last Updated: 2024-09-17T03:12:40.148Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Canonical Products: eXtplorer Problem Types: CWE-200 Description: Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information disclosure and potentially remote code execution on the web server. This issue affects all versions of eXtplorer in Ubuntu and Debian Add
tentially remote code execution on the web server. This issue affects all versions of eXtplorer in Ubuntu and Debian Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1822013
CVE ID: CVE-2019-7306 State: PUBLISHED Published: 2020-04-17T01:45:14.788109Z Last Updated: 2024-09-17T02:42:21.021Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Canonical Products: byobu Problem Types: TODO Description: Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu Additional Analyst Notes: - CVE Program Container: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7306 - https://bugs.launchpad.net/ubuntu/+source/byobu/+bug/1827202
CVE ID: CVE-2019-7307 State: PUBLISHED Published: 2019-08-29T14:40:18.750978Z Last Updated: 2024-09-16T23:56:02.156Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Ubuntu Products: apport Problem Types: CWE-367 Description: Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by t
pport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-7307.html - https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1830858 - http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
CVE ID: CVE-2019-7308 State: PUBLISHED Published: 2019-02-01T22:00:00 Last Updated: 2024-08-04T20:46:45.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d3bd7413e0ca40b60cf60d4003246d067cafdeda - https://
//git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d3bd7413e0ca40b60cf60d4003246d067cafdeda - https://bugs.chromium.org/p/project-zero/issues/detail?id=1711 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=979d63d50c0c0f7bc537bf821e056cc9fe5abd38 - https://github.com/torvalds/linux/commit/d3bd7413e0ca40b60cf60d4003246d067cafdeda - http://www.securityfocus.com/bid/106827 - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3931-1/ - https://usn.ubuntu.com/3931-2/ - https://usn.ubuntu.com/3930-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html - https:/
- https://usn.ubuntu.com/3930-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html - https://support.f5.com/csp/article/K43030517 - https://support.f5.com/csp/article/K43030517?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-7309 State: PUBLISHED Published: 2019-02-03T02:00:00 Last Updated: 2024-08-04T20:46:46.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106835 - https://sourceware.org/bugzilla/show_bug.cgi?id=24155 - https://sourceware.org/ml/libc-alpha/2019-02/msg00041.html - https://security.gentoo.org/glsa/202006-04
CVE ID: CVE-2019-7310 State: PUBLISHED Published: 2019-02-03T03:00:00 Last Updated: 2024-08-04T20:46:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/issues/717 - http://www.securityfocus.com/bid/106829 - https://lists.debian.org/debian-lts-announce/2019/03/msg00008.h
r/issues/717 - http://www.securityfocus.com/bid/106829 - https://lists.debian.org/debian-lts-announce/2019/03/msg00008.html - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797 - https://usn.ubuntu.com/3886-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI7NLDN2HUEU4ZW3D7XPHOAEGT2CKDRO/ - https://access.redhat.com/errata/RHSA-2019:2022 - https://access.redhat.com/errata/RHSA-2019:2713 - https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
CVE ID: CVE-2019-7311 State: PUBLISHED Published: 2019-06-06T15:41:42 Last Updated: 2024-08-04T20:46:45.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router. The admin password is stored in base64 cleartext in an "admin-auth" cookie. An attacker sniffing the network at the time of login could acquire the router's admin password. Alternatively, gaining physical access to the victim's compu
he time of login could acquire the router's admin password. Alternatively, gaining physical access to the victim's computer soon after an administrative login could result in compromise. Additional Analyst Notes: - CVE Program Container: References: - https://robot-security.blogspot.com - http://www.x0rsecurity.com/2019/05/03/my-first-cve-linksys-wrt-1300-acs-cve-2019-7311/
CVE ID: CVE-2019-7312 State: PUBLISHED Published: 2019-02-03T08:00:00Z Last Updated: 2024-09-17T01:21:55.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content
0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it. Additional Analyst Notes: - CVE Program Container: References: - https://www.primx.eu/en/bulletins/security-bulletin-19110545
CVE ID: CVE-2019-7313 State: PUBLISHED Published: 2019-02-03T08:00:00Z Last Updated: 2024-09-16T23:21:39.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code
CVE ID: CVE-2019-7314 State: PUBLISHED Published: 2019-02-04T02:00:00 Last Updated: 2024-08-04T20:46:46.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html - http://www.live555.com/liveMedia/public/changelog.txt - http://lists.live555.com/pipermail/live-devel/2019-February/021143.ht
//www.live555.com/liveMedia/public/changelog.txt - http://lists.live555.com/pipermail/live-devel/2019-February/021143.html - https://seclists.org/bugtraq/2019/Mar/22 - https://www.debian.org/security/2019/dsa-4408 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html - https://security.gentoo.org/glsa/202005-06 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html
CVE ID: CVE-2019-7315 State: PUBLISHED Published: 2019-06-17T18:31:55 Last Updated: 2024-08-04T20:46:46.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability (4.x versions exist only for other Genie Access products). Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/cve-2019-7315-genie-access-wip3bvaf-ip-camera-directory-traversal/
CVE ID: CVE-2019-7316 State: PUBLISHED Published: 2019-02-04T07:00:00 Last Updated: 2024-08-04T20:46:46.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/tree/master/Chat2 - https://packetstormsecurity.com/files/125780 - https://kc.mcafee.com/corporate/index?page=content&id=SB10330