Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19698 State: PUBLISHED Published: 2019-12-10T06:07:49 Last Updated: 2024-08-05T02:25:12.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: marc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marc-q/libwav/issues/25 - https://github.com/xiaoxiongwang/security/tree/master/libwav
CVE ID: CVE-2019-19699 State: PUBLISHED Published: 2020-04-06T15:30:11 Last Updated: 2024-08-05T02:25:12.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. To exploit the vulnerability, someone must have Admin access to the Centreon Web Interface and create a custom main.php?p=60803&type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command
.php?p=60803&type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command via the main.php?p=60901&o=c&server_id=1 URI. This is triggered via an export of the Poller Configuration. Additional Analyst Notes: - CVE Program Container: References: - https://download.centreon.com/ - https://www.centreon.com/ - https://twitter.com/SpengeSec/status/1204418071764463618 - https://spenge.pw/cves/ - https://github.com/SpengeSec/CVE-2019-19699
CVE ID: CVE-2019-19702 State: PUBLISHED Published: 2019-12-10T19:19:50 Last Updated: 2024-08-05T02:25:12.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML documents that are emailed to the address in the rua field of the DMARC records of a domain. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/modoboa/modoboa-dmarc/issues/38
CVE ID: CVE-2019-19703 State: PUBLISHED Published: 2019-12-10T19:43:28 Last Updated: 2024-08-05T02:25:12.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ktorio/ktor/issues/1467
CVE ID: CVE-2019-19704 State: PUBLISHED Published: 2020-08-08T20:52:51 Last Updated: 2024-08-05T02:25:12.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/08/06/jetbrains-security-bulletin-q2-2020/
CVE ID: CVE-2019-19705 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T17:05:23.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/ps500315-realtek-audio-driver-vulnerability
CVE ID: CVE-2019-19707 State: PUBLISHED Published: 2019-12-11T01:03:51 Last Updated: 2024-08-05T02:25:12.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint discovery packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/support/support/security-advisory/eds-g508e-g512e-g516e-series-ethernet-switches-vulnerabilities
CVE ID: CVE-2019-19708 State: PUBLISHED Published: 2019-12-11T01:33:31 Last Updated: 2024-08-05T02:25:12.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T239209 - https://gerrit.wikimedia.org/r/q/I1f99458fd2c4f6b2460dfe7a93b330ddee4400b6
CVE ID: CVE-2019-19709 State: PUBLISHED Published: 2019-12-11T01:33:11 Last Updated: 2024-08-05T02:25:12.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T239466 - https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8 - https://www.debian.org/security/2019/dsa-4592 - https://seclists.org/bugtraq/2019/Dec/48
CVE ID: CVE-2019-19712 State: PUBLISHED Published: 2019-12-17T13:59:38 Last Updated: 2024-08-05T02:25:12.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them. Additional Analyst Notes: - CVE Program Container: References: - https://contao.org/en/news.html - https://contao.org/en/security-advisories/information-disclosure-in-the-back-end.html
CVE ID: CVE-2019-19714 State: PUBLISHED Published: 2019-12-17T14:04:03 Last Updated: 2024-08-05T02:25:12.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered. Additional Analyst Notes: - CVE Program Container: References: - https://contao.org/en/news.html - https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html
CVE ID: CVE-2019-19719 State: PUBLISHED Published: 2019-12-11T03:05:55 Last Updated: 2024-08-05T02:25:12.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page. Additional Analyst Notes: - CVE Program Container: References: - https://community.tableau.com/community/security-bulletins/blog/2019/11/19/important-adv-2019-047-open-redirect-on-embeddedauthredirect-page
CVE ID: CVE-2019-19720 State: PUBLISHED Published: 2019-12-11T03:22:14 Last Updated: 2024-08-05T02:25:12.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marcIhm/yabasic/issues/36 - http://www.yabasic.de/whatsnew.html
CVE ID: CVE-2019-19721 State: PUBLISHED Published: 2020-05-15T17:28:23 Last Updated: 2024-08-05T02:25:12.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product. Additional Analyst Notes: - CVE Program Container: References: - https://www.videolan.org/security/ - http://hg.libsdl.org/SDL_image/ - https://bugs.gentoo.org/721940 - https://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=72afe7ebd8305bf4f5360293b8621cde52ec506b
CVE ID: CVE-2019-19722 State: PUBLISHED Published: 2019-12-13T16:34:48 Last Updated: 2024-08-05T02:25:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient. Additional Analyst Notes: - CVE Program Container: References: - https://dovecot.org/list/dovecot-news/2019-December/000428.html - https://dovecot.org/security.html - http://www.openwall.com/lists/oss-security/2019/12/13/3 - https://dovecot.org/pipermail/dovecot-news/2019-December/00042
http://www.openwall.com/lists/oss-security/2019/12/13/3 - https://dovecot.org/pipermail/dovecot-news/2019-December/000428.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OZCJ3RBA4WIYGN7SOV4TW2AIHXPZATK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PPB7PG5BM3MC5ZF2KHQ3UR7CZIO42BB/
CVE ID: CVE-2019-19724 State: PUBLISHED Published: 2019-12-18T20:52:24 Last Updated: 2024-08-05T02:25:12.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sylabs/singularity/releases/tag/v3.5.2 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html
CVE ID: CVE-2019-19725 State: PUBLISHED Published: 2019-12-11T00:00:00 Last Updated: 2024-08-05T02:25:12.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sysstat/sysstat/issues/242 - https://usn.ubuntu.com/4242-1/ - https://security.gentoo.org/glsa/202007-22 - https://lists.debian.org/debian-lts-announce/2022/11/msg00014.html
CVE ID: CVE-2019-19726 State: PUBLISHED Published: 2019-12-12T00:00:00 Last Updated: 2024-08-05T02:25:12.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing chpass or passwd (which are setuid root), _dl_setup_env in ld.so tries to strip LD_LIBRARY_PATH from the environment, but fails when it cannot allocate memory. Thus, the attacker is able to execute their own library code as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.openbsd.org/errata66.html -
y code as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.openbsd.org/errata66.html - https://www.openwall.com/lists/oss-security/2019/12/11/9 - https://seclists.org/bugtraq/2019/Dec/25 - http://packetstormsecurity.com/files/155658/Qualys-Security-Advisory-OpenBSD-Dynamic-Loader-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Dec/31 - http://packetstormsecurity.com/files/155764/OpenBSD-Dynamic-Loader-chpass-Privilege-Escalation.html - http://www.openwall.com/lists/oss-security/2023/10/03/2 - http://seclists.org/fulldisclosure/2023/Oct/11 - http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
CVE ID: CVE-2019-19727 State: PUBLISHED Published: 2020-01-13T18:14:55 Last Updated: 2024-08-05T02:25:12.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.schedmd.com/pipermail/slurm-announce/ - https://bugzilla.suse.com/show_bug.cgi?id=1155784 - https://www.schedmd.com/news.php - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00038.html
CVE ID: CVE-2019-19728 State: PUBLISHED Published: 2020-01-13T18:14:01 Last Updated: 2024-08-05T02:25:12.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges. Additional Analyst Notes: - CVE Program Container: References: - https://lists.schedmd.com/pipermail/slurm-announce/ - https://bugzilla.suse.com/show_bug.cgi?id=1159692 - https://www.schedmd.com/news.php - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00038.html - https://www.debian.org/security/2021/dsa-4841
CVE ID: CVE-2019-19729 State: PUBLISHED Published: 2019-12-11T19:56:01 Last Updated: 2024-08-05T02:25:12.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects _bsontype==ObjectID in the user-input object. As a result, objects in arbitrary forms can bypass formatting if they have a valid bsontype. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/williamkapke/bson-objectid/issues/30 - https
al Analyst Notes: - CVE Program Container: References: - https://github.com/williamkapke/bson-objectid/issues/30 - https://www.npmjs.com/package/bson-objectid
CVE ID: CVE-2019-19731 State: PUBLISHED Published: 2019-12-16T16:26:04 Last Updated: 2024-08-05T02:25:12.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for code execution by uploading a specially crafted Windows shortcut file and writing the file to the Startup folder (because an incomplete blacklist of file extensions allows Windows shortcut files to be uploaded). Additional Analyst Notes: - CVE Program Container: References: - http://www.roxyfileman.com/download - http://packetstormsecurity.com/files
Notes: - CVE Program Container: References: - http://www.roxyfileman.com/download - http://packetstormsecurity.com/files/155666/Roxy-Fileman-1.4.5-For-.NET-Directory-Traversal.html
CVE ID: CVE-2019-19732 State: PUBLISHED Published: 2019-12-30T16:59:24 Last Updated: 2024-08-05T02:25:12.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 - https://github.com/jra89/CVE-2019-19732
CVE ID: CVE-2019-19733 State: PUBLISHED Published: 2019-12-30T16:59:40 Last Updated: 2024-08-05T02:25:12.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the fileIds parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 - https://github.com/jra89/CVE-2019-19733
CVE ID: CVE-2019-19734 State: PUBLISHED Published: 2019-12-30T16:59:50 Last Updated: 2024-08-05T02:25:12.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 - https://github.com/jra89/CVE-2019-19734
CVE ID: CVE-2019-19735 State: PUBLISHED Published: 2019-12-30T17:00:02 Last Updated: 2024-08-05T02:25:12.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 - https://github.com/jra89/CVE-2019-19735
CVE ID: CVE-2019-19736 State: PUBLISHED Published: 2019-12-30T17:00:12 Last Updated: 2024-08-05T02:25:12.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be used by attackers to obtain the cookie via cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459
CVE ID: CVE-2019-19737 State: PUBLISHED Published: 2019-12-30T17:00:28 Last Updated: 2024-08-05T02:25:12.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies, allowing the cookie to be sent in cross-site requests and potentially be used in cross-site request forgery attacks. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459
CVE ID: CVE-2019-19738 State: PUBLISHED Published: 2019-12-30T17:00:40 Last Updated: 2024-08-05T02:25:12.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 - https://github.com/jra89/CVE-2019-19738
CVE ID: CVE-2019-19739 State: PUBLISHED Published: 2019-12-30T16:46:00 Last Updated: 2024-08-05T02:25:12.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent over cleartext channels. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459
CVE ID: CVE-2019-19740 State: PUBLISHED Published: 2019-12-12T02:13:21 Last Updated: 2024-08-05T02:25:12.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www2.octeth.com/blog/ - https://github.com/BrunoBulle/Oempro_4.7/blob/master/README.md - http://packetstormsecurity.com/files/156113/Octeth-Oempro-4.8-SQL-Injection.html
CVE ID: CVE-2019-19741 State: PUBLISHED Published: 2020-02-20T15:44:15 Last Updated: 2024-08-05T02:25:12.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's executable file instead of its in-memory process (which can be significantly different from the executable file due to, for example, DLL injection). Data transmitted over the pipe is encrypted using a static key. Instead of hooking the p
o, for example, DLL injection). Data transmitted over the pipe is encrypted using a static key. Instead of hooking the pipe communication directly via WriteFileEx(), this can be bypassed by hooking the EVP_EncryptUpdate() function of libeay32.dll. The pipe takes the command CreateDirectory to create a directory and adjust the directory DACL. Calls to this function can be intercepted, the directory and the DACL can be replaced, and the manipulated DACL is written. Arbitrary DACL write is further achieved by creating a hardlink in a user-controlled directory that points to (for example) a service binary. The DACL is then written to this service binary, which results in escalation of privileges
or example) a service binary. The DACL is then written to this service binary, which results in escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40tobiasgyoerfi/ea-origin-10-5-55-33574-createdirectory-arbitrary-dacl-write-privilege-escalation-cve-2019-19741-5f18adfabb27
CVE ID: CVE-2019-19742 State: PUBLISHED Published: 2019-12-18T12:19:49 Last Updated: 2024-08-05T02:25:12.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field. Additional Analyst Notes: - CVE Program Container: References: - https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf - https://www.dlink.com/en/security-bulletin - https://infosecsanyam.blogspot.com/2019/12/d-link-dir-615-wireless-router.html - https://www.exploit-db.com/exploits/47776 - https://pastebin.com/edit/MZV6DNg7 - https://medium.com/%40infosecsanyam/d-link-dir-615-wi
ploit-db.com/exploits/47776 - https://pastebin.com/edit/MZV6DNg7 - https://medium.com/%40infosecsanyam/d-link-dir-615-wireless-router-persistent-cross-site-scripting-6ee00f5c694d
CVE ID: CVE-2019-19743 State: PUBLISHED Published: 2019-12-16T16:35:38 Last Updated: 2024-08-05T02:25:12.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin - https://www.exploit-db.com/exploits/47778 - https://www.infosecsanyam.blogspot.com/2019/12/d-link-dir-615-wireless-routervertical.html - https://pastebin.com/wHiRGdEG - http://seclists.org/fulldisclosure/2019/Dec/35
CVE ID: CVE-2019-19745 State: PUBLISHED Published: 2019-12-17T14:17:35 Last Updated: 2024-08-05T02:25:12.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contao 4.0 through 4.8.5 allows PHP local file inclusion. A back end user with access to the form generator can upload arbitrary files and execute them on the server. Additional Analyst Notes: - CVE Program Container: References: - https://contao.org/en/news.html - https://contao.org/en/security-advisories/unrestricted-file-uploads.html
CVE ID: CVE-2019-19746 State: PUBLISHED Published: 2019-12-12T02:22:33 Last Updated: 2024-08-05T02:25:12.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/57/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILJM2G6NM5MMBKTT5CH23TAI6DJGNW36/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7XOY5NXUZ6JRBBPYA3CXWGRGQTSDVVG2/