Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7481 State: PUBLISHED Published: 2019-12-17T22:25:16.000Z Last Updated: 2025-10-21T23:35:56.139Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-89 Description: Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0016
CVE ID: CVE-2019-7482 State: PUBLISHED Published: 2019-12-19T00:35:43 Last Updated: 2024-08-04T20:54:27.040Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-121 Description: Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0017
CVE ID: CVE-2019-7483 State: PUBLISHED Published: 2019-12-19T00:35:43.000Z Last Updated: 2025-10-21T23:35:54.935Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-22 Description: In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018
CVE ID: CVE-2019-7484 State: PUBLISHED Published: 2019-12-19T00:35:44 Last Updated: 2024-08-04T20:54:27.033Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-89 Description: Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0019
CVE ID: CVE-2019-7485 State: PUBLISHED Published: 2019-12-19T00:35:44 Last Updated: 2024-08-04T20:54:27.004Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-120 Description: Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0020
CVE ID: CVE-2019-7486 State: PUBLISHED Published: 2019-12-19T00:35:44 Last Updated: 2024-08-04T20:54:27.014Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-94 Description: Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021
CVE ID: CVE-2019-7487 State: PUBLISHED Published: 2019-12-19T00:35:45 Last Updated: 2024-08-04T20:54:28.232Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-428 Description: Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0022
CVE ID: CVE-2019-7488 State: PUBLISHED Published: 2019-12-23T21:50:12 Last Updated: 2024-08-04T20:54:27.831Z Vendors: SonicWall Products: Email Security Appliance Problem Types: CWE-255 Description: Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0014
CVE ID: CVE-2019-7489 State: PUBLISHED Published: 2019-12-23T21:50:12 Last Updated: 2024-08-04T20:54:27.817Z Vendors: SonicWall Products: Email Security Appliance Problem Types: CWE-285 Description: A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0023
CVE ID: CVE-2019-7524 State: PUBLISHED Published: 2019-03-28T13:45:20 Last Updated: 2024-08-04T20:54:27.055Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components. Additional Analyst Notes: - CVE Program Container: References: - https://dovecot.org/security.html - https://dovecot.org/list/dovecot-news/2019-March/000403.html - http://www.openwall.com/lists/oss-security/2019/03/28/1
- https://dovecot.org/list/dovecot-news/2019-March/000403.html - http://www.openwall.com/lists/oss-security/2019/03/28/1 - https://seclists.org/bugtraq/2019/Mar/59 - https://www.debian.org/security/2019/dsa-4418 - https://lists.debian.org/debian-lts-announce/2019/03/msg00038.html - https://usn.ubuntu.com/3928-1/ - http://www.securityfocus.com/bid/107672 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00067.html - https://security.gentoo.org/glsa/201904-19 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4XLI55NGRDTGMVOPYFCPPFNPA5VKYSSY/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4XLI55NGRDTGMVOPYFCPPFNPA5VKYSSY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFZ5OWRIZGIWZJ5PTNVWWZNLLNH4XYS/
CVE ID: CVE-2019-7535 State: PUBLISHED Published: 2019-02-07T15:00:00 Last Updated: 2024-08-04T20:54:27.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/nenf/2f16cd547c2afe166d1cb3f88f18bf81
CVE ID: CVE-2019-7537 State: PUBLISHED Published: 2019-03-21T19:55:42 Last Updated: 2024-08-04T20:54:27.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pytroll/donfig/issues/5 - https://github.com/pytroll/donfig/commits/master
CVE ID: CVE-2019-7539 State: PUBLISHED Published: 2019-03-21T20:53:57 Last Updated: 2024-08-04T20:54:27.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: A code injection issue was discovered in ipycache through 2016-05-31. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rossant/ipycache/issues/47
CVE ID: CVE-2019-7541 State: PUBLISHED Published: 2019-05-07T18:50:54 Last Updated: 2024-08-04T20:54:27.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151657/Rukovoditel-Project-Management-CRM-2.4.1-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/46366/ - https://blog.rukovoditel.net/releases/
CVE ID: CVE-2019-7543 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-17T03:53:33.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/KindEditor
CVE ID: CVE-2019-7544 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-16T19:09:50.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name Field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/MyWebSQL
CVE ID: CVE-2019-7545 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-16T17:18:26.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/DbNinja
CVE ID: CVE-2019-7546 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-16T20:42:50.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/SIDU/Reflected%20XSS
CVE ID: CVE-2019-7547 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-16T20:01:28.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SIDU 6.0. Because the database name is not strictly filtered, the attacker can insert a name containing an XSS Payload, leading to stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/SIDU/Stored%20XSS
CVE ID: CVE-2019-7548 State: PUBLISHED Published: 2019-02-06T21:00:00 Last Updated: 2024-08-04T20:54:27.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/03/msg00020.html - https://access.redhat.com/errata/RHSA-2019:0984 - https://access.redhat.com/errata/RHSA-2019:0981 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/
use.org/opensuse-security-announce/2019-09/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00016.html - https://www.oracle.com/security-alerts/cpujan2021.html - https://github.com/sqlalchemy/sqlalchemy/issues/4481#issuecomment-461204518 - https://github.com/no-security/sqlalchemy_test - https://lists.debian.org/debian-lts-announce/2021/11/msg00005.html
CVE ID: CVE-2019-7549 State: PUBLISHED Published: 2019-05-29T15:42:42 Last Updated: 2024-08-04T20:54:27.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.5.10, 11.6.x before 11.6.8, and 11.7.x before 11.7.3. It has Incorrect Access Control. The GitLab pipelines feature is vulnerable to authorization issues that allow unauthorized users to view job information. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54358
CVE ID: CVE-2019-7550 State: PUBLISHED Published: 2019-02-12T20:00:00 Last Updated: 2024-08-04T20:54:28.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/2019/02/information-disclosure-in-jforum-2-1-x-syntax/
CVE ID: CVE-2019-7551 State: PUBLISHED Published: 2019-04-10T16:31:36 Last Updated: 2024-08-04T20:54:27.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2019/03/cantemo-portal-version-3-8-4-cross-site-scripting/ - https://www.bishopfox.com/blog/news-category/advisories/ - https://doc.cantemo.c
l-version-3-8-4-cross-site-scripting/ - https://www.bishopfox.com/blog/news-category/advisories/ - https://doc.cantemo.com/latest/ReleaseNotes/intro.html#version-3-4-9 - https://blog-posts--cantemo.netlify.com/news/2019/03/cantemo-portal-xss-vulnerabilities/
CVE ID: CVE-2019-7552 State: PUBLISHED Published: 2019-06-06T15:36:18 Last Updated: 2024-08-04T20:54:27.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpscriptsmall.com/product/investment-mlm/ - https://securityhitlist.blogspot.com/2019/02/cve-2019-7552-php-scripts-mall.html
CVE ID: CVE-2019-7553 State: PUBLISHED Published: 2019-06-06T00:00:00 Last Updated: 2024-08-04T20:54:27.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field. Additional Analyst Notes: - CVE Program Container: References: - https://securityhitlist.blogspot.com/2019/02/cve-2019-7553-stores-xss-in-php-scripts.html
CVE ID: CVE-2019-7554 State: PUBLISHED Published: 2019-06-06T15:27:53 Last Updated: 2024-08-04T20:54:27.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpscriptsmall.com - https://securityhitlist.blogspot.com/2019/02/cve-2019-7554-reflected-xss-in-api.html
CVE ID: CVE-2019-7559 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:27.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: In btor2parser/btor2parser.c in Boolector Btor2Tools before 2019-01-15, opening a specially crafted input file leads to an out of bounds write in pusht_bfr. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Boolector/boolector/issues/30
CVE ID: CVE-2019-7560 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:28.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Boolector/boolector/issues/29 - https://github.com/Boolector/boolector/issues/28
CVE ID: CVE-2019-7564 State: PUBLISHED Published: 2019-05-07T18:52:43 Last Updated: 2024-08-04T20:54:27.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151595/Coship-Wireless-Router-4.0.0.x-5.0.0.x-Authentication-Bypass.html
CVE ID: CVE-2019-7566 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:27.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.1.8 has CSRF via admin/users/new/add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/17
CVE ID: CVE-2019-7567 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:27.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/10
CVE ID: CVE-2019-7568 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:28.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php?act=index request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baijiacms/baijiacmsV4/issues/2
CVE ID: CVE-2019-7569 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:28.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DOYO (aka doyocms) 2.3(20140425 update). There is a CSRF vulnerability that can add a super administrator account via admin.php?c=a_adminuser&a=add&run=1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/millken/doyocms/issues/1
CVE ID: CVE-2019-7570 State: PUBLISHED Published: 2019-02-07T07:00:00 Last Updated: 2024-08-04T20:54:28.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/yangfan0502/article/details/86189065
CVE ID: CVE-2019-7572 State: PUBLISHED Published: 2019-02-07T00:00:00 Last Updated: 2024-08-04T20:54:28.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/03/msg00016.html - https://bugzilla.libsdl.org/show_bug.cgi?id=4495 - https://lists.debian.org/debian-lts-announce/2019/03/msg00015.html - https://discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg0006
rg/t/vulnerabilities-found-in-libsdl-1-2-15/25720 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html - https://security.gentoo.org/glsa/201909-07 - https://usn.ubuntu.com/4156-1/ - https://usn.ubuntu.com/4156-2/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ - https://lists.debian.org/debian-lts
ckage-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html - https://security.gentoo.org/glsa/202305-17
CVE ID: CVE-2019-7573 State: PUBLISHED Published: 2019-02-07T00:00:00 Last Updated: 2024-08-04T20:54:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/03/msg00016.html - https://bugzilla.libsdl.org/show_bug.cgi?id=4491 - https://lists.debian.org/debian-lts-announce/2019/03/msg00015.html - https://discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720 - http://lists.opensuse.org/opensuse
.html - https://discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html - https://security.gentoo.org/glsa/201909-07 - https://usn.ubuntu.com/4156-1/ - https://usn.ubuntu.com/4156-2/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ - h
fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html - https://security.gentoo.org/glsa/202305-17
CVE ID: CVE-2019-7574 State: PUBLISHED Published: 2019-02-07T00:00:00 Last Updated: 2024-08-04T20:54:27.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/03/msg00016.html - https://bugzilla.libsdl.org/show_bug.cgi?id=4496 - https://lists.debian.org/debian-lts-announce/2019/03/msg00015.html - https://discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720 - http://lists.opensuse.org/opensuse-security-announce/2019
se.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html - https://security.gentoo.org/glsa/201909-07 - https://usn.ubuntu.com/4156-1/ - https://usn.ubuntu.com/4156-2/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ - https://lists.debian.org
ves/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html - https://security.gentoo.org/glsa/202305-17