Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-8448 State: PUBLISHED Published: 2019-08-13T14:39:56.841578Z Last Updated: 2024-09-16T22:20:34.740Z Vendors: Atlassian Products: Jira Problem Types: Information Exposure Description: The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69797
CVE ID: CVE-2019-8449 State: PUBLISHED Published: 2019-09-11T13:56:26.301421Z Last Updated: 2024-09-17T01:01:03.580Z Vendors: Atlassian Products: Jira Problem Types: Information Exposure Description: The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69796 - http://packetstormsecurity.com/files/156172/Jira-8.3.4-Information-Disclosure.html
CVE ID: CVE-2019-8450 State: PUBLISHED Published: 2019-09-11T13:56:26.352487Z Last Updated: 2024-09-16T19:50:40.011Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permission to manage custom fields to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a custom field. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69795
CVE ID: CVE-2019-8451 State: PUBLISHED Published: 2019-09-11T13:56:26.397882Z Last Updated: 2024-09-16T19:14:27.449Z Vendors: Atlassian Products: Jira Problem Types: Server-Side Request Forgery (SSRF) Description: The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69793
CVE ID: CVE-2019-8452 State: PUBLISHED Published: 2019-04-22T21:43:19 Last Updated: 2024-08-04T21:17:31.550Z Vendors: Check Point ZoneAlarm Products: Check Point ZoneAlarm, Check Point Endpoint Security client for Windows Problem Types: CWE-65 Description: A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/sof
r privileges to the file. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960 - https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012 - http://packetstormsecurity.com/files/154754/CheckPoint-Endpoint-Security-Client-ZoneAlarm-Privilege-Escalation.html
CVE ID: CVE-2019-8453 State: PUBLISHED Published: 2019-04-17T14:06:40 Last Updated: 2024-08-04T21:17:31.426Z Vendors: n/a Products: Check Point ZoneAlarm Problem Types: CWE-114 Description: Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960 - http://www.securityfocus.com/bid/108029
CVE ID: CVE-2019-8454 State: PUBLISHED Published: 2019-04-29T15:10:15 Last Updated: 2024-08-04T21:17:31.447Z Vendors: Check Point Products: Check Point Endpoint Security client for Windows Problem Types: CWE-65 Description: A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk
ences: - https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012
CVE ID: CVE-2019-8455 State: PUBLISHED Published: 2019-04-17T14:05:54 Last Updated: 2024-08-04T21:17:31.568Z Vendors: n/a Products: Check Point ZoneAlarm Problem Types: CWE-65 Description: A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960 - http://www.securityfocus.com/bid/108029
CVE ID: CVE-2019-8456 State: PUBLISHED Published: 2019-04-09T20:44:32 Last Updated: 2024-08-04T21:17:31.589Z Vendors: Check Point Products: Check Point IPsec VPN Problem Types: CWE-284 Description: Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk149892
CVE ID: CVE-2019-8457 State: PUBLISHED Published: 2019-05-30T15:51:52 Last Updated: 2024-08-04T21:17:31.585Z Vendors: n/a Products: SQLite Problem Types: CWE-125 Description: SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4004-1/ - https://usn.ubuntu.com/4004-2/ - https://usn.ubuntu.com/4019-1/ - https://usn.ubuntu.com/4019-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA4
msg00074.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.sqlite.org/src/info/90acdbfce9c08858 - https://www.sqlite.org/releaselog/3_28_0.html - https://security.netapp.com/advisory/ntap-20190606-0002/ - https://kc
- https://www.sqlite.org/releaselog/3_28_0.html - https://security.netapp.com/advisory/ntap-20190606-0002/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2019-8458 State: PUBLISHED Published: 2019-06-20T16:44:33 Last Updated: 2024-08-04T21:17:31.415Z Vendors: Check Point Products: Check Point Endpoint Security Client for Windows, Anti-Malware blade Problem Types: CWE-114 Description: Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate. Additional Analyst Notes: - CVE Program Container: References: - h
tain circumstances may cause the client to terminate. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053
CVE ID: CVE-2019-8459 State: PUBLISHED Published: 2019-06-20T16:50:58 Last Updated: 2024-08-04T21:17:31.581Z Vendors: Check Point Products: Check Point Endpoint Security Client for Windows, VPN blade Problem Types: CWE-428 Description: Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124972#Resolved
ps://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124972#Resolved%20Issues
CVE ID: CVE-2019-8460 State: PUBLISHED Published: 2019-08-26T19:18:49 Last Updated: 2024-08-04T21:17:31.425Z Vendors: n/a Products: OpenBSD Problem Types: CWE-1049 Description: OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openbsd/src/commit/ed8fdce754a5d8d14c09e989d8877707bd43906f - https://ftp.openbsd.org/pub/OpenBSD/patches/6.5/common/006_tcpsack.patch.sig - https://security.netapp.com/advisory/ntap-20190905-0001/ - https://research.checkpoint.com
ommon/006_tcpsack.patch.sig - https://security.netapp.com/advisory/ntap-20190905-0001/ - https://research.checkpoint.com/tcp-sack-security-issue-in-openbsd-cve-2019-8460/ - https://us-cert.cisa.gov/ics/advisories/icsa-19-253-03
CVE ID: CVE-2019-8461 State: PUBLISHED Published: 2019-08-29T20:41:54 Last Updated: 2024-08-04T21:17:31.435Z Vendors: n/a Products: Check Point Endpoint Security Initial Client for Windows Problem Types: CWE-114 Description: Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsoluti
VE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160812 - https://safebreach.com/Post/Check-Point-Endpoint-Security-Initial-Client-for-Windows-Privilege-Escalation-to-SYSTEM
CVE ID: CVE-2019-8462 State: PUBLISHED Published: 2019-10-02T16:37:41 Last Updated: 2024-08-04T21:17:31.570Z Vendors: n/a Products: Check Point Security Gateway Problem Types: CWE-755 Description: In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161812 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152
CVE ID: CVE-2019-8463 State: PUBLISHED Published: 2019-12-23T18:18:50 Last Updated: 2024-08-04T21:17:31.349Z Vendors: Check Point Products: Check Point Endpoint Security Client for Windows Problem Types: CWE-59 Description: A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard locations. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/solutions?id=sk163578
CVE ID: CVE-2019-8502 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.425Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to initiate a Dictation request without user authorization Description: An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to initiate a Dictation request without user authorization. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT2
Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602
CVE ID: CVE-2019-8503 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.404Z Vendors: Apple Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: A malicious website may be able to execute scripts in the context of another website Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https:/
- CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209603 - https://support.apple.com/HT209604 - https://support.apple.com/HT209605
CVE ID: CVE-2019-8504 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.430Z Vendors: Apple Products: iOS, macOS Problem Types: A local user may be able to read kernel memory Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A local user may be able to read kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209600
CVE ID: CVE-2019-8505 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.413Z Vendors: Apple Products: iOS, Safari Problem Types: Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209603
CVE ID: CVE-2019-8506 State: PUBLISHED Published: 2019-12-18T17:33:16.000Z Last Updated: 2025-10-21T23:35:55.429Z Vendors: Apple Products: iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com
ion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209603 - https://support.apple.com/HT209604 - https://support.apple.com/HT209605 - https://support.apple.com/HT209602
CVE ID: CVE-2019-8507 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.429Z Vendors: Apple Products: macOS Problem Types: Processing malicious data may lead to unexpected application termination Description: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malicious data may lead to unexpected application termination. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209600
CVE ID: CVE-2019-8508 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.434Z Vendors: Apple Products: macOS Problem Types: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209600
CVE ID: CVE-2019-8509 State: PUBLISHED Published: 2020-10-27T19:23:35 Last Updated: 2024-08-04T21:17:31.375Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to elevate privileges Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A malicious application may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210634 - https://support.apple.com/en-us/HT210722
CVE ID: CVE-2019-8510 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.382Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to determine kernel memory layout Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple
CVE ID: CVE-2019-8511 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.359Z Vendors: Apple Products: iOS, macOS, watchOS Problem Types: A malicious application may be able to elevate privileges Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A malicious application may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602
CVE ID: CVE-2019-8512 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.580Z Vendors: Apple Products: iOS Problem Types: A user may authorize an enterprise administrator to remotely wipe their device without appropriate disclosure Description: This issue was addressed with improved transparency. This issue is fixed in iOS 12.2. A user may authorize an enterprise administrator to remotely wipe their device without appropriate disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599
CVE ID: CVE-2019-8513 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.435Z Vendors: Apple Products: macOS Problem Types: A local user may be able to execute arbitrary shell commands Description: This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209600
CVE ID: CVE-2019-8514 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.405Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to gain elevated privileges Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602
CVE ID: CVE-2019-8515 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.419Z Vendors: Apple Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may disclose sensitive user information Description: A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - ht
er information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209603 - https://support.apple.com/HT209604 - https://support.apple.com/HT209605
CVE ID: CVE-2019-8516 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.573Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: Processing a maliciously crafted string may lead to a denial of service Description: A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602
CVE ID: CVE-2019-8517 State: PUBLISHED Published: 2019-12-18T17:33:16 Last Updated: 2024-08-04T21:17:31.453Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted font may result in the disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.app
pport.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602